last executing test programs: 1m22.944043865s ago: executing program 0 (id=353): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x2, &(0x7f0000002880)=ANY=[], 0x0, 0x0, 0x0) getpeername$qrtr(r1, &(0x7f0000000200), 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x26, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) lremovexattr(0x0, 0x0) r3 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1m17.853808763s ago: executing program 0 (id=368): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x2) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.076969789s ago: executing program 0 (id=381): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x3, 0xe, 0x1f, 0x6b, 0x0}) 1m14.838968845s ago: executing program 0 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m13.974683019s ago: executing program 0 (id=384): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x66020000) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x1d, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x7fff, 0x5, 0xd, 0x5, "db060475ea0d8318470c9faddcb12e3a88cae5eb3084c7f199c0fc06bf18d00ae592813c6cb76ba83322095b3803ad537e00f8ab580c7561ac7ce9f88b103b31", "74631679e4037f8f7700645bb83d08d4380e4adb7fd6268a14becdb80c44e421", [0x3ff, 0xff]}) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) creat(0x0, 0x6b) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m11.861147206s ago: executing program 0 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) clock_gettime(0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0) fallocate(r2, 0x8, 0xffffffff, 0x7f) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 1m11.320339671s ago: executing program 32 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) clock_gettime(0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0) fallocate(r2, 0x8, 0xffffffff, 0x7f) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 15.006609093s ago: executing program 3 (id=655): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000002000000020000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_getscheduler(r1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000040)=""/84}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) write(r4, &(0x7f0000000040)="1c000000210025123510dbda164216270bdc3e51b667ff0003", 0x19) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) 14.056811889s ago: executing program 3 (id=657): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 12.859906101s ago: executing program 3 (id=662): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0xe, 0x9e, 0x0, 0x0, 0xffffffff, 0xa41ef7c}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.935147346s ago: executing program 3 (id=664): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xbf7ecaf90944b16) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, &(0x7f00000002c0)=0xff) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x162281) r4 = dup2(r0, r0) read$char_usb(r4, &(0x7f00000000c0)=""/192, 0xc0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x4, 0x0) 10.349981719s ago: executing program 1 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) 10.137614435s ago: executing program 4 (id=673): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 8.672010195s ago: executing program 2 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x5}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) 8.522909079s ago: executing program 4 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 8.100521431s ago: executing program 1 (id=676): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10201) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) 7.632794263s ago: executing program 5 (id=678): socket(0x2, 0x3, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close(0x3) 6.909856833s ago: executing program 4 (id=679): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x544c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 6.676067909s ago: executing program 5 (id=680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x350, 0x4f, 0xeb, 0x27, 0x8, 0x2040, 0x9941, 0x93b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0xe7, 0x2, 0x1, 0xa9, 0x5b, 0x27, 0x7, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x80, 0xd6, 0x2}}]}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup, r3, 0x35, 0x0, r3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x40000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000007c0)={r3, &(0x7f00000006c0)='\x00', 0x1, &(0x7f0000000700)={@align=0x81, {0x6, 0x3, 0x8, 0x7}}, 0x200, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0xa5}) openat$cgroup_ro(r5, &(0x7f0000000800)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r7, 0x1}}, 0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b15, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000840)={0xa, 0x4, 0xfa00, {r7}}, 0xc) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, 0x0, 0x0) 6.64517189s ago: executing program 2 (id=681): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) 6.470470355s ago: executing program 2 (id=682): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'gre0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) 5.903727111s ago: executing program 3 (id=683): write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000007c0)) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000d00)={[{@adaptive_mode}, {}, {@acl}, {@fault_injection}, {@alloc_mode_reuse}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x80000000}}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x40000005}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, 'noinline_xattr'}}, {@dont_appraise}, {@fowner_gt}]}, 0x1, 0x5569, &(0x7f0000005580)="$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") 5.435607843s ago: executing program 2 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.557178727s ago: executing program 2 (id=685): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 4.413656811s ago: executing program 4 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) 3.289340271s ago: executing program 2 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=r0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bd, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.273722212s ago: executing program 4 (id=688): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5512, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 3.228005233s ago: executing program 5 (id=689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) unshare(0x22020400) sendmmsg$inet(r0, 0x0, 0x0, 0xc080) 3.020064349s ago: executing program 5 (id=690): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 2.910657191s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x5}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) 2.882972112s ago: executing program 1 (id=692): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) 2.603979409s ago: executing program 3 (id=693): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x7, 0x8, 0x800}, 0x9, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e1, 0xfffffc00, 0xc, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readahead(0xffffffffffffffff, 0x9, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xfe46) clock_nanosleep(0xa, 0x0, 0x0, 0x0) 2.603818929s ago: executing program 1 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) 1.219041387s ago: executing program 1 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) clock_gettime(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.124656s ago: executing program 5 (id=696): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x544c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 258.891773ms ago: executing program 1 (id=697): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4008885}, 0x4080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a"], 0x40}, 0x20008024) 0s ago: executing program 4 (id=698): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0xa) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.519303][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.529206][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.537247][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.546728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.555865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.564464][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.571507][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.590415][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.610974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.620131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.629099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.638579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.647471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.669523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.678211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.702725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.745485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.754400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.765858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.774472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.783339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.798066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.806706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.815350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.823541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.831968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.841754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.851087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.868996][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.881028][ T4192] device veth0_vlan entered promiscuous mode [ 55.888839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.897459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.912163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.920796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.942977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.955756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.969652][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.980365][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.999254][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.008445][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.017082][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.026005][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.048910][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.065812][ T4192] device veth1_vlan entered promiscuous mode [ 56.082879][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.107386][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.116004][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.179895][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.203219][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.212020][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.220351][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.229666][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.243437][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.261200][ T4192] device veth0_macvtap entered promiscuous mode [ 56.270333][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.279205][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.292184][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.309445][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.320573][ T4192] device veth1_macvtap entered promiscuous mode [ 56.327783][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 56.334491][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 56.340592][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.347639][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 56.354335][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 56.354397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.360395][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 56.368969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.382449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.391676][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.398837][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.407407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.415065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.422493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.431646][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.440797][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.449298][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456365][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.487164][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.500831][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.548246][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.556993][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.566023][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.575243][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.583482][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.592167][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.601264][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.609916][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.620193][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.639034][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.651592][ T4194] device veth0_vlan entered promiscuous mode [ 56.659578][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.670064][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.690895][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.702413][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.714671][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.723096][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.741600][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.750381][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.759101][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.767667][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.776266][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.784537][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.792094][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.803275][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.816099][ T4194] device veth1_vlan entered promiscuous mode [ 56.827256][ T4186] device veth0_vlan entered promiscuous mode [ 56.844604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.852890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.865642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.876779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.885716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.893367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.923030][ T4186] device veth1_vlan entered promiscuous mode [ 56.934568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.942951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.953021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.961957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.974967][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.984535][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.993231][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.002223][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.016151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.025308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.054568][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.070055][ T4194] device veth0_macvtap entered promiscuous mode [ 57.078562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.087025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.095794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.112848][ T4186] device veth0_macvtap entered promiscuous mode [ 57.132262][ T4194] device veth1_macvtap entered promiscuous mode [ 57.149323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.157502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.166939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.175814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.185313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.193440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.201818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.210125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.233382][ T4186] device veth1_macvtap entered promiscuous mode [ 57.247911][ T4185] device veth0_vlan entered promiscuous mode [ 57.269807][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.281435][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.301090][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.315455][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.326212][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.336101][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.347907][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.358935][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.368988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.377557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.386401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.396168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.405613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.415254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.423795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.450607][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.461631][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.474066][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.483413][ T4185] device veth1_vlan entered promiscuous mode [ 57.500148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.509207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.518262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.535556][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.546495][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.555891][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.564670][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.575892][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.586945][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.596894][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.607676][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.619385][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.631228][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.644232][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.651891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.663622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.672560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.683917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.691586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.701049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.712993][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.721906][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.730810][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.739737][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.752876][ T4190] device veth0_vlan entered promiscuous mode [ 57.778747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.786956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.823570][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.832551][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.847662][ T427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.851663][ T4190] device veth1_vlan entered promiscuous mode [ 57.872581][ T427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.878160][ T4185] device veth0_macvtap entered promiscuous mode [ 57.911248][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.919907][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.943091][ T4185] device veth1_macvtap entered promiscuous mode [ 57.998842][ T3089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.000085][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.026127][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.027962][ T3089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.037852][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.054287][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.064866][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.075996][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.087658][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.110227][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.110803][ T4190] device veth0_macvtap entered promiscuous mode [ 58.124491][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.133017][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.141305][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.150155][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.158797][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.168750][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.177270][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.186462][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.194338][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.204691][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.218715][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.230427][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.259747][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.271409][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.282122][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.297707][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.313381][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.404437][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 58.409387][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 58.410773][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 58.417929][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.423011][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 58.439325][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 58.830040][ T4190] device veth1_macvtap entered promiscuous mode [ 58.855022][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.874144][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.891621][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.925223][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.938799][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.945513][ T4262] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.974082][ T3089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.981922][ T3089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.000573][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.019161][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.031305][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.049683][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.060661][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.077870][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.092468][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.103116][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.114539][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.126226][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.135145][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.143642][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.167087][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.177741][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.187716][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.198656][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.208790][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.219572][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.234251][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.244720][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.255833][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.266029][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.276759][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.285990][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.295315][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.326993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.342983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.377319][ T4174] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 59.387576][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.415549][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.431701][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.464682][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.482710][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.514260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.618466][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.634223][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.650898][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.667074][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.689284][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.730940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.763053][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.788949][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.814973][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.838891][ T4174] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.129815][ T4174] usb 4-1: not running at top speed; connect to a high speed hub [ 60.475134][ T4174] usb 4-1: config 12 has an invalid interface number: 231 but max is 0 [ 60.485248][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 60.493855][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 60.495835][ T4174] usb 4-1: config 12 has no interface number 0 [ 60.539770][ T4174] usb 4-1: config 12 interface 231 has no altsetting 0 [ 60.560327][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 60.569585][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 60.589371][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 60.688153][ T4272] loop2: detected capacity change from 0 to 32768 [ 60.724262][ T4226] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.735880][ T4174] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 60.746331][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.754786][ T4174] usb 4-1: Product: syz [ 60.755301][ T4272] ======================================================= [ 60.755301][ T4272] WARNING: The mand mount option has been deprecated and [ 60.755301][ T4272] and is ignored by this kernel. Remove the mand [ 60.755301][ T4272] option from the mount to silence this warning. [ 60.755301][ T4272] ======================================================= [ 60.759143][ T4174] usb 4-1: Manufacturer: syz [ 60.811545][ T4174] usb 4-1: SerialNumber: syz [ 60.900888][ T4272] JBD2: Ignoring recovery information on journal [ 60.958032][ T4272] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 61.013936][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 61.074124][ T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.101848][ T4266] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 61.111630][ T4266] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7'. [ 61.128715][ T4266] udc-core: couldn't find an available UDC or it's busy [ 61.134112][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.137114][ T4266] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.162767][ T4226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.250128][ T4272] syz.2.3 (4272) used greatest stack depth: 20408 bytes left [ 61.332888][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 61.344624][ T4226] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.362464][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.382474][ T4226] usb 2-1: Product: syz [ 61.391025][ T4226] usb 2-1: Manufacturer: syz [ 61.404253][ T4174] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 61.404713][ T4226] usb 2-1: SerialNumber: syz [ 61.476638][ T4174] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 61.525212][ T4174] dib0700: firmware download failed at 7 with -71 [ 61.566220][ T21] usb 5-1: config index 0 descriptor too short (expected 897, got 27) [ 61.578132][ T21] usb 5-1: config 2 has an invalid interface number: 1 but max is -1 [ 61.586310][ T21] usb 5-1: config 2 has an invalid interface number: 1 but max is -1 [ 61.594445][ T21] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 61.603318][ T21] usb 5-1: config 2 has no interface number 0 [ 61.615254][ T4174] usb 4-1: USB disconnect, device number 2 [ 62.317384][ T4226] usb 2-1: 0:2 : does not exist [ 62.374032][ T21] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 62.383125][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.403948][ T21] usb 5-1: Product: syz [ 62.416221][ T4226] usb 2-1: USB disconnect, device number 2 [ 62.422693][ T21] usb 5-1: Manufacturer: syz [ 62.434251][ T21] usb 5-1: SerialNumber: syz [ 63.456861][ T4309] loop2: detected capacity change from 0 to 32768 [ 63.485196][ T21] cdc_ncm 5-1:2.1: CDC Union missing and no IAD found [ 63.492707][ T21] cdc_ncm 5-1:2.1: bind() failure [ 63.527541][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.541458][ T21] usb 5-1: no audio or video endpoints found [ 63.556150][ T4309] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 63.576618][ T21] usb 5-1: USB disconnect, device number 2 [ 63.842196][ T26] audit: type=1326 audit(1777485357.388:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 64.110650][ T4322] loop0: detected capacity change from 0 to 64 [ 64.552264][ T26] audit: type=1326 audit(1777485357.388:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 64.576941][ T26] audit: type=1326 audit(1777485357.388:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 64.658560][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 65.563754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.583751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.593736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.603738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.613737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.623746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.633741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.643743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.653768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 65.663747][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.077324][ T26] audit: type=1326 audit(1777485357.