last executing test programs: 9m31.683234705s ago: executing program 3 (id=103): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003200)={0xc6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "6a01afa398ad33"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000000c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}], 0x0, "fc7c37c78dba72"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x280000000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r7, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 9m28.41438933s ago: executing program 3 (id=106): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) 9m27.374436366s ago: executing program 3 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x19607e66}]}, 0x28}, 0x1, 0x0, 0x0, 0x44940}, 0x4000084) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x100) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000002000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') pipe(&(0x7f0000000240)) writev(r6, &(0x7f00000003c0), 0x100000000000022d) write$tun(r6, &(0x7f0000000080)={@void, @void, @arp=@generic={0x118, 0x0, 0x6, 0x10, 0xa, @empty, "b92055c81e182963103a2363b0b9296f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "914e1a"}}, 0x27) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000040)={{0x8, 0x6, 0x8000, 0x0, 0x2}}) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f00000002c0)={0x0, 0x0, {0x3, 0xc, 0x1, 0x6}}) 9m21.843289921s ago: executing program 3 (id=111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) writev(r5, 0x0, 0x0) getgroups(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xe4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 9m17.5459858s ago: executing program 3 (id=116): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x6, @raw_data="fe118e3eb2153c75a38df82fdddb48d44b40f31011ffaa89a41154dc8a67e6f26f676a463ec2bff394da4af3b21d29a45b6537d7abbb1c30e970088bb79be4846f03e3eff249ff5f21853999f15c984892417f2bf8f9901f99da5af3ac50d49dfc58186324f6bbe84b7b612abe39727b538c8019a136a34bcc16c07321ad3953add0c4004cb30293b970bcc4f61b81f206aaec9e3677aa70ad8abcfffe850d7ee9a4ecd5b9c4e518dd6aa7411735d22b2c63fdb218f766c569c8604691a0ebdfefdedd35b205afa0"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019300)=ANY=[@ANYBLOB="7000f8dbdf2500070000b076cbe93361ec114bf7f1ad2f0c526f6717291f77b716b8b066b6085391cb5d91200dd58876031a65", @ANYRES32=0x0, @ANYBLOB="20000000040000001400350076657468315f766972745f776966690014001680100001800c0005007e000000710f0000"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000041) flock(0xffffffffffffffff, 0x2) 9m14.076155836s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x2, &(0x7f0000000080)="dfbb"}) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3c4}}, 0x20000000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) 8m58.916519755s ago: executing program 32 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x2, &(0x7f0000000080)="dfbb"}) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3c4}}, 0x20000000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) 1m5.403994767s ago: executing program 1 (id=762): listen(0xffffffffffffffff, 0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m2.590498717s ago: executing program 1 (id=773): listen(0xffffffffffffffff, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000c014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x144, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m0.812905552s ago: executing program 1 (id=776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000"], 0xc8) 59.91838409s ago: executing program 1 (id=778): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 58.41876146s ago: executing program 1 (id=781): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 54.822691812s ago: executing program 1 (id=787): listen(0xffffffffffffffff, 0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 38.145416583s ago: executing program 33 (id=787): listen(0xffffffffffffffff, 0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.842274097s ago: executing program 2 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580", @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) 3.583706441s ago: executing program 0 (id=980): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.528037124s ago: executing program 5 (id=981): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 3.527828634s ago: executing program 2 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7fffffffffffffff, 0x3, 0x3, 0x800, 0x80000000, 0x9, 0x5, 0x8, 0x48, 0xffffffff, 0x100000000, 0x100000000c, 0x20000000000bab6, 0x7, 0x80000002, 0xeede], 0xeeee0000, 0x300400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.290030307s ago: executing program 0 (id=984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, &(0x7f0000000340)) 3.159826534s ago: executing program 5 (id=985): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 3.080425307s ago: executing program 0 (id=986): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xfe, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 2.924742526s ago: executing program 5 (id=987): preadv(0xffffffffffffffff, 0x0, 0x0, 0xf2, 0x207fff) openat$dir(0xffffffffffffff9c, 0x0, 0x2042, 0xc8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 2.862636499s ago: executing program 0 (id=989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) 2.862531279s ago: executing program 2 (id=990): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 2.630680582s ago: executing program 0 (id=991): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.524702347s ago: executing program 5 (id=992): open(&(0x7f0000000040)='./bus\x00', 0x943, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) pipe(&(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2.522560397s ago: executing program 4 (id=993): r0 = socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='oom_adj\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.403941083s ago: executing program 0 (id=994): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000300)=0xfffffffc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x9) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 2.28631487s ago: executing program 2 (id=995): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x44}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @cond=[{0xfffa, 0x1ff, 0x7, 0x8, 0x80, 0x7}, {0x3, 0xf872, 0x6, 0x0, 0x8965}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.90249547s ago: executing program 2 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') r0 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x90800, 0x0) chdir(&(0x7f0000000000)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1.90223465s ago: executing program 4 (id=997): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC], 0x5, 0x19f, &(0x7f0000001cc0)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)=""/158, 0x9e) 1.827830644s ago: executing program 5 (id=998): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@acl}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xe, &(0x7f0000000140)={0x31, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x3) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x5) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0x8001, 0x101, 0x548e, 0x19, "be3dd602277b86dce06fe5c5aa2ea86cda823d"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) 1.632015044s ago: executing program 2 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f000000c980), r3) setresuid(0xee00, 0x0, 0x0) 1.259730084s ago: executing program 4 (id=1000): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 484.051804ms ago: executing program 5 (id=1001): syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1}, 0x50) 430.990328ms ago: executing program 4 (id=1002): r0 = syz_open_dev$loop(&(0x7f0000000080), 0xb846, 0x24000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000002740)) 217.072629ms ago: executing program 4 (id=1003): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfd3024cdf6ebee19}, 0x6) 0s ago: executing program 4 (id=1004): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$eJzs3AucT9XaOPDnWWvtMSbp1ySXYa31bH7JZZkkySVJLkmSJEluCUmTHElIDLklDUlILkNyGUJymZg07ve7JCRJkyQhuSXr/5ni73TqvOec9/Qe7+ed5/v57I/1zN7P2s/+PbNnXzDfdh1Wq0nt6o2ICP4t+OsfyQAQCwCDAOAaAAgAoHx8+fjs9bklJv97O2F/rofSrnQF7Eri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxsy4xC1/KScxd+/5+T8fX//4aLJx98ua7M9d0AYv7ZPO5/zsb9/z8r+Gc24v7nbNz/nCr2ShfA/hfg8z8nyPV313D/czbuP2M52ZV+/3ylF4jk7M/gSn//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLGc74yxQAXBpf6boYY4wxxhhjjDH25/G5rnQFjDHGGGOMMcYY+5+HIECCggBiIBfEQm6IAwEAV0NeuAYicC3Ew3WQD66H/FAACkIhSIDCUAQ0GIgBghCKQjGIwg1QHG6EElASSkFpcFAGEuEmKAs3Qzm4BcrDrVABboOKUAkqQxW4HarCHVAN7oTqcBfUgJpQC2rD3VAH7oG6cC/Ug/ugPtwPDeABaAgPQiN4CBrDw9AEHoGm8Cg0g+bQAlpCq/9W/gvQE16EXtAbkqEP9IWXoB/0hwEwEAbByzAYXoEh8CqkwFAYBq/BcHgdRsAbMBJGwWh4E8bAWzAWxsF4mACpMBEmwdswGd6BKTAVpsF0SIMZMBPehVkwG+bAezAX3od5MB8WwEJIhw9gESyGDPgQlsBHkAlLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHfAx7IRPYBd8CrthD+yFz2AffP4v5p/+m/xuCAgoUKBChTEYg7EYi3EYh3kwD+bFvBjBCMZjPObDfJgf82NBLIgJmIBFsAgaNEhIWBSLYhSjWByLYwksgaWwFDp0mIiJWBZvxnJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIV3493YB+tiXayH9bA+1r/0egobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AGTMAk7YkfshJ2wM3bGLtgFu2JX7IbdsXvWC7kAX8QXsTfWEH2wL/bFfpiSawAOxIH4Mg7GV/AVfBVTcCgOw9fwNXwdR+ApHImjcDSOxqriLRyL45DEBEzFVJyEk3AyTsYpOBWn4nRMwxk4E2fiLJyNs/E9nIvv4/s4H+fjQkzHdFyEizEDM3AJnsZMXIrLcDmuwJW4AlfjGlyN63A9rsONuBE342bciltxO27Hj/Fj/AQVAH6Ke3APpuA+3If7cT8ewAN4EA9iFmbhITyEh/EwHsEjeBSP4jE8jifwOJ7Ek3gKT+MZPIPn8Byex+cSvm78Scm1KSCyKaFEjIgRsSJWxIk4kUfkEXlFXhEREREv4kU+kU/kF/lFQVFQJIgEUUQUEUYYQSKMAQARFVFRXBQXJUQJUUqUEk44kSgSRVlRVpQT5UR5cauoIG4TFUUl0dZVEVVEVdHOVRN3iuqiuqghaopaoraoLeqIOqKuqCvqiXqivqgvGogHREPRBwfgQyK7M03EUGwqhmEz0VzIiz/BWosR2Ea0Fe3EE2IUjsQOorVLEk+LjmIsdhJ/EePwWdFFTMCu4nnRTXQXPcQLoqdo43qJ3mIK9hF9xXTsJ/qLAWKgmIU1xXs4N3ct8apIEUPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQaSKiWKSeFtMFu+IKWKqmCamizQxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJdfCAWicUiQ3woloiPRKZYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hY7BSfiF3iU7Fb7BF7xWdin/hc7BdfiAPiS3FQfCWyxNfikPhGHBbfiiPiO3FUfC+OiePihPhBnBQ/ilPitDgjzopz4idxXvwsLggvQKIUUkolAxkjc8lYmVvGyatkHhlc/HSvlfHyOplPXi/zywKyoCwkE2RhWURqaaSVJENZVBaTUXmDLC5vlCVkSVlKlpZOlpGJ8iZZVt4sy8lbZHl5q6wgb5MVZSVZWVaRt8uq8g4JkV/3UUPWlLVkbXm3TIZ7ZF15r6wn75P15f2ygXxANpQPykbyIdlYPiybyEdkU/mobCabyxaypWwlH5Ot5eOyjWwr28knZHv5pOwgn5JJ8mnZUfqL3yLPyi7yOdlVPi+7ye6yh/xZXpBe9pK9JfQB2Ve+JPvJ/nKAHCgHyZflYPmKHCJflSlyqBwmX5PD5etyhHxDjpSj5Gj5phwj35Jj5Tg5Xk6QqXKinCTflpPlO3KKnCqnyekyTc6QAy7ONEfKf5j/9h/kD/ll75vlFrlVbsOLrZCfyF1yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoMySWfKQPCQPy8PyiDwij8qj8pg8Ls/KH+RJ+aM8JU/L0/KsPCfPyfMXPwNQqISSSqlAxahcKlblVnHqKpVHXa3yqmtURF2r4tV1Kp+6XuVXBVRBVUglqMKqiNLKKKtIhaqoKqai6oZLVapSqrRyqoxKVDf9K/mquLpRlVAlf5N/qb7kv1NfK9VKtVatVRvVRrVT7VR71V51UB1UkkpSHVVH1Ul1Up1VZ9VFdVFdVVfVTXVTPVQP1VP1VL1UL5WsklVf9ZLqp/qrAWqgGqReVoPVYDVEDVEpKkUNU8PUcDVcjVAj1Eg1Uo1Wo9UYNUaNVWPVeDVepapUNUlNUpPVZDVFTVHT1DSVptLUTDVTzVKz1Bw1R81Vc9U8NU8tUAtUukpXi9QilaEy1BK1RGWqpWqpWq6Wq5VqpVqtVqu1aq1ar9arjWqjylRb1Ba1TW1TO9QOtVPtVLvULrVb7VZ71V61T+1T+9V+dUAdUAfVQZWlstQhdUgdVofVEXVEHVVH1TF1TJ1QJ9RJdVKdUqfUGXVGnVPn1Hl1Xl1QF7Jv+wIRiEAF2VfamCA2iA3igrggT5AnyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYANxsenR4IageHBjUCIoGZQKSgcuKBMkBjcFZYObg3LBLUH54NagQnBbUDGoFFQOqgS3B1WDO4JqwZ1B9eCuoEZQM6gV1A7uDuoE9wR1g3uDesF9Qf3g/qBB8EDQMHgwaBQ8FDQOHg6aBI8ETYNHg2ZB86BF0DJo9afO7/2pAo+7zbq3TtZ9dF/9ku6n++sBeqAepF/Wg/Ureoh+VafooXqYfk0P16/rEfoNPVKP0qP1m3qMfkuP1eP0eD1Bp+qJepJ+W0/W7+gpeqqepqfrND1Dz9Tv6ll6tp6j39Nz9ft6np6vF+iFOl1/oBfpxTpDf6iX6I90pl6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH/ljv1J/oXfpTvVvv0Xv1Z3qf/lzv11/oA/pLfVB/pbP01/qQ/kYf1t/qI/o7fVR/r4/p4/qE/kGf1D/qU/q0PqPP6nP6J31e/6wvaJ99c599eTfKKBNjYkysiTVxJs7kMXlMXpPXREzExJt4k8/kM/lNflPQFDQJJsEUMUVMNjJkipqiJmqiprgpbkqYEqaUKWWccSbRJJqypqwpZ8qZ8qa8qWAqmIqmoqlsKpvbze3mDnOHudPcae4yd5mapqapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpYVqYVqaVaW1amzamjWln2pn2pr3pYDqYJJNkOpqOppPpZDqbzqaL6WK