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 66.130030][ T26] audit: type=1326 audit(1777485357.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 67.708280][ T26] audit: type=1326 audit(1777485357.388:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 68.006518][ T26] audit: type=1326 audit(1777485357.388:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 68.029148][ T26] audit: type=1326 audit(1777485357.388:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 68.051777][ T26] audit: type=1326 audit(1777485357.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 68.074477][ T26] audit: type=1326 audit(1777485357.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97e726dd9 code=0x7ffc0000 [ 68.857716][ T4361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.289765][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294307][ T4385] fuse: Bad value for 'fd' [ 71.296445][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.700101][ T4394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 72.716565][ T4394] loop4: detected capacity change from 0 to 512 [ 73.311281][ T4394] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.662698][ T4405] loop1: detected capacity change from 0 to 512 [ 73.773836][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.799690][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.831536][ T4405] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.862284][ T4397] loop0: detected capacity change from 0 to 32768 [ 73.892822][ T4397] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.33 (4397) [ 73.923851][ T4196] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.932233][ T4397] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 73.967935][ T4397] BTRFS info (device loop0): using free space tree [ 73.978062][ T4395] loop2: detected capacity change from 0 to 32768 [ 73.985061][ T4397] BTRFS info (device loop0): has skinny extents [ 74.036987][ T4395] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.32 (4395) [ 74.087960][ T4395] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 74.134508][ T4395] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.174524][ T4299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.187497][ T4397] BTRFS info (device loop0): enabling ssd optimizations [ 74.194829][ T4196] usb 5-1: Using ep0 maxpacket: 32 [ 74.209657][ T4299] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.218920][ T4395] BTRFS info (device loop2): use zstd compression, level 3 [ 74.265729][ T4395] BTRFS info (device loop2): using free space tree [ 74.285993][ T4395] BTRFS info (device loop2): has skinny extents [ 74.339577][ T4196] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 74.361463][ T4196] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.388588][ T4196] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 74.410183][ T4196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.463891][ T4299] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.473079][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.560081][ T4196] usb 5-1: config 0 descriptor?? [ 74.846802][ T4395] BTRFS info (device loop2): enabling ssd optimizations [ 75.113805][ T4299] usb 4-1: SerialNumber: syz [ 75.139883][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 75.139897][ T26] audit: type=1800 audit(1777485368.688:14): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 75.439882][ T4299] usb 4-1: 0:2 : does not exist [ 75.552427][ T4299] usb 4-1: USB disconnect, device number 3 [ 75.558485][ T4196] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.853863][ T4196] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.903896][ T4196] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.933153][ T4196] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.935217][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.949703][ T4196] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.999659][ T4196] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 76.425291][ T4196] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-110) [ 76.442544][ T4196] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -110 [ 76.717643][ T4196] usb 5-1: USB disconnect, device number 3 [ 77.249489][ T4489] loop2: detected capacity change from 0 to 4096 [ 77.299286][ T4486] fido_id[4486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 79.962326][ T4196] Bluetooth: hci0: command 0x1407 tx timeout [ 80.175618][ T4503] process 'syz.1.45' launched './file0' with NULL argv: empty string added [ 80.320036][ T4506] loop4: detected capacity change from 0 to 512 [ 80.969716][ T4506] EXT4-fs (loop4): Ignoring removed orlov option [ 80.976237][ T4506] EXT4-fs (loop4): Ignoring removed bh option [ 81.052888][ T4506] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.082881][ T4506] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.44: bg 0: block 248: padding at end of block bitmap is not set [ 81.114495][ T4506] Quota error (device loop4): write_blk: dquota write failed [ 81.122091][ T4506] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 81.132021][ T4506] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.44: Failed to acquire dquot type 1 [ 81.343789][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.930950][ T1107] cfg80211: failed to load regulatory.db [ 81.956755][ T4506] EXT4-fs (loop4): 1 truncate cleaned up [ 81.970140][ T4506] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=inode,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,bh,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 82.047096][ T4499] EXT4-fs (loop4): shut down requested (2) [ 82.054893][ T4499] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 82.164359][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 83.183075][ T4499] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 85.364293][ T4523] loop0: detected capacity change from 0 to 32768 [ 85.373653][ T21] usb 3-1: device descriptor read/all, error -71 [ 85.844906][ T4524] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 87.133583][ T4527] tipc: Started in network mode [ 87.176644][ T4527] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 87.191842][ T4527] tipc: Enabled bearer , priority 10 [ 87.562623][ T4540] loop4: detected capacity change from 0 to 16 [ 87.658370][ T4540] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 88.205570][ T4462] tipc: Node number set to 4269801492 [ 88.509275][ T4553] binder_alloc: 4552: pid 4552 spamming oneway? 1 buffers allocated for a total size of 5184 [ 89.329108][ T4574] tipc: Enabling of bearer rejected, already enabled [ 89.876872][ T4474] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.123916][ T4474] usb 2-1: Using ep0 maxpacket: 16 [ 90.244466][ T4474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.263918][ T4474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.283863][ T4474] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 90.303670][ T4474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.479077][ T4474] usb 2-1: config 0 descriptor?? [ 91.530712][ T4605] lo speed is unknown, defaulting to 1000 [ 91.537104][ T4605] lo speed is unknown, defaulting to 1000 [ 91.551034][ T4605] lo speed is unknown, defaulting to 1000 [ 91.571662][ T4605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.601007][ T4605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.256659][ T4605] lo speed is unknown, defaulting to 1000 [ 92.284634][ T4605] lo speed is unknown, defaulting to 1000 [ 92.328130][ T4605] lo speed is unknown, defaulting to 1000 [ 92.355321][ T4605] lo speed is unknown, defaulting to 1000 [ 92.378521][ T4605] lo speed is unknown, defaulting to 1000 [ 92.441336][ T4615] fuse: Unknown parameter 'user_i00000000000000000000' [ 93.283890][ T4474] usbhid 2-1:0.0: can't add hid device: -71 [ 93.352510][ T4474] usbhid: probe of 2-1:0.0 failed with error -71 [ 93.423429][ C1] sd 0:0:1:0: tag#7327 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 93.433419][ C1] sd 0:0:1:0: tag#7327 CDB: Read(6) 08 00 00 00 00 00 [ 93.451119][ T4474] usb 2-1: USB disconnect, device number 3 [ 97.505323][ T4663] loop1: detected capacity change from 0 to 40427 [ 97.547186][ T4669] device syzkaller0 entered promiscuous mode [ 97.585261][ T4663] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 97.593761][ T4663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.607723][ T4663] F2FS-fs (loop1): invalid crc value [ 97.689034][ T4663] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.764889][ T4677] loop3: detected capacity change from 0 to 4096 [ 97.797907][ T4663] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.805918][ T4663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.549828][ T4700] loop1: detected capacity change from 0 to 128 [ 102.314818][ T4719] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 102.623838][ T4475] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 102.857141][ T26] audit: type=1326 audit(1777485396.268:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 102.881011][ T2286] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.165819][ T26] audit: type=1326 audit(1777485396.268:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.219393][ T26] audit: type=1326 audit(1777485396.348:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.242108][ T26] audit: type=1326 audit(1777485396.348:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.273841][ T26] audit: type=1326 audit(1777485396.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.339345][ T26] audit: type=1326 audit(1777485396.368:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.367329][ T26] audit: type=1326 audit(1777485396.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.395972][ T26] audit: type=1326 audit(1777485396.368:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.444117][ T2286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.499902][ T26] audit: type=1326 audit(1777485396.378:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.533921][ T4475] usb 3-1: not running at top speed; connect to a high speed hub [ 103.572526][ T26] audit: type=1326 audit(1777485396.378:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26afa56dd9 code=0x7ffc0000 [ 103.594181][ T2286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.639522][ T4735] tipc: Started in network mode [ 103.644458][ T4735] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 103.655694][ T4475] usb 3-1: config 3 has no interfaces? [ 103.663173][ T4735] tipc: Enabled bearer , priority 10 [ 103.695343][ T2286] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.956135][ T2286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.128523][ T2286] usb 4-1: SerialNumber: syz [ 104.534173][ T4475] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 104.569009][ T4475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.637502][ T4475] usb 3-1: Product: syz [ 104.672604][ T4475] usb 3-1: Manufacturer: syz [ 104.706625][ T2286] usb 4-1: 0:2 : does not exist [ 104.711352][ T4475] usb 3-1: SerialNumber: syz [ 105.240033][ T2286] usb 4-1: USB disconnect, device number 4 [ 105.254589][ T4462] tipc: Node number set to 4269801492 [ 105.277024][ T4475] usb 3-1: can't set config #3, error -71 [ 105.365115][ T4475] usb 3-1: USB disconnect, device number 4 [ 105.524654][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.854409][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 107.665230][ T4765] team0: Port device team_slave_0 removed [ 107.900809][ T4786] tipc: Started in network mode [ 107.926338][ T4786] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 107.949072][ T4789] loop4: detected capacity change from 0 to 512 [ 107.950405][ T4786] tipc: Enabled bearer , priority 10 [ 108.032817][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 108.568490][ T4789] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 108.640425][ T4789] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.919398][ T4801] mmap: syz.0.129 (4801) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 108.949346][ T4228] tipc: Node number set to 4269801492 [ 109.384288][ T4474] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.304520][ T4474] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.341667][ T4474] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.450371][ T4474] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.654557][ T4474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.934153][ T4801] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.313786][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.769623][ T4462] usb 1-1: USB disconnect, device number 2 [ 112.860149][ T4840] loop3: detected capacity change from 0 to 256 [ 112.890267][ T4840] exfat: Deprecated parameter 'utf8' [ 112.900085][ T4840] exfat: Unknown parameter 'keep_last_dots' [ 113.029738][ T4837] xt_CT: No such helper "pptp" [ 114.143633][ T4848] loop3: detected capacity change from 0 to 32768 [ 114.243923][ T4228] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 114.251535][ T4228] usb 2-1: can't read configurations, error -71 [ 114.267870][ T4848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.495316][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 115.080432][ T4860] kAFS: No cell specified [ 115.510110][ T4850] sched: RT throttling activated [ 115.530016][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.933871][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 116.132156][ T4879] netlink: 68 bytes leftover after parsing attributes in process `syz.1.155'. [ 116.178459][ T4226] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 116.190604][ T4883] tipc: Enabling of bearer rejected, already