6mq6mm+lmepgepqfpaXqZXibZJJu+pq/pZ/qZAWaAGWQGmcFmsBlihpgUk2KGmWFmuBluRpgRZqQZZUZnnz7mLTPWjDPjzQSTalLNJDPJTDaTzRQzxUwz00yaSTMzzUwzy8wyc8wcM9fMNfPMPLPALDDpJt0sMotMhskwS8wSk2kyzTKzzKwwK8wqs8qsMWvMOrPObIANZpPZZLaYLWab2WZ2mB1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJstkmUPmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5ZwpcvF56E2tz2zh7lc1jr7Z57TX2b+OCtpBNsIVtEattflvgN7Gx1pawJW0pW9o6W8Ym2pt+F1e0lWxlW8XebqvaO2y138V17D22rr3X1rP32dr27t/E9e39toF9xDZEBLDNbWPb0jaxj9im9lHbzDa3LWxL294+aTvYp2ySfdp2tM/8Ll5kF9s1dq1dZ9fb3XaPPWPP2sP2W3vO/mR72d52kH3ZDrav2CH2VZtih/4uHm3ftGPsW3asHWfH2wm/i6fZ6TbNzrAz7bt2lp39uzjdfmDn2gw7z863C+zCX+LsmjLsh3aJ/chm2gCW2eV2hV1pV9nV/7/W5Xaj3WQ32132U7vNbrc77Md256UbYbvH7rWf2X32c3vIfmMP2C/tQXvEZtmvf4mzj++I/c4etd/bY/a4PWF/sCftj+pSdvax/2B/thest0BIQJIUBRRDuSiWclMcXUV56GrKS9dQhK6leLqO8tH1lJ8KUEEqRAlUmIqQJkOWiEIqSsUoSjfQpfJKUWlyVIYS6SYqSzdTObqFytOtVIFuo4pUiSpTFbqdqtIdVI3upOp0F9WgmlSLatPdVIfuobp0L9WD+6g+3U8N6AFqSA9SI3qIGtPD1IQeoab0KDWj5tSCWlIreoxa0+PUhtpSO3qC2tOT1IGeoiR6mjrSM9SJ/kKd6VnqQs9RV3qeulF36kEvUE96kXpRb0qmPtSXXqJ+1J8G0EAaRC/TYHqFhtCrlEJDaRi9RsPpdRpBb9BIGkWj6U0aQ2/RWBpH42kCpdJEmkRv02R6h6bQVJpG0ymNZtBMepdm0WyaQ+/RXHqf5tF8WkALKZ0+oEW0mDLoQ1pCH1EmLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFd9Cntpj20lz6jffQ57acv6AB9SQfpK8qir+kQfUOH6Vs6Qt/53vQ9HaPjdIJ+oJP0I52i03SGztI5+onO0890gTxBiKEIZajCIIwJc4WxYe4wLrwqzBNeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdHwhrB4eGNYIiwZlgpLhy4sEyaGN4Vlw5vDcuEtYfnw1rBCeFtYMawUPnJflfD2sGp4R1gtvDOsHt4V1ghrhrXC2uHdYZ3wnrBueG9YL7wvLBfeHzYIHwgbhg+GjcKHwsbhw2GT8JGwafho2CxsHrYIW4atwsfC1uHjYZuwbdgufCJsHz4ZdgifCpPCp8OO4TO/rL9/8d9fnxz2CfuGL4Uvhd7fKxdEF0bTox9EF0UXRzOiH0aXRD+KZkaXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e9r50LHDrhpFMucDEul4t1uV2cu8rlcVe7vO4aF3HXunh3ncvnrnf5XQFX0BVyCa6wK+K0M846cqEr6oq5qLvBFXc3uhKupCvlSjvnyrhE19K1cq1ca/e4a+PaunbuCfeEe9I96Z5yT7mnXUf3jOvk/uI6u2ddF/ece84977q57q6He8H1dBPz/npOJru+rq/r5/q5AW6AG+QGucFusBvihrgUl+KGuWFuuBvuRrgRbqQb6Ua70W6MG+PGurFuvBvvUl2qm+QmucluspviprhpbppLc2luppvpZrlZrursX/cyz81zC9wCl+7S3SKXfc+Y4Za4JS7TZbplbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vldrnd/ppfJ3X73H633x1wB9xB95XLcl+7Q+4bd9h9646479xR97075o67E+4Hd9L96E650+6MO+vOuZ/cefezu+C8S41MjEyKvB2ZHHknMiUyNTItMj2SFpkRmRl5NzIrMjsyJ/JeZG7k/ci8yPzIgsjCSHrkg8iiyOJIRuTDyJLIR5HMyNLIssjyyIrIyoj3hbeFvqgv5qP+Bl/c3+hL+JK+lC/tnS/jE/1Nvqy/2Zfzt/jy/lZfwd/mK/pKvrJ/1DfzzX0L39K38o/51v5x38a39e38E769f9J38E/5JP+07+if8Z38X3xn/6zv4p/zXf3zvpvv7nv4F3xP/6Lv5Xv7ZN/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hXfYof6of51/xw/7of4d/wI/0oPzrmTT/m0iMyTPCpfqKf5N/2k/07cKef6qf56T7Nz/Az/bt+lp/t5/j3/Fz/vp/n5/sFfqFP9x/4RX6xz/Af+iX+I5/pl156qexX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AP+S3/Qf+Wz/Nf+kP/GH/bf+iP+O3/Uf++P+eP+hP/Bn/Q/+lP+tD/jz/pz/id/3v/sL/D/WWOMMcYY+6dMvDwUv13z6+v8Pn+QI/5q474AcPX2Qll/vT77jnJD/l/H/UVC+wgAPN2760OXlho1kpOTL26bKSEoNh/g0t8EZYuBy/FSaAdPQhK0hbJ/WH9/0f0c/YP5o7cCxP1VTixcji/P/wUAJv/B/I89MXpRhfBM/H8x/3yAEsUu5+SGy/FSaPfL+5W2UO7v1F+g9T+oP/eXqQBt/ionD1yOL9efCI/DM5D0my0ZY4wxxhhjjLFf9ReVO196/rz0Lz7/6Pk8QV3OyQWX43/0fM4YY4wxxhhjjLEr79nuPZ56LCmpbed/fVDtv5X1Tw+awv/UzDz4w4H3AJe+ogDg35wQIHsg/5NHsfU/sq+Ui6fO365acdYH8L+jlX/G4Ar/YGKMMcYYY4z96S7f9P/26+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVA/4lfJ3alj5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//85evzE") lchown(&(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 80.991040][ T5758] cgroup: Unknown subsys name 'net' [ 81.129209][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.782575][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.468471][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.480349][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.542204][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.550536][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.566691][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.573885][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.582901][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.583082][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.598816][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.606135][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.611559][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.615244][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.627086][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.635632][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.638444][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.644943][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.652641][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.662047][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.666189][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.679716][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.690920][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.701022][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.712908][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.723039][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.179128][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.246971][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 85.325979][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.381874][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.436348][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.445046][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.452862][ T5769] bridge_slave_0: entered allmulticast mode [ 85.460136][ T5769] bridge_slave_0: entered promiscuous mode [ 85.505589][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.512961][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.520457][ T5769] bridge_slave_1: entered allmulticast mode [ 85.527523][ T5769] bridge_slave_1: entered promiscuous mode [ 85.576149][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.583661][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.591232][ T5780] bridge_slave_0: entered allmulticast mode [ 85.598676][ T5780] bridge_slave_0: entered promiscuous mode [ 85.639508][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.646968][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.654390][ T5780] bridge_slave_1: entered allmulticast mode [ 85.661880][ T5780] bridge_slave_1: entered promiscuous mode [ 85.671803][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.684344][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.748225][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.755502][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.762918][ T5775] bridge_slave_0: entered allmulticast mode [ 85.770780][ T5775] bridge_slave_0: entered promiscuous mode [ 85.778109][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.785478][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.792815][ T5774] bridge_slave_0: entered allmulticast mode [ 85.800357][ T5774] bridge_slave_0: entered promiscuous mode [ 85.829792][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.837874][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.845537][ T5775] bridge_slave_1: entered allmulticast mode [ 85.853216][ T5775] bridge_slave_1: entered promiscuous mode [ 85.873366][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.880863][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.888112][ T5774] bridge_slave_1: entered allmulticast mode [ 85.895410][ T5774] bridge_slave_1: entered promiscuous mode [ 85.915213][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.931028][ T5769] team0: Port device team_slave_0 added [ 85.959796][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.971689][ T5769] team0: Port device team_slave_1 added [ 85.989853][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.003109][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.014406][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.047068][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.093471][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.100802][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.127326][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.155529][ T5775] team0: Port device team_slave_0 added [ 86.165056][ T5780] team0: Port device team_slave_0 added [ 86.174668][ T5780] team0: Port device team_slave_1 added [ 86.193049][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.200047][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.228477][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.242066][ T5775] team0: Port device team_slave_1 added [ 86.261538][ T5774] team0: Port device team_slave_0 added [ 86.299488][ T5774] team0: Port device team_slave_1 added [ 86.344019][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.351168][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.377341][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.400490][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.407484][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.434235][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.446497][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.456047][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.482945][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.506166][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.514207][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.543382][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.555336][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.562489][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.588557][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.607356][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.615553][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.645021][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.663187][ T5769] hsr_slave_0: entered promiscuous mode [ 86.669681][ T5769] hsr_slave_1: entered promiscuous mode [ 86.717238][ T5774] hsr_slave_0: entered promiscuous mode [ 86.724482][ T5774] hsr_slave_1: entered promiscuous mode [ 86.730920][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.738741][ T5774] Cannot create hsr debugfs directory [ 86.781224][ T5783] Bluetooth: hci2: command tx timeout [ 86.781538][ T5772] Bluetooth: hci3: command tx timeout [ 86.787709][ T5783] Bluetooth: hci0: command tx timeout [ 86.794486][ T51] Bluetooth: hci1: command tx timeout [ 86.833912][ T5775] hsr_slave_0: entered promiscuous mode [ 86.840934][ T5775] hsr_slave_1: entered promiscuous mode [ 86.847915][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.855607][ T5775] Cannot create hsr debugfs directory [ 87.006389][ T5780] hsr_slave_0: entered promiscuous mode [ 87.013276][ T5780] hsr_slave_1: entered promiscuous mode [ 87.019475][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.028226][ T5780] Cannot create hsr debugfs directory [ 87.496443][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.515552][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.527786][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.539262][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.678958][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.692124][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.745426][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.776854][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.888867][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.903924][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.916426][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.929374][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.977204][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.013866][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.054715][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.062045][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.075117][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.085879][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.124551][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.135686][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.142856][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.166695][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.318909][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.391601][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.419107][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.475819][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.483046][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.538885][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.546138][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.565640][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.587411][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.594626][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.617513][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.635164][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.642399][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.715931][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.726747][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.768489][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.794288][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.818420][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.825655][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.861229][ T51] Bluetooth: hci1: command tx timeout [ 88.866720][ T51] Bluetooth: hci3: command tx timeout [ 88.873624][ T5772] Bluetooth: hci0: command tx timeout [ 88.879022][ T5783] Bluetooth: hci2: command tx timeout [ 88.886974][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.894214][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.104405][ T5775] veth0_vlan: entered promiscuous mode [ 89.154782][ T5775] veth1_vlan: entered promiscuous mode [ 89.218697][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.277161][ T5775] veth0_macvtap: entered promiscuous mode [ 89.308277][ T5775] veth1_macvtap: entered promiscuous mode [ 89.393769][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.414735][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.432603][ T5769] veth0_vlan: entered promiscuous mode [ 89.459536][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.472779][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.482105][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491072][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.514546][ T5769] veth1_vlan: entered promiscuous mode [ 89.553295][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.610970][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.684604][ T5769] veth0_macvtap: entered promiscuous mode [ 89.717470][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.736346][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.766334][ T5769] veth1_macvtap: entered promiscuous mode [ 89.815728][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.825299][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.853253][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.866233][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.879074][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.894463][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.915282][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.927975][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.944959][ T5774] veth0_vlan: entered promiscuous mode [ 89.983187][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.993568][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002777][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011845][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065325][ T5780] veth0_vlan: entered promiscuous mode [ 90.085265][ T5774] veth1_vlan: entered promiscuous mode [ 90.153905][ T5780] veth1_vlan: entered promiscuous mode [ 90.255631][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.280400][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.302221][ T5774] veth0_macvtap: entered promiscuous mode [ 90.368990][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.377487][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.377840][ T5780] veth0_macvtap: entered promiscuous mode [ 90.393932][ T5774] veth1_macvtap: entered promiscuous mode [ 90.418570][ T5780] veth1_macvtap: entered promiscuous mode [ 90.432939][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.456072][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.468396][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.479238][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.496123][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.527096][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.539299][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.551628][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.562328][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.574339][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.594770][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.611248][ T5770] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.625835][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.656122][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.672152][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.686279][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.698162][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.713536][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.726677][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.735908][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752610][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.766128][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848325][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.882856][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.896645][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.908723][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.925602][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.946028][ T5783] Bluetooth: hci0: command tx timeout [ 90.951802][ T5085] Bluetooth: hci3: command tx timeout [ 90.957248][ T5085] Bluetooth: hci1: command tx timeout [ 90.962900][ T5772] Bluetooth: hci2: command tx timeout [ 90.973865][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.988304][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.054892][ T5770] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 91.080138][ T5770] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.098697][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.108212][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.125075][ T5770] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.332753][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.350619][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.372266][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.456132][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477687][ T5770] usb 2-1: Product: syz [ 91.504637][ T5770] usb 2-1: Manufacturer: syz [ 91.896626][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032181][ T5770] usb 2-1: SerialNumber: syz [ 92.067148][ T5770] usb 2-1: config 0 descriptor?? [ 92.113831][ T5770] usb 2-1: selecting invalid altsetting 0 [ 92.120481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.128381][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.230475][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238405][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.457977][ T969] cfg80211: failed to load regulatory.db [ 92.580921][ T5859] syz.0.6: attempt to access beyond end of device [ 92.580921][ T5859] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.594261][ T5859] SQUASHFS error: Failed to read block 0x0: -5 [ 93.560158][ T51] Bluetooth: hci1: command tx timeout [ 93.565667][ T51] Bluetooth: hci0: command tx timeout [ 93.571432][ T51] Bluetooth: hci2: command tx timeout [ 93.576885][ T51] Bluetooth: hci3: command tx timeout [ 93.677885][ T5770] usb 2-1: USB disconnect, device number 2 [ 93.716382][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.730453][ T5857] 9pnet_fd: Insufficient options for proto=fd [ 93.736734][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.630745][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.550435][ T5770] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.051509][ T5770] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 96.153098][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.246878][ T5770] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.259554][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.268039][ T5770] usb 4-1: Product: syz [ 96.276872][ T5770] usb 4-1: Manufacturer: syz [ 96.286307][ T5770] usb 4-1: SerialNumber: syz [ 96.322833][ T5770] usb 4-1: config 0 descriptor?? [ 96.386168][ T5770] usb 4-1: selecting invalid altsetting 0 [ 97.323498][ T23] usb 4-1: USB disconnect, device number 2 [ 98.455704][ T5896] (null): rxe_set_mtu: Set mtu to 256 [ 98.462792][ T5897] (null): rxe_set_mtu: Set mtu to 256 [ 98.464387][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 98.471834][ T5897] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 98.480592][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 98.486065][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 98.656727][ T5896] infiniband syz2: set active [ 98.661752][ T5896] infiniband syz2: added vxcan1 [ 98.669496][ T5896] syz2: rxe_create_cq: returned err = -12 [ 98.675713][ T5896] infiniband syz2: Couldn't create ib_mad CQ [ 98.682006][ T5896] infiniband syz2: Couldn't open port 1 [ 98.804698][ T5896] RDS/IB: syz2: added [ 98.809136][ T5896] smc: adding ib device syz2 with port count 1 [ 98.815897][ T5896] smc: ib device syz2 port 1 has pnetid [ 98.832997][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 99.019663][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 99.176026][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 99.299085][ T5824] vxcan1 speed is unknown, defaulting to 1000 [ 99.307563][ T5818] vxcan1 speed is unknown, defaulting to 1000 [ 99.610687][ T5896] vxcan1 speed is unknown, defaulting to 1000 [ 100.010006][ T5905] syzkaller0: entered promiscuous mode [ 100.036102][ T5905] syzkaller0: entered allmulticast mode [ 100.155681][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 100.311760][ T786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.873223][ T786] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.945145][ T5918] fido_id[5918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.733930][ T5940] Zero length message leads to an empty skb [ 106.760975][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 106.828541][ T5940] 9pnet_fd: Insufficient options for proto=fd [ 108.615140][ T5950] overlayfs: failed to clone upperpath [ 110.690071][ C0] sched: RT throttling activated [ 111.339946][ T5964] (null): rxe_set_mtu: Set mtu to 256 [ 111.348215][ T5964] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 112.513745][ T5968] random: crng reseeded on system resumption [ 114.786154][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 119.190164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.909373][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 120.321205][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.565913][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 121.031462][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 121.045286][ T6012] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 121.731927][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 122.070201][ T6013] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.743960][ T6013] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.779243][ T6013] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.794224][ T6013] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.808842][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.825048][ T6013] usb 1-1: Product: syz [ 122.830930][ T6013] usb 1-1: Manufacturer: syz [ 122.837849][ T6013] usb 1-1: SerialNumber: syz [ 122.851166][ T6013] usb 1-1: config 0 descriptor?? [ 122.871852][ T6013] usb 1-1: selecting invalid altsetting 0 [ 