enabled [ 116.194060][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.527665][ T4226] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 116.776909][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.933255][ T4226] usb 3-1: config 0 descriptor?? [ 117.791572][ T4228] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.214812][ T4226] usbhid 3-1:0.0: can't add hid device: -71 [ 118.222598][ T4226] usbhid: probe of 3-1:0.0 failed with error -71 [ 118.270914][ T4226] usb 3-1: USB disconnect, device number 5 [ 118.278238][ T4228] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 118.307939][ T4228] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 118.624904][ T4228] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 118.665753][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.718624][ T4228] usb 4-1: Product: syz [ 118.743742][ T4228] usb 4-1: Manufacturer: syz [ 118.773134][ T4228] usb 4-1: SerialNumber: syz [ 118.827776][ T4228] usb 4-1: config 0 descriptor?? [ 119.343930][ T4228] usb 4-1: can't set config #0, error -71 [ 119.383882][ T4228] usb 4-1: USB disconnect, device number 5 [ 119.487942][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 120.424233][ T4915] loop3: detected capacity change from 0 to 4096 [ 121.255583][ T4923] loop2: detected capacity change from 0 to 256 [ 121.354048][ T4924] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.396619][ T4923] FAT-fs (loop2): Directory bread(block 64) failed [ 121.443828][ T4923] FAT-fs (loop2): Directory bread(block 65) failed [ 121.469990][ T4923] FAT-fs (loop2): Directory bread(block 66) failed [ 121.510655][ T4923] FAT-fs (loop2): Directory bread(block 67) failed [ 121.533864][ T4923] FAT-fs (loop2): Directory bread(block 68) failed [ 121.540430][ T4923] FAT-fs (loop2): Directory bread(block 69) failed [ 121.593052][ T4923] FAT-fs (loop2): Directory bread(block 70) failed [ 121.630272][ T4923] FAT-fs (loop2): Directory bread(block 71) failed [ 121.654307][ T4923] FAT-fs (loop2): Directory bread(block 72) failed [ 121.661453][ T4923] FAT-fs (loop2): Directory bread(block 73) failed [ 123.473790][ T4196] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.517287][ T4953] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 123.723804][ T4196] usb 1-1: Using ep0 maxpacket: 16 [ 124.873976][ T4196] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.049849][ T4196] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.533970][ T4196] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 125.864386][ T4196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.900384][ T4196] usb 1-1: Product: syz [ 125.904935][ T4196] usb 1-1: Manufacturer: syz [ 125.909543][ T4196] usb 1-1: SerialNumber: syz [ 126.447947][ T4196] usb 1-1: config 0 descriptor?? [ 126.482361][ T4196] usb 1-1: can't set config #0, error -71 [ 126.549543][ T4196] usb 1-1: USB disconnect, device number 3 [ 128.191421][ T4998] capability: warning: `syz.1.189' uses 32-bit capabilities (legacy support in use) [ 132.877835][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884136][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.135293][ T5053] loop3: detected capacity change from 0 to 1024 [ 135.842222][ T5053] EXT4-fs (loop3): Ignoring removed orlov option [ 135.882290][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 136.986154][ T5069] loop3: detected capacity change from 0 to 1024 [ 137.124518][ T5069] hfsplus: can't free extent [ 137.427482][ T5074] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 137.443436][ T5081] loop3: detected capacity change from 0 to 128 [ 137.450183][ T5074] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.794356][ T4462] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.228405][ T4462] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.239068][ T4462] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.328957][ T4462] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.348540][ T4462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.504457][ T4462] usb 1-1: SerialNumber: syz [ 144.513996][ T4462] usb 1-1: can't set config #1, error -71 [ 144.515425][ T21] Bluetooth: hci3: command 0x2021 tx timeout [ 144.541557][ T4462] usb 1-1: USB disconnect, device number 4 [ 144.997814][ T5150] loop3: detected capacity change from 0 to 512 [ 147.592501][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 147.592515][ T26] audit: type=1326 audit(1777485441.138:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.2.236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66e2b5fdd9 code=0x0 [ 147.694029][ T5150] EXT4-fs (loop3): Ignoring removed orlov option [ 147.700500][ T5150] EXT4-fs (loop3): Ignoring removed bh option [ 147.722430][ T5150] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.731892][ T5150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.232: bg 0: block 248: padding at end of block bitmap is not set [ 147.747280][ T5150] Quota error (device loop3): write_blk: dquota write failed [ 147.755675][ T5150] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 147.765732][ T5150] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.232: Failed to acquire dquot type 1 [ 147.781500][ T5150] EXT4-fs (loop3): 1 truncate cleaned up [ 147.814760][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=inode,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,bh,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 147.850152][ T5144] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 147.894153][ T5144] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.232: Abort forced by user [ 147.904393][ T5144] EXT4-fs (loop3): Remounting filesystem read-only [ 147.910929][ T5144] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 147.918976][ T5144] ext4 filesystem being remounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.724213][ T4196] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.333939][ T4196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.356181][ T4196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.114037][ T4196] usb 1-1: string descriptor 0 read error: -71 [ 155.142927][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.147368][ T4196] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.172922][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.178041][ T4196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.202039][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.221275][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.253107][ T5232] device geneve2 entered promiscuous mode [ 155.339535][ T4196] usb 1-1: can't set config #1, error -71 [ 155.349466][ C1] sd 0:0:1:0: tag#7325 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 155.359500][ C1] sd 0:0:1:0: tag#7325 CDB: Read(6) 08 00 00 00 00 00 [ 155.367681][ C1] sd 0:0:1:0: tag#7326 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 155.369369][ T4196] usb 1-1: USB disconnect, device number 5 [ 155.377591][ C1] sd 0:0:1:0: tag#7326 CDB: Read(6) 08 00 00 00 00 00 [ 155.378306][ C1] sd 0:0:1:0: tag#7327 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 155.400123][ C1] sd 0:0:1:0: tag#7327 CDB: Read(6) 08 00 00 00 00 00 [ 155.453830][ C1] sd 0:0:1:0: tag#7328 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 155.463767][ C1] sd 0:0:1:0: tag#7328 CDB: Read(6) 08 00 00 00 00 00 [ 156.176309][ T5232] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.202824][ T5232] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.204981][ T5242] loop2: detected capacity change from 0 to 32768 [ 156.243741][ T5232] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.273062][ T5232] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 156.441906][ T5242] XFS (loop2): Mounting V5 Filesystem [ 156.675685][ T5264] overlayfs: failed to clone lowerpath [ 156.821906][ T5242] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 156.978815][ T5242] XFS (loop2): Starting recovery (logdev: internal) [ 157.006229][ T5242] XFS (loop2): Ending recovery (logdev: internal) [ 157.357791][ T5269] loop1: detected capacity change from 0 to 512 [ 157.911317][ T5269] EXT4-fs (loop1): Ignoring removed orlov option [ 157.917958][ T5269] EXT4-fs (loop1): Ignoring removed bh option [ 157.925357][ T4194] XFS (loop2): Unmounting Filesystem [ 157.939602][ T5269] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.949603][ T5269] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.266: bg 0: block 248: padding at end of block bitmap is not set [ 157.965473][ T5269] Quota error (device loop1): write_blk: dquota write failed [ 157.972913][ T5269] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 157.982988][ T5269] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.266: Failed to acquire dquot type 1 [ 158.006176][ T5269] EXT4-fs (loop1): 1 truncate cleaned up [ 158.016202][ T5269] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=inode,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,bh,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 158.051104][ T5267] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 158.137957][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.146680][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.172650][ T5267] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.266: Abort forced by user [ 158.184781][ T5267] EXT4-fs (loop1): Remounting filesystem read-only [ 158.191321][ T5267] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 158.198932][ T5267] ext4 filesystem being remounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.215235][ T5275] device bridge_slave_1 left promiscuous mode [ 158.233829][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.268614][ T5275] device bridge_slave_0 left promiscuous mode [ 158.294288][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.324947][ T5311] loop6: detected capacity change from 0 to 8 [ 160.596213][ T5322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.813817][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.143823][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 161.294712][ T21] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 161.324073][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.355203][ T21] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 161.397645][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.550244][ T21] usb 4-1: config 0 descriptor?? [ 162.034913][ T4475] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.244166][ T4462] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.424077][ T4475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 162.441784][ T4475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.458842][ T4475] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.512131][ T21] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 162.521003][ T21] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 162.528682][ T21] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 162.537331][ T21] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 162.544846][ T21] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 162.559497][ T21] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 162.680526][ T4462] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 162.974017][ T21] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-71) [ 163.104042][ T21] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -71 [ 163.214411][ T21] usb 4-1: USB disconnect, device number 6 [ 163.303482][ T4475] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 163.314470][ T4462] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.324911][ T4475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.333618][ T4475] usb 3-1: Product: syz [ 163.337870][ T4462] usb 1-1: config 0 has no interface number 0 [ 163.344083][ T4475] usb 3-1: Manufacturer: syz [ 163.348799][ T4475] usb 3-1: SerialNumber: syz [ 163.353752][ T4462] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 163.367418][ T4462] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 163.378457][ T4475] usb 3-1: config 0 descriptor?? [ 163.393944][ T4462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.425296][ T4475] adutux 3-1:0.0: interrupt endpoints not found [ 163.442441][ T4462] usb 1-1: config 0 descriptor?? [ 163.458984][ T5357] fido_id[5357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 163.968474][ T4462] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 164.005797][ T427] usb 1-1: Failed to submit usb control message: -71 [ 164.055081][ T427] usb 1-1: unable to send the bmi data to the device: -71 [ 164.063990][ T4462] usb 1-1: USB disconnect, device number 6 [ 164.096517][ T427] usb 1-1: unable to get target info from device [ 164.104582][ T427] usb 1-1: could not get target info (-71) [ 164.110561][ T427] usb 1-1: could not probe fw (-71) [ 165.132985][ T5386] loop2: detected capacity change from 0 to 7 [ 165.148276][ T4317] Dev loop2: unable to read RDB block 7 [ 165.159982][ T4317] loop2: unable to read partition table [ 165.166219][ T4317] loop2: partition table beyond EOD, truncated [ 165.210434][ T5386] Dev loop2: unable to read RDB block 7 [ 165.307946][ T5386] loop2: unable to read partition table [ 165.410034][ T5386] loop2: partition table beyond EOD, truncated [ 165.542155][ T5386] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ¶ ) failed (rc=-5) [ 165.870427][ T4226] usb 3-1: USB disconnect, device number 6 [ 165.993764][ T4462] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.056308][ T5409] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 166.071706][ T5409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 166.863748][ T4462] usb 1-1: Using ep0 maxpacket: 32 [ 166.890653][ T5422] input: syz1 as /devices/virtual/input/input5 [ 166.984531][ T4462] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.021328][ T4462] usb 1-1: config 0 has no interfaces? [ 167.863978][ T4462] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 167.895505][ T4462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.903534][ T4462] usb 1-1: Product: syz [ 167.950518][ T4462] usb 1-1: Manufacturer: syz [ 167.965792][ T4462] usb 1-1: SerialNumber: syz [ 167.986700][ T4462] usb 1-1: config 0 descriptor?? [ 168.117790][ T4462] usb 1-1: USB disconnect, device number 7 [ 168.155597][ T5449] tipc: Started in network mode [ 168.160507][ T5449] tipc: Node identity fab7ebc4601e, cluster identity 4711 [ 168.199101][ T5449] tipc: Enabled bearer , priority 0 [ 168.217722][ T5453] device syzkaller0 entered promiscuous mode [ 168.260259][ T5449] tipc: Resetting bearer [ 168.274917][ T5447] tipc: Resetting bearer [ 168.294397][ T5447] tipc: Disabling bearer [ 168.532733][ T4196] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.613622][ T5465] program syz.3.