122.973103][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.983211][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.993000][ T8] usb 2-1: can't read configurations, error -71 [ 123.146603][ T6021] 9pnet_fd: Insufficient options for proto=fd [ 123.407948][ T5770] usb 1-1: USB disconnect, device number 2 [ 123.501145][ T6026] fuse: Bad value for 'fd' [ 124.140893][ T6037] random: crng reseeded on system resumption [ 125.402869][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 126.711854][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 126.802007][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 127.152318][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.476331][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 127.873029][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 127.884209][ T6064] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 128.785049][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 129.902156][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.911331][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 129.919073][ T8] usb 2-1: can't read configurations, error -71 [ 130.840319][ T6078] random: crng reseeded on system resumption [ 132.605792][ T6086] (null): rxe_set_mtu: Set mtu to 256 [ 132.650189][ T6086] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 133.200758][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207482][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.606378][ T6097] (null): rxe_set_mtu: Set mtu to 256 [ 134.632580][ T6097] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 135.312212][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 143.273054][ T6137] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 143.487853][ T6137] veth0_vlan: left promiscuous mode [ 143.527386][ T6137] veth0_vlan: entered promiscuous mode [ 143.624060][ T6137] team0: Device veth0_vlan failed to register rx_handler [ 143.867162][ T6137] syz.1.79 (6137) used greatest stack depth: 19944 bytes left [ 144.572530][ T6139] 9pnet_fd: Insufficient options for proto=fd [ 148.342889][ T6177] securityfs: Unknown parameter '' [ 149.910189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 150.363265][ T6178] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 150.988899][ T6178] veth0_vlan: left promiscuous mode [ 151.037129][ T6178] veth0_vlan: entered promiscuous mode [ 151.053002][ T6178] team0: Device veth0_vlan failed to register rx_handler [ 154.780212][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.917438][ T6197] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 154.925833][ T6197] veth0_vlan: left promiscuous mode [ 154.932235][ T6197] veth0_vlan: entered promiscuous mode [ 154.939221][ T6197] team0: Device veth0_vlan failed to register rx_handler [ 155.000178][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 155.632459][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 155.643074][ T6209] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 156.760588][ T5815] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.859253][ T6217] securityfs: Unknown parameter '' [ 156.958116][ T6218] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 157.534024][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.637133][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.766503][ T8] usb 2-1: can't read configurations, error -71 [ 161.570348][ T6227] random: crng reseeded on system resumption [ 164.579933][ T6240] 9pnet_fd: Insufficient options for proto=fd [ 164.650362][ T6245] securityfs: Unknown parameter '' [ 164.938685][ T6250] securityfs: Unknown parameter '' [ 165.036874][ T6252] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 165.933706][ T6253] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 170.340413][ T6262] syz2: rxe_newlink: already configured on vxcan1 [ 174.684658][ T6271] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 174.693193][ T6271] veth0_vlan: left promiscuous mode [ 174.699151][ T6271] veth0_vlan: entered promiscuous mode [ 174.706306][ T6271] team0: Device veth0_vlan failed to register rx_handler [ 174.883788][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 176.060376][ T6288] random: crng reseeded on system resumption [ 179.318010][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 186.820329][ T6344] random: crng reseeded on system resumption [ 189.009212][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 189.464737][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 189.741672][ T6342] team0 (unregistering): Port device team_slave_0 removed [ 189.990831][ T6342] team0 (unregistering): Port device team_slave_1 removed [ 191.859809][ T6372] syz2: rxe_newlink: already configured on vxcan1 [ 193.511509][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 194.626278][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632904][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.392389][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.433645][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.442418][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.597135][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.615919][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.665272][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.315762][ T6389] vxcan1 speed is unknown, defaulting to 1000 [ 201.277743][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 201.293717][ T51] Bluetooth: hci4: command tx timeout [ 203.512667][ T51] Bluetooth: hci4: command tx timeout [ 207.041563][ T5772] Bluetooth: hci4: command tx timeout [ 207.506273][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 207.520086][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 207.833890][ T3515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.923013][ T3515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.075776][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 208.211010][ T3515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.397495][ T3515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.463622][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.471720][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.479064][ T6389] bridge_slave_0: entered allmulticast mode [ 208.499103][ T6389] bridge_slave_0: entered promiscuous mode [ 208.562802][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 208.625569][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 208.645926][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.670912][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.691970][ T6389] bridge_slave_1: entered allmulticast mode [ 208.743644][ T6389] bridge_slave_1: entered promiscuous mode [ 208.905607][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.014882][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.100399][ T51] Bluetooth: hci4: command tx timeout [ 209.374507][ T6389] team0: Port device team_slave_0 added [ 209.424170][ T6389] team0: Port device team_slave_1 added [ 210.162792][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.169873][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.364500][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.500649][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.531844][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.631186][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.128656][ T6389] hsr_slave_0: entered promiscuous mode [ 211.223450][ T6389] hsr_slave_1: entered promiscuous mode [ 211.274871][ T6389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.304633][ T6389] Cannot create hsr debugfs directory [ 211.349565][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 211.381675][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 212.308583][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 212.360889][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 212.558726][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 212.587676][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 216.859320][ T6389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.945890][ T6389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.047394][ T3515] hsr_slave_0: left promiscuous mode [ 217.134863][ T3515] hsr_slave_1: left promiscuous mode [ 217.321174][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.328725][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.341054][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.348527][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.357036][ T3515] bridge_slave_1: left allmulticast mode [ 217.363067][ T3515] bridge_slave_1: left promiscuous mode [ 217.370197][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.385856][ T3515] bridge_slave_0: left allmulticast mode [ 217.410440][ T3515] bridge_slave_0: left promiscuous mode [ 218.083609][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.164822][ T3515] veth1_macvtap: left promiscuous mode [ 218.177910][ T3515] veth0_macvtap: left promiscuous mode [ 218.198131][ T3515] veth1_vlan: left promiscuous mode [ 218.221213][ T3515] veth0_vlan: left promiscuous mode [ 221.026949][ T6515] securityfs: Unknown parameter '' [ 221.117642][ T6509] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 221.291725][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.342218][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.664344][ T3515] bond0 (unregistering): Released all slaves [ 221.779457][ T6389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.792058][ T6389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.265751][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.187388][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.307843][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.315196][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.401266][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.408498][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.051150][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 225.493423][ T6517] team0 (unregistering): Port device team_slave_0 removed [ 225.582364][ T6517] team0 (unregistering): Port device team_slave_1 removed [ 225.837015][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.711729][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 227.849304][ T6389] veth0_vlan: entered promiscuous mode [ 228.014649][ T6389] veth1_vlan: entered promiscuous mode [ 228.081717][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 228.638768][ T6389] veth0_macvtap: entered promiscuous mode [ 228.657131][ T6389] veth1_macvtap: entered promiscuous mode [ 228.801528][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.816210][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.862909][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.886116][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.896491][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.907447][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.924595][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.071922][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.101208][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.330821][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.373578][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.386847][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.411143][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.435542][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.529316][ T6389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.538465][ T6389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.547477][ T6389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.596549][ T6389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.582345][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 232.595113][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.612058][ T6602] syz_tun: entered promiscuous mode [ 232.623317][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.708583][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.723995][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.342611][ T6613] syz2: rxe_newlink: already configured on vxcan1 [ 233.633275][ T6616] (null): rxe_set_mtu: Set mtu to 256 [ 233.639217][ T6616] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 234.981566][ T6628] (null): rxe_set_mtu: Set mtu to 256 [ 234.989555][ T6628] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 236.842531][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 238.892162][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 238.907085][ T6662] syz_tun: entered promiscuous mode [ 243.617673][ T6700] 9pnet_fd: Insufficient options for proto=fd [ 243.743736][ T6705] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 244.680341][ T6710] (null): rxe_set_mtu: Set mtu to 256 [ 244.706715][ T6710] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 245.331710][ T6705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.750578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 250.105954][ T6728] securityfs: Unknown parameter '' [ 250.121481][ T6728] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 254.345184][ T6737] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 254.367922][ T6736] syz.4.201: attempt to access beyond end of device [ 254.367922][ T6736] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 254.381817][ T6736] SQUASHFS error: Failed to read block 0x0: -5 [ 254.656289][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.239414][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.279583][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.956969][ T6781] securityfs: Unknown parameter '' [ 260.972651][ T6781] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 263.590983][ T6792] securityfs: Unknown parameter '' [ 263.656961][ T6793] securityfs: Unknown parameter '' [ 263.679071][ T6793] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 268.137169][ T6806] (null): rxe_set_mtu: Set mtu to 256 [ 268.143048][ T6806] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 270.764893][ T6834] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 270.773776][ T6834] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 270.782669][ T6834] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 272.027759][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 272.319484][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 274.252498][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 274.432766][ T6858] syz_tun: entered promiscuous mode [ 274.723453][ T6866] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 274.748245][ T6866] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 274.781551][ T6866] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 275.560140][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.740189][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 275.753690][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.816953][ T6883] fuse: Bad value for 'fd' [ 275.832123][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 275.847215][ T8] usb 1-1: config 1 has no interface number 1 [ 275.865752][ T8] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 275.903272][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 275.991002][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 276.015201][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.078905][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.097757][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.115655][ T8] usb 1-1: Product: syz [ 276.127076][ T8] usb 1-1: Manufacturer: syz [ 276.135325][ T8] usb 1-1: SerialNumber: syz [ 276.318700][ T6890] securityfs: Unknown parameter '' [ 276.332601][ T6890] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 279.054019][ T8] usb 1-1: failed to enable PITCH for EP 0x82 [ 279.088346][ T8] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 279.298040][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 280.322943][ T8] usb 1-1: USB disconnect, device number 3 [ 280.453825][ T6782] udevd[6782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.189621][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 284.344807][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 284.366847][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.708145][ T6945] fido_id[6945]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 284.791702][ T6943] 9pnet_fd: Insufficient options for proto=fd [ 285.112811][ T6953] securityfs: Unknown parameter '' [ 285.126750][ T6953] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 287.218142][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 287.281993][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 288.868361][ T6979] securityfs: Unknown parameter '' [ 288.883444][ T6979] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 291.865934][ T6987] securityfs: Unknown parameter '' [ 291.912774][ T6987] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 293.415402][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 293.428545][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.757088][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.900362][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 293.910237][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 294.094344][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 294.103262][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.120859][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.121073][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 294.137205][ T5816] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 294.174514][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.195907][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.224821][ T5816] usb 1-1: config 0 descriptor?? [ 294.228963][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.264533][ T5850] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 294.289649][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.356099][ T5850] usb 5-1: config 0 descriptor?? [ 294.691917][ T5816] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 294.713119][ T5816] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 294.813386][ T5850] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 294.855619][ T5850] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 294.871445][ T5816] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 294.903657][ T5816] ft260: probe of 0003:0403:6030.0004 failed with error -5 [ 294.999276][ T5850] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 295.222301][ T5850] ft260 0003:0403:6030.0005: failed to retrieve system status [ 295.237965][ T786] usb 1-1: USB disconnect, device number 4 [ 295.304164][ T5850] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 295.359522][ T5850] usb 5-1: USB disconnect, device number 2 [ 297.070771][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 298.210113][ T6013] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 298.391129][ T6013] usb 2-1: Using ep0 maxpacket: 16 [ 298.399898][ T6013] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.409582][ T6013] usb 2-1: config 1 has no interface number 1 [ 300.464909][ T6013] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 300.588899][ T6013] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 300.603726][ T6013] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.706474][ T6013] usb 2-1: string descriptor 0 read error: -71 [ 300.720232][ T6013] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.737828][ T6013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.785059][ T6013] usb 2-1: can't set config #1, error -71 [ 301.360102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 301.590328][ T6013] usb 2-1: USB disconnect, device number 9 [ 304.142842][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 305.790501][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 306.150960][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 307.252905][ T7126] securityfs: Unknown parameter '' [ 308.630173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 312.202693][ T7152] netlink: 'syz.4.283': attribute type 1 has an invalid length. [ 312.310113][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 312.475699][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.549411][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 313.593149][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 314.810066][ T8] usb 1-1: config 1 has no interface number 1 [ 314.816482][ T8] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 314.828698][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 314.842804][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.871827][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.902921][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.930223][ T8] usb 1-1: Product: syz [ 314.940273][ T8] usb 1-1: Manufacturer: syz [ 314.960047][ T8] usb 1-1: SerialNumber: syz [ 315.670367][ T8] usb 1-1: failed to enable PITCH for EP 0x82 [ 315.688028][ T8] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 315.988111][ T28] audit: type=1326 audit(1777193631.104:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.0.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a3639cdd9 code=0x0 [ 316.364305][ T8] usb 1-1: USB disconnect, device number 5 [ 316.472759][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 316.854334][ T6990] udevd[6990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.562077][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.568707][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.111670][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 318.169608][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 320.162221][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 322.480137][ T5818] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 322.700167][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 322.715341][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.729367][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.752475][ T5818] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 322.777248][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.815282][ T5818] usb 2-1: config 0 descriptor?? [ 323.092398][ T7235] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 324.665378][ T7235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.020012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 326.512824][ T28] audit: type=1326 audit(1777193641.504:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.4.302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f104859cdd9 code=0x0 [ 326.577474][ T5818] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 326.590922][ T5818] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 326.681059][ T5818] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 326.915578][ T5818] ft260 0003:0403:6030.0006: failed to retrieve system status [ 327.061085][ T5818] ft260: probe of 0003:0403:6030.0006 failed with error -32 [ 327.116298][ T5818] usb 2-1: USB disconnect, device number 10 [ 327.483947][ T7253] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 328.916154][ T7253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.418178][ T7268] securityfs: Unknown parameter '' [ 336.990434][ T28] audit: type=1326 audit(1777193652.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.0.