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.743822][ T4462] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.793976][ T4196] usb 3-1: Using ep0 maxpacket: 32 [ 170.809541][ T4462] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 171.583851][ T4196] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 171.598897][ T4196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.607130][ T4462] usb 1-1: unable to read config index 0 descriptor/all [ 171.614127][ T4196] usb 3-1: Product: syz [ 171.618474][ T4462] usb 1-1: can't read configurations, error -71 [ 171.624779][ T4196] usb 3-1: Manufacturer: syz [ 171.632094][ T4196] usb 3-1: config 0 descriptor?? [ 171.663002][ T4196] usb 3-1: can't set config #0, error -71 [ 171.707944][ T4196] usb 3-1: USB disconnect, device number 7 [ 172.123857][ T5508] loop1: detected capacity change from 0 to 32768 [ 173.110973][ T5508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.315923][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 174.054814][ T4462] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.293966][ T4462] usb 1-1: Using ep0 maxpacket: 32 [ 175.053955][ T4462] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 175.107125][ T4462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.154563][ T4462] usb 1-1: Product: syz [ 175.168146][ T4462] usb 1-1: Manufacturer: syz [ 175.173870][ T4462] usb 1-1: SerialNumber: syz [ 175.209658][ T4462] usb 1-1: config 0 descriptor?? [ 175.843876][ T4226] Bluetooth: hci2: command 0x0406 tx timeout [ 175.851058][ T4226] Bluetooth: hci1: command 0x0406 tx timeout [ 175.906154][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 175.945132][ T4226] Bluetooth: hci0: command 0x0406 tx timeout [ 176.036902][ T4462] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 176.046037][ T4462] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71 [ 176.070084][ T4462] usb 1-1: USB disconnect, device number 9 [ 176.717200][ T5565] loop3: detected capacity change from 0 to 32768 [ 178.498403][ T5565] (syz.3.364,5565,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 178.506580][ T5565] (syz.3.364,5565,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 179.042570][ T5586] binder_alloc: 5583: pid 5583 spamming oneway? 1 buffers allocated for a total size of 5312 [ 180.934202][ T5611] loop3: detected capacity change from 0 to 4096 [ 180.952407][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 181.058568][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 181.154714][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 181.185463][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 181.314489][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 181.660484][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 181.959464][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 183.949808][ T5656] loop3: detected capacity change from 0 to 32768 [ 184.097212][ T5656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.368789][ T4348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.766070][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 185.240226][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.247663][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.740118][ T5685] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 185.748442][ T5685] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 185.964608][ T5671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.996570][ T5671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.013954][ T21] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 186.123209][ T26] audit: type=1326 audit(1777485479.668:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.1.406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26afa56dd9 code=0x0 [ 186.311830][ T5671] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.320955][ T5671] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.330398][ T5671] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.340042][ T5671] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.446765][ T5671] syz.2.396 (5671) used greatest stack depth: 19952 bytes left [ 186.467529][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.492032][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.501694][ T5698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.512998][ T5698] device bridge_slave_0 left promiscuous mode [ 186.519433][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.527308][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.543329][ T5698] device bridge_slave_1 left promiscuous mode [ 186.552144][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.663398][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 186.676824][ T5698] bond0: (slave bond_slave_0): Releasing backup interface [ 186.690458][ T5698] bond0: (slave bond_slave_1): Releasing backup interface [ 186.726864][ T5698] team0: Port device team_slave_0 removed [ 186.743878][ T5698] team0: Port device team_slave_1 removed [ 186.750007][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.757600][ T21] usb 4-1: config 12 has an invalid interface number: 231 but max is 0 [ 186.765961][ T21] usb 4-1: config 12 has no interface number 0 [ 186.772115][ T21] usb 4-1: config 12 interface 231 has no altsetting 0 [ 186.787642][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.798570][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.806037][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.822156][ T5699] team0: Mode changed to "activebackup" [ 186.844290][ T4348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.887222][ T5708] tipc: Started in network mode [ 186.892217][ T5708] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 186.902249][ T5708] tipc: Enabled bearer , priority 10 [ 186.949940][ T4348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.981029][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 186.996375][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.011599][ T21] usb 4-1: Product: syz [ 187.016144][ T21] usb 4-1: Manufacturer: syz [ 187.041109][ T21] usb 4-1: SerialNumber: syz [ 187.109786][ T4348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.214907][ T5718] bond0 speed is unknown, defaulting to 1000 [ 187.240743][ T5718] bond0 speed is unknown, defaulting to 1000 [ 187.288192][ T5718] bond0 speed is unknown, defaulting to 1000 [ 187.355889][ T5693] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 187.398870][ T5693] netlink: 76 bytes leftover after parsing attributes in process `syz.3.403'. [ 187.453608][ T5693] udc-core: couldn't find an available UDC or it's busy [ 187.465171][ T5682] chnl_net:caif_netlink_parms(): no params data found [ 187.526686][ T5693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.534858][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 187.658649][ T26] audit: type=1326 audit(1777485481.208:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.2.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66e2b5fdd9 code=0x0 [ 187.721360][ T4348] tipc: Disabling bearer [ 187.752390][ T4348] tipc: Left network mode [ 187.915583][ T5752] tipc: Enabling of bearer rejected, already enabled [ 187.922897][ T5718] infiniband sy‡1: set down [ 187.932357][ T5718] infiniband sy‡1: added bond0 [ 187.934032][ T21] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 187.943262][ T4475] bond0 speed is unknown, defaulting to 1000 [ 187.960350][ T21] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 187.965567][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.004036][ T21] dib0700: firmware download failed at 7 with -71 [ 188.017273][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.024493][ T21] usb 4-1: USB disconnect, device number 7 [ 188.051141][ T5682] device bridge_slave_0 entered promiscuous mode [ 188.092589][ T5718] RDS/IB: sy‡1: added [ 188.098223][ T4228] tipc: Node number set to 4269801492 [ 188.116343][ T5718] smc: adding ib device sy‡1 with port count 1 [ 188.124312][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.131835][ T5718] smc: ib device sy‡1 port 1 has pnetid [ 188.138625][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.152730][ T5682] device bridge_slave_1 entered promiscuous mode [ 188.166385][ T4196] bond0 speed is unknown, defaulting to 1000 [ 188.221705][ T5718] bond0 speed is unknown, defaulting to 1000 [ 188.254775][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.281160][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.362463][ T5682] team0: Port device team_slave_0 added [ 188.377417][ T5682] team0: Port device team_slave_1 added [ 188.397586][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.404701][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.431264][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.456254][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.463268][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.529064][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.924652][ T5682] device hsr_slave_0 entered promiscuous mode [ 188.941961][ T5682] device hsr_slave_1 entered promiscuous mode [ 188.952254][ T5682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.962764][ T5682] Cannot create hsr debugfs directory [ 188.969518][ T5718] bond0 speed is unknown, defaulting to 1000 [ 189.305237][ T5718] bond0 speed is unknown, defaulting to 1000 [ 189.563039][ T5796] tipc: Enabled bearer , priority 10 [ 189.606357][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 189.790685][ T26] audit: type=1326 audit(1777485483.338:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.1.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26afa56dd9 code=0x0 [ 190.969839][ T5718] bond0 speed is unknown, defaulting to 1000 [ 190.985301][ T23] tipc: Node number set to 2594827204 [ 191.096929][ T5682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.143202][ T5682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.455906][ T5682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.683842][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 191.729464][ T5682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.133395][ T5718] bond0 speed is unknown, defaulting to 1000 [ 192.195762][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.232126][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.254024][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.286546][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.309447][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.345163][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.354486][ T4299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.394295][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.401385][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.438454][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.603758][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 192.734405][ T4299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.791741][ T4299] usb 2-1: config 0 has no interfaces? [ 193.064250][ T4299] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 193.102760][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.146899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.157751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.167618][ T4299] usb 2-1: Product: syz [ 193.170951][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.177074][ T4299] usb 2-1: Manufacturer: syz [ 193.178862][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.188727][ T4299] usb 2-1: SerialNumber: syz [ 193.198859][ T5718] bond0 speed is unknown, defaulting to 1000 [ 193.202680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.250851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.300248][ T4299] usb 2-1: config 0 descriptor?? [ 193.341827][ T26] audit: type=1326 audit(1777485486.888:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.2.447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66e2b5fdd9 code=0x0 [ 193.411157][ T5682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.482121][ T5682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.494453][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.518615][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.573237][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.771204][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 193.789170][ T4228] usb 2-1: USB disconnect, device number 6 [ 193.810917][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.851411][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.918607][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.958586][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.999481][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.022625][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.048525][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.093772][ T4348] device hsr_slave_0 left promiscuous mode [ 194.106863][ T4348] device hsr_slave_1 left promiscuous mode [ 194.125950][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.134740][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.145715][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.153310][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.162314][ T4348] device bridge_slave_1 left promiscuous mode [ 194.173493][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181019][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.185738][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.229701][ T4348] device bridge_slave_0 left promiscuous mode [ 194.243455][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.266599][ T4348] device veth1_macvtap left promiscuous mode [ 194.272962][ T4348] device veth0_macvtap left promiscuous mode [ 194.279296][ T4348] device veth1_vlan left promiscuous mode [ 194.287060][ T4348] device veth0_vlan left promiscuous mode [ 195.104178][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 195.117762][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.130769][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.189534][ T4348] bond0 (unregistering): Released all slaves [ 195.367719][ T5897] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 195.386531][ T4500] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.481263][ T5897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.502562][ T5897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.542563][ T5897] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 195.569829][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.587242][ T5579] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 195.624599][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.638488][ T5579] bond1: (slave macvlan2): link status up again after 0 ms [ 