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a3639cdd9 code=0x0 [ 337.826988][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 339.350214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 344.400647][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 345.033699][ T7366] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 345.221620][ T7366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.897506][ T7383] securityfs: Unknown parameter '' [ 348.977620][ T7389] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 349.100599][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 349.342077][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 349.492558][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 349.684552][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.708827][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.724811][ T8] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 349.745685][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.765735][ T8] usb 1-1: config 0 descriptor?? [ 351.141462][ T8] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 351.151078][ T8] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 351.233669][ T8] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 351.490220][ T8] ft260 0003:0403:6030.0007: failed to retrieve system status [ 352.291025][ T8] ft260: probe of 0003:0403:6030.0007 failed with error -32 [ 352.374692][ T8] usb 1-1: USB disconnect, device number 6 [ 353.965470][ T28] audit: type=1326 audit(1777193669.064:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.0.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a3639cdd9 code=0x0 [ 354.287210][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 355.364596][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 355.797909][ T7442] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 356.114856][ T7442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.270166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.505186][ T7451] securityfs: Unknown parameter '' [ 358.594012][ T7452] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 360.783859][ T7453] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 360.969879][ T7453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.390186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 365.211563][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 367.385731][ T7482] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 367.486359][ T7482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.145372][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 372.083819][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 372.733417][ T7520] securityfs: Unknown parameter '' [ 372.840073][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 372.864708][ T7522] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 373.158486][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 374.750493][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.658049][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 377.026823][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.040321][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.053727][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.604303][ T8] usb 2-1: config 0 descriptor?? [ 377.708040][ T8] usb 2-1: can't set config #0, error -71 [ 377.716869][ T8] usb 2-1: USB disconnect, device number 11 [ 378.767387][ T7544] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 378.945879][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.952335][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.217672][ T7544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.890440][ T28] audit: type=1326 audit(1777193697.014:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351d39cdd9 code=0x0 [ 382.429022][ T7561] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 382.437906][ T7561] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 382.446641][ T7561] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 384.329330][ T28] audit: type=1326 audit(1777193699.444:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.1.382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351d39cdd9 code=0x0 [ 384.500142][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.787150][ T786] usb 5-1: Using ep0 maxpacket: 32 [ 384.876522][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.937102][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.015717][ T786] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 385.185056][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.257387][ T786] usb 5-1: config 0 descriptor?? [ 385.537859][ T7586] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 385.910883][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 386.022507][ T786] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 386.035321][ T786] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 386.463552][ T786] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 386.505887][ T786] ft260 0003:0403:6030.0008: failed to retrieve system status [ 386.617766][ T786] ft260: probe of 0003:0403:6030.0008 failed with error -5 [ 386.761643][ T5818] usb 5-1: USB disconnect, device number 3 [ 386.942451][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 386.967941][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 390.135983][ T7609] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 390.305798][ T7609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.423758][ T7613] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 392.558437][ T7613] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 392.669527][ T7613] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 393.913929][ T7621] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 393.953520][ T7621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.047498][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 394.113441][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 394.394526][ T7631] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 397.730732][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 399.655522][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 399.872626][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 399.975891][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 400.059854][ T7656] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 400.555182][ T7656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.989251][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 403.617841][ T7666] syz.1.398 uses obsolete (PF_INET,SOCK_PACKET) [ 404.889519][ T7684] securityfs: Unknown parameter '' [ 407.373922][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 409.341448][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 410.067347][ T7709] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 410.075774][ T7709] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 410.086775][ T7709] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 411.113919][ T7711] netlink: 'syz.4.407': attribute type 1 has an invalid length. [ 413.238789][ T7711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.782613][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 416.100761][ T5818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 416.265521][ T7737] securityfs: Unknown parameter '' [ 416.300042][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 417.908324][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.004152][ T5818] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 419.013496][ T5818] usb 5-1: config 1 has no interface number 1 [ 419.027800][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 419.038694][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 419.052845][ T5818] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.775580][ T5818] usb 5-1: string descriptor 0 read error: -71 [ 419.783147][ T5818] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.813430][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.988555][ T5818] usb 5-1: can't set config #1, error -71 [ 420.008219][ T5818] usb 5-1: USB disconnect, device number 4 [ 420.330495][ T7750] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 420.482368][ T7750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.464720][ T6013] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 423.182362][ T6013] usb 2-1: Using ep0 maxpacket: 8 [ 423.409790][ T7768] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 425.858992][ T6013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.924198][ T6013] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 426.127519][ T6013] usb 2-1: can't read configurations, error -71 [ 426.152396][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 426.231056][ T7778] mmap: syz.2.423 (7778) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 427.995538][ T7786] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 428.123381][ T7786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.460696][ T786] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 428.770920][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 428.789036][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.819139][ T786] usb 2-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 428.857431][ T786] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 428.896796][ T786] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 428.923818][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.947106][ T786] usb 2-1: Product: syz [ 428.958000][ T786] usb 2-1: Manufacturer: syz [ 428.967814][ T786] usb 2-1: SerialNumber: syz [ 429.701044][ T786] usb 2-1: USB disconnect, device number 14 [ 432.518105][ T7838] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 432.672701][ T7838] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.070147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 435.387636][ T7848] securityfs: Unknown parameter '' [ 435.479815][ T7849] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 438.124132][ T7856] securityfs: Unknown parameter '' [ 438.216389][ T7857] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 440.385177][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396849][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.936764][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 443.063879][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 443.928726][ T7901] securityfs: Unknown parameter '' [ 444.019473][ T7902] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 452.217449][ T28] audit: type=1326 audit(1777193767.264:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.2.471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3679cdd9 code=0x0 [ 458.233054][ T7999] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 458.242368][ T7999] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 458.251278][ T7999] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 462.710057][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 463.110040][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 463.800903][ T786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.811195][ T786] usb 1-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 463.822586][ T786] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 463.970316][ T786] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 463.983815][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.002816][ T786] usb 1-1: Product: syz [ 464.007057][ T786] usb 1-1: Manufacturer: syz [ 464.013629][ T786] usb 1-1: SerialNumber: syz [ 464.101757][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 464.151707][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 464.340721][ T8030] securityfs: Unknown parameter '' [ 464.447231][ T8032] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 464.770518][ T786] usb 1-1: USB disconnect, device number 7 [ 467.421648][ T8038] securityfs: Unknown parameter '' [ 467.512079][ T8039] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 472.449250][ T8059] securityfs: Unknown parameter '' [ 477.060644][ T8072] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 477.479571][ T8072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.017636][ T8095] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 482.121417][ T8095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.310772][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 487.310949][ T28] audit: type=1326 audit(1777193802.074:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.1.517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351d39cdd9 code=0x0 [ 487.500834][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 487.528523][ T27] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 487.575173][ T27] usb 5-1: config 1 has no interface number 1 [ 487.590583][ T27] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 487.644397][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 488.402016][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.420612][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.430824][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.440842][ T27] usb 5-1: Product: syz [ 488.446056][ T27] usb 5-1: Manufacturer: syz [ 488.451372][ T27] usb 5-1: SerialNumber: syz [ 488.754690][ T27] usb 5-1: failed to enable PITCH for EP 0x82 [ 488.802730][ T27] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 488.892919][ T8127] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 489.070392][ T8127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.073355][ T27] usb 5-1: USB disconnect, device number 5 [ 491.227096][ T8135] udevd[8135]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.410226][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 491.560068][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 491.601266][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 491.609184][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.622137][ T8] usb 2-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 491.632985][ T8] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 491.644907][ T8] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 491.654582][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.690023][ T8] usb 2-1: Product: syz [ 491.694278][ T8] usb 2-1: Manufacturer: syz [ 491.709243][ T8] usb 2-1: SerialNumber: syz [ 491.746986][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 491.776210][ T27] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 491.798005][ T27] usb 5-1: config 1 has no interface number 1 [ 491.855091][ T27] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 491.872047][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 491.885731][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.901612][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.918922][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.927858][ T27] usb 5-1: Product: syz [ 491.932232][ T27] usb 5-1: Manufacturer: syz [ 491.937028][ T27] usb 5-1: SerialNumber: syz [ 492.431783][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 492.476233][ T27] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 492.701511][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 492.796680][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.907202][ T23] usb 3-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 492.958003][ T27] usb 5-1: USB disconnect, device number 6 [ 492.964207][ T23] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 493.024943][ T23] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 493.065044][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.143390][ T23] usb 3-1: Product: syz [ 493.147645][ T23] usb 3-1: Manufacturer: syz [ 493.147959][ T8136] udevd[8136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.200419][ T23] usb 3-1: SerialNumber: syz [ 494.835766][ T8] usb 2-1: USB disconnect, device number 15 [ 495.061947][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 495.691276][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 496.072041][ T23] usb 3-1: USB disconnect, device number 2 [ 496.250138][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 496.286986][ T8172] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 496.540559][ T8172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.554317][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 496.580251][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.633239][ T27] usb 1-1: config 1 has no interface number 1 [ 496.655212][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 496.748017][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 498.531532][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.557195][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.568395][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.586359][ T27] usb 1-1: Product: syz [ 498.590969][ T27] usb 1-1: Manufacturer: syz [ 498.595632][ T27] usb 1-1: SerialNumber: syz [ 498.870248][ T27] usb 1-1: failed to enable PITCH for EP 0x82 [ 498.900203][ T27] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 498.945671][ T27] usb 1-1: USB disconnect, device number 8 [ 499.066570][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.118620][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.539'. [ 501.833021][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.839465][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.528362][ T8207] qrtr: Invalid version 0 [ 502.580114][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 503.611053][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 503.619347][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.632916][ T8] usb 5-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 503.643569][ T8] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 503.660095][ T8] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 503.669480][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.679455][ T8] usb 5-1: Product: syz [ 503.686288][ T8] usb 5-1: Manufacturer: syz [ 503.696611][ T8] usb 5-1: SerialNumber: syz [ 504.243705][ T28] audit: type=1326 audit(1777193818.944:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a3639cdd9 code=0x0 [ 504.599358][ T8216] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 504.862878][ T8216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.514942][ T8] usb 5-1: USB disconnect, device number 7 [ 509.345205][ T6013] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 509.642189][ T6013] usb 3-1: Using ep0 maxpacket: 8 [ 509.658978][ T6013] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.803583][ T6013] usb 3-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 509.823660][ T6013] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 509.861210][ T6013] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 509.872867][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.922730][ T6013] usb 3-1: Product: syz [ 509.957582][ T6013] usb 3-1: Manufacturer: syz [ 510.284650][ T6013] usb 3-1: SerialNumber: syz [ 510.990224][ T786] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 511.060679][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 511.107226][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 511.248086][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 511.301726][ T786] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 511.326790][ T786] usb 2-1: config 1 has no interface number 1 [ 511.350089][ T786] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 511.375889][ T786] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 511.399427][ T786] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.447788][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.463002][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.502868][ T786] usb 2-1: Product: syz [ 511.510539][ T786] usb 2-1: Manufacturer: syz [ 511.520211][ T786] usb 2-1: SerialNumber: syz [ 511.612343][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 511.767215][ T786] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 512.010281][ T786] usb 2-1: USB disconnect, device number 16 [ 512.176998][ T6013] usb 3-1: USB disconnect, device number 3 [ 512.241981][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.709462][ T8257] qrtr: Invalid version 0 [ 513.812539][ T8260] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 514.085805][ T8260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 517.045037][ T28] audit: type=1326 audit(1777193831.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3679cdd9 code=0x0 [ 518.112627][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 518.255787][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 520.378568][ T8291] securityfs: Unknown parameter '' [ 523.245609][ T8299] securityfs: Unknown parameter '' [ 523.337904][ T8300] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 523.380208][ T6013] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 525.530011][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 525.539357][ T6013] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 525.598628][ T6013] usb 5-1: config 1 has no interface number 1 [ 525.763693][ T6013] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 526.032552][ T6013] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 526.048012][ T6013] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.143787][ T6013] usb 5-1: string descriptor 0 read error: -71 [ 526.155261][ T6013] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.164957][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.193257][ T6013] usb 5-1: can't set config #1, error -71 [ 526.211901][ T6013] usb 5-1: USB disconnect, device number 8 [ 526.837465][ T28] audit: type=1326 audit(1777193841.634:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.4.569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f104859cdd9 code=0x0 [ 527.131153][ T8316] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 527.778655][ T8316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.120561][ T28] audit: type=1326 audit(1777193846.164:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351d39cdd9 code=0x0 [ 531.142964][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 531.830532][ T8348] random: crng reseeded on system resumption [ 532.990346][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 533.376886][ T23] usb 1-1: device descriptor read/all, error -71 [ 533.817423][ T8359] securityfs: Unknown parameter '' [ 533.937059][ T8361] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 536.589426][ T8364] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 536.851937][ T8364] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.222394][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 541.422660][ T28] audit: type=1326 audit(1777193856.464:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.1.589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f351d39cdd9 code=0x0 [ 541.570157][ T5816] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 541.760116][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 541.781570][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 541.798338][ T5816] usb 5-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 541.809324][ T5816] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 541.822079][ T5816] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 541.831447][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.839583][ T5816] usb 5-1: Product: syz [ 541.843865][ T5816] usb 5-1: Manufacturer: syz [ 541.848513][ T5816] usb 5-1: SerialNumber: syz [ 545.910358][ T5816] usb 5-1: USB disconnect, device number 9 [ 546.603639][ T786] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 546.980090][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 547.018847][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 547.122183][ T786] usb 2-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 547.240622][ T786] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 547.323427][ T786] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 547.337655][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.389348][ T786] usb 2-1: Product: syz [ 547.395096][ T786] usb 2-1: Manufacturer: syz [ 547.399774][ T786] usb 2-1: SerialNumber: syz [ 547.776249][ T28] audit: type=1326 audit(1777193862.814:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.2.603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3679cdd9 code=0x0 [ 548.068440][ T786] usb 2-1: USB disconnect, device number 17 [ 549.941936][ T8466] securityfs: Unknown parameter '' [ 550.015021][ T8467] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 554.360415][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 556.188880][ T8503] securityfs: Unknown parameter '' [ 558.407799][ T8501] syzkaller0: entered promiscuous mode [ 558.420228][ T8501] syzkaller0: entered allmulticast mode [ 562.628138][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 