195.652746][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.663807][ T4500] usb 2-1: Using ep0 maxpacket: 32 [ 195.795787][ T154] bond1: (slave macvlan2): link status up again after 0 ms [ 195.825170][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 195.956884][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 195.974287][ T154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 196.004731][ T4500] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 196.066600][ T4500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.077752][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 196.285435][ T4500] usb 2-1: Product: syz [ 196.365434][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 196.413923][ T4500] usb 2-1: Manufacturer: syz [ 196.451883][ T4500] usb 2-1: SerialNumber: syz [ 196.459018][ T5923] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 196.471949][ T4500] usb 2-1: config 0 descriptor?? [ 196.502189][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 196.518007][ T5923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.460'. [ 196.603750][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 196.724939][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 196.754966][ T4500] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 196.763795][ T4500] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 196.783181][ T4500] usb 2-1: USB disconnect, device number 7 [ 196.831614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.853111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.897210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.911230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.926883][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 196.947004][ T5682] device veth0_vlan entered promiscuous mode [ 196.956563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.964075][ T4462] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 196.972265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.996096][ T5682] device veth1_vlan entered promiscuous mode [ 197.033324][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.043609][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.060441][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.070242][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.082425][ T5682] device veth0_macvtap entered promiscuous mode [ 197.092884][ T5682] device veth1_macvtap entered promiscuous mode [ 197.119616][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.150787][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.168550][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.185081][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.196589][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.206094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.213866][ T4462] usb 4-1: Using ep0 maxpacket: 32 [ 197.219864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.245472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.319253][ T26] audit: type=1326 audit(1777485490.868:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66e2b5fdd9 code=0x0 [ 197.323686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.353910][ T4462] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.375059][ T4462] usb 4-1: config 0 has no interfaces? [ 197.489303][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.530122][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.557362][ T4462] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 197.559372][ T5682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.577085][ T5682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.580568][ T4462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.589609][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.602783][ T5950] tipc: Enabling of bearer rejected, already enabled [ 198.264345][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 198.283743][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.292498][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.300817][ T4462] usb 4-1: Product: syz [ 198.305792][ T4462] usb 4-1: Manufacturer: syz [ 198.310511][ T4462] usb 4-1: SerialNumber: syz [ 198.311094][ T5682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.329014][ T4462] usb 4-1: config 0 descriptor?? [ 198.375449][ T5682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.423742][ T5682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.442664][ T5682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.663974][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 199.427206][ T5579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.448198][ T5579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.514591][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.543752][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.562378][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.572857][ T4463] usb 4-1: USB disconnect, device number 8 [ 199.606767][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.902999][ T6002] tipc: Started in network mode [ 199.940810][ T6002] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 199.999685][ T6002] tipc: Enabled bearer , priority 10 [ 200.033787][ T4500] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.041331][ T4299] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 200.130852][ T26] audit: type=1326 audit(1777485493.678:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f716d395dd9 code=0x0 [ 200.388926][ T4500] usb 2-1: Using ep0 maxpacket: 32 [ 200.574758][ T4299] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.613981][ T4299] usb 3-1: not running at top speed; connect to a high speed hub [ 200.704107][ T154] net_ratelimit: 14 callbacks suppressed [ 200.704158][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 200.723541][ T4500] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 200.733533][ T4299] usb 3-1: config 12 has an invalid interface number: 231 but max is 0 [ 200.897874][ T4500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.931793][ T4299] usb 3-1: config 12 has no interface number 0 [ 200.946005][ T4500] usb 2-1: Product: syz [ 200.973702][ T4299] usb 3-1: config 12 interface 231 has no altsetting 0 [ 200.989704][ T4500] usb 2-1: Manufacturer: syz [ 201.020157][ T4500] usb 2-1: SerialNumber: syz [ 201.044966][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.067882][ T4500] usb 2-1: config 0 descriptor?? [ 201.123825][ T4196] tipc: Node number set to 4269801492 [ 201.154897][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.174092][ T4299] usb 3-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 201.183849][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.214838][ T4299] usb 3-1: Product: syz [ 201.219181][ T4299] usb 3-1: Manufacturer: syz [ 201.228840][ T4299] usb 3-1: SerialNumber: syz [ 201.276136][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.336913][ T4500] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 201.362044][ T4500] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 201.458902][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.475611][ T4500] usb 2-1: USB disconnect, device number 8 [ 201.496480][ T5995] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 201.547491][ T5995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.473'. [ 201.584323][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.595570][ T5995] udc-core: couldn't find an available UDC or it's busy [ 201.638609][ T5995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.717138][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.833899][ T4299] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 201.857058][ T4299] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 201.873810][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.913803][ T4299] dib0700: firmware download failed at 7 with -71 [ 201.927756][ T4299] usb 3-1: USB disconnect, device number 8 [ 202.012326][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.175133][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.952487][ T6084] netlink: 'syz.4.492': attribute type 20 has an invalid length. [ 202.983366][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 203.007277][ T6084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.016954][ T6084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.025831][ T6084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.034591][ T6084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.059688][ T6084] netlink: 'syz.4.492': attribute type 20 has an invalid length. [ 203.071628][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 203.095405][ T6084] Zero length message leads to an empty skb [ 203.194382][ T4462] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.453823][ T4462] usb 6-1: Using ep0 maxpacket: 8 [ 203.583894][ T4462] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 203.599750][ T4462] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.661871][ T4462] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.690818][ T4462] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.725864][ T4462] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.796099][ T4462] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.816045][ T4462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.109404][ T6140] netlink: 'syz.3.504': attribute type 3 has an invalid length. [ 204.117931][ T4462] usb 6-1: GET_CAPABILITIES returned 0 [ 204.123427][ T4196] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 204.135682][ T4462] usbtmc 6-1:16.0: can't read capabilities [ 204.195807][ T6142] binder: 6141:6142 ioctl c0306201 200000000280 returned -14 [ 204.213882][ T4228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.435242][ T21] usb 6-1: USB disconnect, device number 2 [ 204.663717][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 204.743980][ T4196] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.794015][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.804230][ T4196] usb 2-1: not running at top speed; connect to a high speed hub [ 204.819745][ T4228] usb 3-1: config 0 has no interfaces? [ 204.880545][ T6154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.884043][ T4196] usb 2-1: config 12 has an invalid interface number: 231 but max is 0 [ 204.899200][ T4196] usb 2-1: config 12 has no interface number 0 [ 204.910855][ T4196] usb 2-1: config 12 interface 231 has no altsetting 0 [ 205.023811][ T4228] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 205.032941][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.041036][ T4228] usb 3-1: Product: syz [ 205.053565][ T4228] usb 3-1: Manufacturer: syz [ 205.058366][ T4228] usb 3-1: SerialNumber: syz [ 205.073965][ T4196] usb 2-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 205.083600][ T4228] usb 3-1: config 0 descriptor?? [ 205.093328][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.102743][ T4196] usb 2-1: Product: syz [ 205.115081][ T4196] usb 2-1: Manufacturer: syz [ 205.120557][ T4196] usb 2-1: SerialNumber: syz [ 205.661759][ T4228] usb 3-1: USB disconnect, device number 9 [ 205.714329][ T6116] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 205.774261][ T4348] net_ratelimit: 29 callbacks suppressed [ 205.774320][ T4348] bond1: (slave macvlan2): failed to get link speed/duplex [ 205.945817][ T6116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.500'. [ 205.978623][ T4463] Bluetooth: hci4: command 0x0409 tx timeout [ 206.022391][ T6172] netlink: 148 bytes leftover after parsing attributes in process `syz.4.513'. [ 206.040440][ T6116] udc-core: couldn't find an available UDC or it's busy [ 206.047605][ T6116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.075306][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.203856][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.234682][ T4196] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 206.253157][ T4196] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 206.284484][ T4196] dib0700: firmware download failed at 7 with -71 [ 206.305055][ T4196] usb 2-1: USB disconnect, device number 9 [ 206.334033][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.453793][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.478154][ T6189] device syzkaller0 entered promiscuous mode [ 206.573841][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.637621][ T6193] binder_alloc: 6192: pid 6192 spamming oneway? 1 buffers allocated for a total size of 5312 [ 206.683850][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 206.725146][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.745909][ T6197] netlink: 68 bytes leftover after parsing attributes in process `syz.1.522'. [ 206.779713][ T6197] tipc: Enabling of bearer rejected, already enabled [ 206.853906][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.984821][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 207.164011][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.379246][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 207.463927][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.616470][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.633891][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.651458][ T21] usb 4-1: SerialNumber: syz [ 207.992810][ T21] usb 4-1: 0:2 : does not exist [ 208.589049][ T21] usb 4-1: USB disconnect, device number 9 [ 208.846185][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.893488][ T6218] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 208.929022][ T4228] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.108828][ T6233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.534'. [ 209.118952][ T6233] tipc: Enabling of bearer rejected, already enabled [ 209.193743][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 209.404187][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.420467][ T4228] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.433334][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.454696][ T4228] usb 2-1: config 0 descriptor?? [ 209.815909][ T4228] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 209.943878][ T4462] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.078233][ T4463] usb 2-1: USB disconnect, device number 10 [ 210.194864][ T4462] usb 6-1: Using ep0 maxpacket: 32 [ 210.329534][ T4462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.345571][ T4462] usb 6-1: config 0 has no interfaces? [ 210.534105][ T4462] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 210.551327][ T4462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.573270][ T4462] usb 6-1: Product: syz [ 210.600494][ T4462] usb 6-1: Manufacturer: syz [ 210.641848][ T4462] usb 6-1: SerialNumber: syz [ 210.679526][ T4462] usb 6-1: config 0 descriptor?? [ 210.866573][ T4379] net_ratelimit: 23 callbacks suppressed [ 210.866590][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 210.960604][ T4462] usb 6-1: USB disconnect, device number 3 [ 211.004008][ T4348] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.146024][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.284904][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.321564][ T4193] Bluetooth: Wrong link type (-22) [ 211.337895][ T4228] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.403838][ T4348] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.516234][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.553606][ T6292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.546'. [ 211.593052][ T6292] tipc: Enabling of bearer rejected, already enabled [ 211.634050][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.713894][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.810649][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.833943][ T6297] netlink: 276 bytes leftover after parsing attributes in process `syz.5.550'. [ 211.843019][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.928828][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.549'. [ 212.534042][ T4228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.614762][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.633195][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.671280][ T4228] usb 3-1: SerialNumber: syz [ 212.791904][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.923469][ T6313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 213.134292][ T4228] usb 3-1: 0:2 : does not exist [ 213.144714][ T4228] usb 3-1: USB disconnect, device number 10 [ 213.855770][ T6325] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 213.937076][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 213.950624][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 213.961991][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 213.969558][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.979619][ T4193] Workqueue: hci0 hci_rx_work [ 213.981272][ T6327] tipc: Enabling of bearer rejected, already enabled [ 213.984336][ T4193] Call Trace: [ 213.984384][ T4193] [ 213.984392][ T4193] dump_stack_lvl+0x188/0x250 [ 213.984417][ T4193] ? show_regs_print_info+0x20/0x20 [ 213.984433][ T4193] ? load_image+0x400/0x400 [ 213.984459][ T4193] sysfs_create_dir_ns+0x26a/0x290 [ 213.984487][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 213.984502][ T4193] ? process_one_work+0x85f/0x1010 [ 213.984524][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 213.984546][ T4193] kobject_add_internal+0x6e0/0xd90 [ 214.021480][ T6332] ODEBUG: Out of memory. ODEBUG disabled [ 214.022491][ T4193] kobject_add+0x160/0x230 [ 214.022520][ T4193] ? kobject_init+0x1d0/0x1d0 [ 214.052839][ T4193] ? klist_children_get+0x50/0x50 [ 214.058228][ T4193] ? get_device_parent+0x121/0x3f0 [ 214.063353][ T4193] device_add+0x483/0xfb0 [ 214.067702][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 214.072653][ T4193] le_conn_complete_evt+0xc48/0x15c0 [ 214.077955][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 214.083071][ T4193] ? __mutex_trylock_common+0x155/0x260 [ 214.088613][ T4193] hci_le_meta_evt+0x285/0x3c90 [ 214.093455][ T4193] ? hci_event_packet+0x37b/0x1370 [ 214.098563][ T4193] ? __lock_acquire+0x7d10/0x7d10 [ 214.103582][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 214.109635][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 214.115262][ T4193] ? mark_lock+0x94/0x320 [ 214.119576][ T4193] ? mutex_unlock+0x10/0x10 [ 214.124070][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.130046][ T4193] ? lock_chain_count+0x20/0x20 [ 214.134896][ T4193] ? __rwlock_init+0x140/0x140 [ 214.139663][ T4193] hci_event_packet+0xe48/0x1370 [ 214.144603][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 214.149810][ T4193] ? rcu_lock_release+0x20/0x20 [ 214.154768][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 214.159970][ T4193] hci_rx_work+0x255/0xa10 [ 214.164401][ T4193] process_one_work+0x85f/0x1010 [ 214.169348][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 214.174970][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 214.180252][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 214.185264][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 214.190810][ T4193] ? wq_worker_running+0x97/0x170 [ 214.195829][ T4193] worker_thread+0xaa6/0x1290 [ 214.200502][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 214.205709][ T4193] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.211601][ T4193] kthread+0x436/0x520 [ 214.215659][ T4193] ? rcu_lock_release+0x20/0x20 [ 214.220498][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 214.225076][ T4193] ret_from_fork+0x1f/0x30 [ 214.229491][ T4193] [ 214.232564][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.240834][ T4193] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.254135][ T4193] Bluetooth: hci0: failed to register connection device [ 214.283785][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 214.523242][ T4228] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.531320][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.542615][ T21] usb 6-1: config 0 has no interfaces? [ 214.647359][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 214.679770][ T6352] loop1: detected capacity change from 0 to 512 [ 214.742902][ T6352] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 215.313988][ T21] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 215.323482][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.336756][ T21] usb 6-1: Product: syz [ 215.358732][ T21] usb 6-1: Manufacturer: syz [ 215.370219][ T21] usb 6-1: SerialNumber: syz [ 215.374986][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 215.394555][ T21] usb 6-1: config 0 descriptor?? [ 215.440233][ T6364] tipc: Enabling of bearer rejected, already enabled [ 215.494609][ T4228] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.522612][ T4228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.553898][ T4228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.197436][ T4379] net_ratelimit: 17 callbacks suppressed [ 216.197456][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 216.283817][ T4228] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.300371][ T4228] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.309650][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.312379][ T4462] usb 6-1: USB disconnect, device number 4 [ 216.395783][ T6383] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 216.426194][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 216.553713][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 216.778849][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 216.794021][ T4228] usb 3-1: GET_CAPABILITIES returned 0 [ 216.800262][ T4228] usbtmc 3-1:16.0: can't read capabilities [ 216.835499][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 217.517731][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.534349][ T4228] usb 3-1: USB disconnect, device number 11 [ 217.604934][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 217.628300][ T6406] tipc: Enabling of bearer rejected, already enabled [ 217.838240][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.099651][ T4462] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.144567][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.275826][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.400891][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.443907][ T4228] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.497138][ T4462] usb 6-1: Using ep0 maxpacket: 32 [ 218.764642][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 218.770761][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.894309][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.944364][ T4228] usb 4-1: config 0 has no interfaces? [ 219.220918][ T6440] loop1: detected capacity change from 0 to 128 [ 219.233904][ T4462] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 219.242055][ T6437] syz.4.591 (6437) used greatest stack depth: 16848 bytes left [ 219.280185][ T4462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.284880][ T6440] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.373917][ T4228] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 219.397578][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.434815][ T4462] usb 6-1: Product: syz [ 219.439083][ T4462] usb 6-1: Manufacturer: syz [ 219.444409][ T4462] usb 6-1: SerialNumber: syz [ 219.453427][ T4462] usb 6-1: config 0 descriptor?? [ 219.458659][ T4228] usb 4-1: Product: syz [ 219.466071][ T6440] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 219.483879][ T4462] usb 6-1: can't set config #0, error -71 [ 219.483894][ T4228] usb 4-1: Manufacturer: syz [ 219.490263][ T6440] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.495184][ T4228] usb 4-1: SerialNumber: syz [ 219.551002][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'. [ 219.585082][ T6453] loop2: detected capacity change from 0 to 512 [ 220.084476][ T4462] usb 6-1: USB disconnect, device number 5 [ 220.124812][ T4228] usb 4-1: config 0 descriptor?? [ 220.428634][ T6453] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 221.234476][ T6471] fuse: Unknown parameter 'user_i00000000000000000000' [ 221.274718][ T4384] net_ratelimit: 10 callbacks suppressed [ 221.274734][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 221.275307][ T6418] Set syz1 is full, maxelem 6117 reached [ 221.343128][ T1107] usb 4-1: USB disconnect, device number 10 [ 221.423813][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 221.543802][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 221.663897][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 222.137139][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 222.427833][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 223.454830][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 223.968096][ T4462] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.033753][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 224.152704][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.610'. [ 224.185947][ T6518] loop3: detected capacity change from 0 to 512 [ 224.313878][ T4462] usb 2-1: Using ep0 maxpacket: 32 [ 224.654161][ T4462] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 224.723317][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 224.730710][ T4462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.739240][ T4462] usb 2-1: Product: syz [ 224.747086][ T4462] usb 2-1: Manufacturer: syz [ 224.751925][ T4462] usb 2-1: SerialNumber: syz [ 224.763008][ T4462] usb 2-1: config 0 descriptor?? [ 224.905871][ T6518] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 224.923844][ T6522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.612'. [ 225.173747][ T4462] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 225.183425][ T4462] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 225.624857][ T4462] usb 2-1: USB disconnect, device number 11 [ 225.706233][ T6541] fuse: Unknown parameter 'user_i00000000000000000000' [ 226.378143][ T4276] net_ratelimit: 9 callbacks suppressed [ 226.378254][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 226.889417][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.033871][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.264072][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.500030][ T4463] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 227.536492][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.813409][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.004097][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.237502][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.443542][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'. [ 228.475524][ T6578] loop1: detected capacity change from 0 to 512 [ 228.488090][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.811004][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 229.016209][ T6578] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 229.353693][ T4463] usb 6-1: Using ep0 maxpacket: 32 [ 229.366703][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 229.423765][ T4463] usb 6-1: device descriptor read/all, error -71 [ 229.446473][ T6595] fuse: Unknown parameter 'user_i00000000000000000000' [ 229.940943][ T6614] loop2: detected capacity change from 0 to 512 [ 230.803806][ T4463] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 231.506532][ T9] net_ratelimit: 8 callbacks suppressed [ 231.506551][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.663744][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.893948][ T4463] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.576824][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.597383][ T4463] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.035216][ T6614] EXT4-fs: error -4 creating inode table initialization thread [ 233.043705][ T6614] EXT4-fs (loop2): mount failed [ 233.093854][ T4463] usb 6-1: string descriptor 0 read error: -71 [ 233.100065][ T4463] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.122170][ T4463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.238361][ T4463] usb 6-1: can't set config #1, error -71 [ 233.254057][ T4463] usb 6-1: USB disconnect, device number 7 [ 233.300844][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 233.412343][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 233.444417][ T6630] loop1: detected capacity change from 0 to 512 [ 234.032186][ T6630] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 234.137485][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 234.324012][ T5579] bond1: (slave macvlan2): failed to get link speed/duplex [ 234.409966][ T6641] xt_hashlimit: size too large, truncated to 1048576 [ 234.435090][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.026241][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.264832][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.343548][ T6652] fuse: Unknown parameter 'user_i00000000000000000000' [ 235.414829][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.447430][ T6655] loop1: detected capacity change from 0 to 256 [ 235.774090][ T6655] FAT-fs (loop1): Directory bread(block 64) failed [ 235.814515][ T6655] FAT-fs (loop1): Directory bread(block 65) failed [ 235.821999][ T6655] FAT-fs (loop1): Directory bread(block 66) failed [ 235.907510][ T6655] FAT-fs (loop1): Directory bread(block 67) failed [ 236.733728][ T4277] net_ratelimit: 6 callbacks suppressed [ 236.733744][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.944079][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.989491][ T6655] FAT-fs (loop1): Directory bread(block 68) failed [ 236.996306][ T6655] FAT-fs (loop1): Directory bread(block 69) failed [ 237.002903][ T6655] FAT-fs (loop1): Directory bread(block 70) failed [ 237.009656][ T6655] FAT-fs (loop1): Directory bread(block 71) failed [ 237.016392][ T6655] FAT-fs (loop1): Directory bread(block 72) failed [ 237.022929][ T6655] FAT-fs (loop1): Directory bread(block 73) failed [ 237.355075][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.621788][ T6682] loop5: detected capacity change from 0 to 4096 [ 237.738575][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.873767][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.173819][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.368002][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.587872][ T6700] loop5: detected capacity change from 0 to 512 [ 238.596117][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.726674][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.737736][ T6700] EXT4-fs (loop5): 1 truncate cleaned up [ 238.743400][ T6700] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 238.893912][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.963954][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 238.996268][ T6712] loop3: detected capacity change from 0 to 512 [ 239.078333][ T6712] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 239.794211][ T4474] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.214242][ T4474] usb 2-1: Using ep0 maxpacket: 32 [ 241.416571][ T4474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.434046][ T4474] usb 2-1: config 0 has no interfaces? [ 241.644731][ T4474] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 241.654827][ T4474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.669742][ T4474] usb 2-1: Product: syz [ 241.679465][ T4474] usb 2-1: Manufacturer: syz [ 241.686350][ T4474] usb 2-1: SerialNumber: syz [ 241.740929][ T4474] usb 2-1: config 0 descriptor?? [ 241.802989][ T4384] net_ratelimit: 24 callbacks suppressed [ 241.803007][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 241.955398][ T4474] usb 2-1: USB disconnect, device number 12 [ 241.974405][ T6744] fuse: Unknown parameter 'user_i00000000000000000000' [ 241.984162][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 242.252639][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 242.583968][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.008195][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.143795][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.864459][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.004370][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.017454][ T6766] netlink: 68 bytes leftover after parsing attributes in process `syz.1.663'. [ 244.059729][ T6766] tipc: Enabling of bearer rejected, already enabled [ 244.143820][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.257701][ T6773] bond0 speed is unknown, defaulting to 1000 [ 244.264099][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 245.612432][ C1] sd 0:0:1:0: tag#7334 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 245.622364][ C1] sd 0:0:1:0: tag#7334 CDB: Read(6) 08 00 00 00 00 00 [ 245.671116][ T6790] fuse: Unknown parameter 'user_i00000000000000000000' [ 246.146665][ T6795] tipc: Enabling of bearer rejected, failed to enable media [ 247.446776][ T4388] net_ratelimit: 10 callbacks suppressed [ 247.446794][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.153807][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.385648][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.471829][ C1] sd 0:0:1:0: tag#7350 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 249.481748][ C1] sd 0:0:1:0: tag#7350 CDB: Read(6) 08 00 00 00 00 00 [ 249.495367][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.625823][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.653684][ T4463] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 249.743721][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.863781][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.973810][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 250.063778][ T4463] usb 6-1: unable to get BOS descriptor or descriptor too short [ 250.094975][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 250.154627][ T4463] usb 6-1: not running at top speed; connect to a high speed hub [ 250.224041][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 250.243938][ T4463] usb 6-1: config 12 has an invalid interface number: 231 but max is 0 [ 250.256719][ T4463] usb 6-1: config 12 has no interface number 0 [ 250.271879][ T4463] usb 6-1: config 12 interface 231 has no altsetting 0 [ 250.453860][ T4463] usb 6-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 250.473196][ T4463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.550132][ T4463] usb 6-1: Product: syz [ 250.574925][ T4463] usb 6-1: Manufacturer: syz [ 250.579925][ T4463] usb 6-1: SerialNumber: syz [ 251.015611][ T6828] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 251.365870][ T6828] netlink: 76 bytes leftover after parsing attributes in process `syz.5.680'. [ 252.684579][ T4452] net_ratelimit: 11 callbacks suppressed [ 252.684591][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.823741][ T4463] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 252.862467][ T4463] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 252.894020][ T4276] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.923726][ T4463] dib0700: firmware download failed at 7 with -71 [ 252.978799][ T4463] usb 6-1: USB disconnect, device number 8 [ 253.003907][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.020313][ T6858] capability: warning: `syz.5.690' uses deprecated v2 capabilities in a way that may be insecure [ 253.049836][ T6835] loop3: detected capacity change from 0 to 40427 [ 253.095468][ T6835] F2FS-fs (loop3): Invalid log sectors per block(65539) log sectorsize(9) [ 253.143652][ T6835] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.156896][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.175282][ T6835] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1ffff [ 253.336553][ T4452] bond1: (slave macvlan2): failed to get link speed/duplex [ 254.029502][ T4388] bond1: (slave macvlan2): failed to get link speed/duplex [ 254.760306][ T4384] bond1: (slave macvlan2): failed to get link speed/duplex [ 254.896442][ T427] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.083944][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.376822][ T4752] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.713203][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719597][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.855106][ T6881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.978276][ T6881] [ 255.981120][ T6881] ============================= [ 255.986020][ T6881] WARNING: suspicious RCU usage [ 255.990876][ T6881] syzkaller #0 Not tainted [ 255.995313][ T6881] ----------------------------- [ 256.000160][ T6881] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 256.008514][ T6881] [ 256.008514][ T6881] other info that might help us debug this: [ 256.008514][ T6881] [ 256.018769][ T6881] [ 256.018769][ T6881] rcu_scheduler_active = 2, debug_locks = 1 [ 256.026879][ T6881] 13 locks held by syz.3.693/6881: [ 256.031993][ T6881] #0: ffff888074f850e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x11d9/0x1700 [ 256.041823][ T6881] #1: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.051190][ T6881] #2: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.060574][ T6881] #3: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.070321][ T6881] #4: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.079979][ T6881] #5: ffff888062c82898 (_xmit_TUNNEL6#2){+.-.}-{2:2}, at: __dev_queue_xmit+0x14b5/0x2f80 [ 256.089968][ T6881] #6: ffff888074f800a0 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xbe3/0x1990 [ 256.099460][ T6881] #7: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 256.108820][ T6881] #8: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.118206][ T6881] #9: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.127839][ T6881] #10: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 256.137574][ T6881] #11: ffff888022ab9108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 256.147290][ T6881] #12: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 256.156786][ T6881] [ 256.156786][ T6881] stack backtrace: [ 256.162678][ T6881] CPU: 1 PID: 6881 Comm: syz.3.693 Not tainted syzkaller #0 [ 256.169965][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.180065][ T6881] Call Trace: [ 256.183344][ T6881] [ 256.186279][ T6881] dump_stack_lvl+0x188/0x250 [ 256.190970][ T6881] ? show_regs_print_info+0x20/0x20 [ 256.196204][ T6881] ? lockdep_rcu_suspicious+0x110/0x180 [ 256.201764][ T6881] qdisc_lookup+0xa6/0x650 [ 256.206203][ T6881] qdisc_tree_reduce_backlog+0x190/0x430 [ 256.211875][ T6881] sfq_enqueue+0x14ad/0x2280 [ 256.216495][ T6881] ? decrement_one_qlen+0x550/0x550 [ 256.221716][ T6881] tbf_enqueue+0x224/0x6e0 [ 256.226147][ T6881] ? __rwlock_init+0x140/0x140 [ 256.230929][ T6881] dev_qdisc_enqueue+0x48/0x210 [ 256.235807][ T6881] __dev_queue_xmit+0xc25/0x2f80 [ 256.240776][ T6881] ? ip6_send_skb+0x1b9/0x360 [ 256.245559][ T6881] ? dev_queue_xmit+0x20/0x20 [ 256.250228][ T6881] ? mark_lock+0x94/0x320 [ 256.254647][ T6881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 256.260622][ T6881] ? lock_chain_count+0x20/0x20 [ 256.265454][ T6881] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 256.271254][ T6881] ? ip6_finish_output2+0xcb6/0x1510 [ 256.276525][ T6881] ? ip6_finish_output2+0xe80/0x1510 [ 256.281795][ T6881] ip6_finish_output2+0x1051/0x1510 [ 256.286986][ T6881] ? nf_hook+0x360/0x360 [ 256.291220][ T6881] ip6_send_skb+0x1b9/0x360 [ 256.295707][ T6881] icmp6_send+0x133e/0x1990 [ 256.300194][ T6881] ? vfs_write+0x745/0xd60 [ 256.304626][ T6881] ? icmpv6_push_pending_frames+0x450/0x450 [ 256.310501][ T6881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 256.316476][ T6881] ? mark_lock+0x94/0x320 [ 256.320800][ T6881] ? memcpy+0x3c/0x60 [ 256.324764][ T6881] ? __xfrm_decode_session+0xc4c/0x1fa0 [ 256.330303][ T6881] ip6_link_failure+0x35/0x490 [ 256.335047][ T6881] ? ip6_negative_advice+0x2f0/0x2f0 [ 256.340313][ T6881] vti6_tnl_xmit+0x10fb/0x1990 [ 256.345077][ T6881] ? mark_lock+0x94/0x320 [ 256.349389][ T6881] ? vti6_dev_uninit+0x110/0x110 [ 256.354329][ T6881] dev_hard_start_xmit+0x2a5/0x7e0 [ 256.359442][ T6881] __dev_queue_xmit+0x1a9b/0x2f80 [ 256.364461][ T6881] ? dev_queue_xmit+0x20/0x20 [ 256.369116][ T6881] ? rcu_read_lock_bh_held+0x76/0xf0 [ 256.374383][ T6881] ? rcu_read_lock_held+0x40/0x40 [ 256.379478][ T6881] ? neigh_connected_output+0x38d/0x3e0 [ 256.385017][ T6881] ip6_finish_output2+0x108c/0x1510 [ 256.390205][ T6881] ? nf_hook+0x360/0x360 [ 256.394431][ T6881] ? ip6_copy_metadata+0x7d9/0xc40 [ 256.399538][ T6881] ip6_fragment+0x1914/0x1ee0 [ 256.404226][ T6881] ? nf_hook+0x360/0x360 [ 256.408463][ T6881] ? ip6_frag_next+0xbb0/0xbb0 [ 256.413241][ T6881] ip6_send_skb+0x1b9/0x360 [ 256.417742][ T6881] rawv6_push_pending_frames+0x655/0x810 [ 256.423364][ T6881] ? ip6_append_data+0x1d4/0x310 [ 256.428287][ T6881] ? raw6_getfrag+0x2d0/0x2d0 [ 256.432962][ T6881] ? rawv6_send_hdrinc+0x1690/0x1690 [ 256.438267][ T6881] rawv6_sendmsg+0x1291/0x1700 [ 256.443028][ T6881] ? compat_rawv6_ioctl+0x60/0x60 [ 256.448057][ T6881] ? __lock_acquire+0x7d10/0x7d10 [ 256.453077][ T6881] ? aa_af_perm+0x340/0x340 [ 256.457562][ T6881] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 256.463971][ T6881] ? sock_rps_record_flow+0x17/0x3b0 [ 256.469266][ T6881] ? inet_sendmsg+0x78/0x2f0 [ 256.473841][ T6881] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 256.479117][ T6881] ? security_socket_sendmsg+0x7c/0xa0 [ 256.484585][ T6881] sock_write_iter+0x2a6/0x3a0 [ 256.489335][ T6881] ? sock_read_iter+0x380/0x380 [ 256.494177][ T6881] ? memset+0x1e/0x40 [ 256.498147][ T6881] ? iov_iter_init+0xb4/0x170 [ 256.502805][ T6881] vfs_write+0x745/0xd60 [ 256.507035][ T6881] ? file_end_write+0x250/0x250 [ 256.511867][ T6881] ? __fget_files+0x40f/0x480 [ 256.516529][ T6881] ? __fdget_pos+0x1e2/0x370 [ 256.521095][ T6881] ? ksys_write+0x71/0x260 [ 256.525490][ T6881] ksys_write+0x152/0x260 [ 256.529799][ T6881] ? __ia32_sys_read+0x80/0x80 [ 256.534544][ T6881] ? lockdep_hardirqs_on+0x94/0x140 [ 256.539724][ T6881] do_syscall_64+0x4c/0xa0 [ 256.544119][ T6881] ? clear_bhb_loop+0x30/0x80 [ 256.548780][ T6881] ? clear_bhb_loop+0x30/0x80 [ 256.553437][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.559324][ T6881] RIP: 0033:0x7fb97e726dd9 [ 256.563723][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.583318][ T6881] RSP: 002b:00007fb97c980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.591710][ T6881] RAX: ffffffffffffffda RBX: 00007fb97e99ffa0 RCX: 00007fb97e726dd9 [ 256.599688][ T6881] RDX: 000000000000fe46 RSI: 0000200000000040 RDI: 0000000000000007 [ 256.607639][ T6881] RBP: 00007fb97e7bcd69 R08: 0000000000000000 R09: 0000000000000000 [ 256.615591][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.623543][ T6881] R13: 00007fb97e9a0038 R14: 00007fb97e99ffa0 R15: 00007ffecced2188 [ 256.631504][ T6881] [ 257.764020][ T4379] net_ratelimit: 17 callbacks suppressed [ 257.764037][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 257.883833][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.005504][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.124013][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.233735][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.343770][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.453732][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.564674][ T154] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.673710][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.793829][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 262.813825][ T9] net_ratelimit: 35 callbacks suppressed [ 262.813841][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 262.933755][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.053825][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.173792][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.284162][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.393805][ T4277] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.503830][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.614121][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.723718][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.835789][ T4379] bond1: (slave macvlan2): failed to get link speed/duplex