563.204645][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 563.264321][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.279560][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 563.288492][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.368025][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 563.510609][ T8557] securityfs: Unknown parameter '' [ 565.718984][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 567.090398][ T28] audit: type=1326 audit(1777193881.824:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.2.632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3679cdd9 code=0x0 [ 567.505897][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 568.888372][ T786] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 569.100319][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 569.109502][ T786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 569.128483][ T786] usb 5-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 569.149773][ T786] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 569.301120][ T786] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 569.369820][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.454895][ T786] usb 5-1: Product: syz [ 569.459396][ T786] usb 5-1: Manufacturer: syz [ 569.464280][ T786] usb 5-1: SerialNumber: syz [ 569.939647][ T8584] qrtr: Invalid version 0 [ 570.184065][ T786] usb 5-1: USB disconnect, device number 10 [ 570.404028][ T8589] securityfs: Unknown parameter '' [ 570.472839][ T8590] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 572.525711][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 574.244419][ T8599] securityfs: Unknown parameter '' [ 577.512459][ T8613] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 577.897819][ T8613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.907245][ T8628] qrtr: Invalid version 0 [ 579.961673][ T8627] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 581.258312][ T8627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.473952][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 584.041978][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 584.518431][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 586.341087][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 586.540351][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 586.645459][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 586.760508][ T8668] qrtr: Invalid version 0 [ 586.784308][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 588.410535][ T8679] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 590.930427][ T8679] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.192020][ T8687] syzkaller0: entered promiscuous mode [ 591.197535][ T8687] syzkaller0: entered allmulticast mode [ 592.317207][ T8691] vivid-003: kernel_thread() failed [ 594.670338][ T8718] qrtr: Invalid version 0 [ 596.263121][ T8729] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 596.699634][ T8729] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.779517][ T8732] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 598.788350][ T8732] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 598.797082][ T8732] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 601.396239][ T8756] qrtr: Invalid version 0 [ 602.637625][ T8765] securityfs: Unknown parameter '' [ 602.766561][ T8766] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 607.053735][ T8793] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 608.339391][ T8793] 8021q: adding VLAN 0 to HW filter on device bond9 [ 609.888562][ T8803] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 610.106420][ T8803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 612.958473][ T8810] qrtr: Invalid version 0 [ 614.912605][ T8827] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 615.854471][ T8831] vivid-003: kernel_thread() failed [ 621.047917][ T8865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 621.054839][ T8865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.066922][ T8865] vhci_hcd vhci_hcd.0: Device attached [ 621.350040][ T27] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 621.699234][ T8866] vhci_hcd: connection closed [ 621.715065][ T1073] vhci_hcd: stop threads [ 622.331267][ T1073] vhci_hcd: release socket [ 622.337606][ T1073] vhci_hcd: disconnect device [ 623.335174][ T8877] vxcan1 speed is unknown, defaulting to 1000 [ 625.450816][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.463256][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.628863][ T8887] securityfs: Unknown parameter '' [ 628.874999][ T27] vhci_hcd: vhci_device speed not set [ 631.104809][ T5770] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 631.608826][ T5770] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 634.284467][ T8905] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 634.407268][ T8905] 8021q: adding VLAN 0 to HW filter on device bond10 [ 634.537698][ T8904] fido_id[8904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.233293][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 637.336348][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 637.480057][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 638.371040][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 638.483064][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 639.470099][ T8933] random: crng reseeded on system resumption [ 640.982649][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 641.193154][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 642.190164][ T5770] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 642.850645][ T5770] usb 1-1: Using ep0 maxpacket: 8 [ 642.870446][ T5770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 642.960319][ T5770] usb 1-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 643.017758][ T5770] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 643.068780][ T5770] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 643.164709][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.176062][ T5770] usb 1-1: Product: syz [ 643.183606][ T5770] usb 1-1: Manufacturer: syz [ 643.188607][ T5770] usb 1-1: SerialNumber: syz [ 644.672076][ T8967] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 644.678678][ T8967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.687591][ T8967] vhci_hcd vhci_hcd.0: Device attached [ 645.952104][ T8968] vhci_hcd: connection closed [ 645.953979][ T3515] vhci_hcd: stop threads [ 645.963256][ T3515] vhci_hcd: release socket [ 645.967736][ T3515] vhci_hcd: disconnect device [ 646.070977][ T5770] usb 1-1: USB disconnect, device number 11 [ 646.736446][ T8978] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 646.736510][ T8978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.736664][ T8978] vhci_hcd vhci_hcd.0: Device attached [ 647.200256][ T786] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 649.700486][ T8982] vxcan1 speed is unknown, defaulting to 1000 [ 649.858369][ T8979] vhci_hcd: connection reset by peer [ 650.963183][ T1073] vhci_hcd: stop threads [ 650.967529][ T1073] vhci_hcd: release socket [ 651.005803][ T1073] vhci_hcd: disconnect device [ 651.378453][ T8995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 651.385070][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 651.394181][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 651.416152][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 652.300155][ T786] vhci_hcd: vhci_device speed not set [ 652.620049][ T8996] vhci_hcd: connection closed [ 652.639120][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 652.684535][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 652.693855][ T3515] vhci_hcd: stop threads [ 652.698180][ T3515] vhci_hcd: release socket [ 652.703624][ T3515] vhci_hcd: disconnect device [ 652.769980][ T5770] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 652.777752][ T5770] usb 37-1: enqueue for inactive port 0 [ 652.838785][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 652.870422][ T5770] vhci_hcd: vhci_device speed not set [ 653.055045][ T9006] securityfs: Unknown parameter '' [ 656.530633][ T9022] securityfs: Unknown parameter '' [ 656.600321][ T9023] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 656.639979][ T5850] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 658.362965][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 658.876039][ T5850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 658.898946][ T5850] usb 5-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 658.914359][ T5850] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 658.934046][ T5850] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 658.951501][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.959705][ T5850] usb 5-1: Product: syz [ 658.987302][ T5850] usb 5-1: Manufacturer: syz [ 659.001358][ T5850] usb 5-1: SerialNumber: syz [ 659.987797][ T9029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 660.029327][ T5850] usb 5-1: USB disconnect, device number 11 [ 662.592824][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 663.113075][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 663.967347][ T9069] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 664.904944][ T9079] random: crng reseeded on system resumption [ 666.751281][ T9092] vxcan1 speed is unknown, defaulting to 1000 [ 667.006767][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 667.850820][ T9100] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 667.880077][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 668.872319][ T9102] vxcan1 speed is unknown, defaulting to 1000 [ 669.438957][ T9117] ======================================================= [ 669.438957][ T9117] WARNING: The mand mount option has been deprecated and [ 669.438957][ T9117] and is ignored by this kernel. Remove the mand [ 669.438957][ T9117] option from the mount to silence this warning. [ 669.438957][ T9117] ======================================================= [ 669.499578][ T9118] overlayfs: overlapping lowerdir path [ 670.464976][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 672.486412][ T9140] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 673.329861][ T9148] securityfs: Unknown parameter '' [ 676.778625][ T9161] vxcan1 speed is unknown, defaulting to 1000 [ 677.911246][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 680.364601][ T5816] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 680.509637][ T5816] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 681.146977][ T9180] fido_id[9180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.004929][ T9193] securityfs: Unknown parameter '' [ 684.528752][ T9196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 684.535353][ T9196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 684.543501][ T9196] vhci_hcd vhci_hcd.0: Device attached [ 686.000409][ T9197] vhci_hcd: connection closed [ 686.031737][ T3515] vhci_hcd: stop threads [ 686.060403][ T5816] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 686.089046][ T3515] vhci_hcd: release socket [ 686.099291][ T3515] vhci_hcd: disconnect device [ 686.144812][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.151304][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.210093][ T9216] random: crng reseeded on system resumption [ 690.753552][ T9232] securityfs: Unknown parameter '' [ 693.419986][ T5816] vhci_hcd: vhci_device speed not set [ 693.981353][ T9241] vxcan1 speed is unknown, defaulting to 1000 [ 694.215009][ T9248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.227282][ T9248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.238128][ T9248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.249679][ T9248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.258370][ T9248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 694.266767][ T9248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.193008][ T9246] vxcan1 speed is unknown, defaulting to 1000 [ 695.693954][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 695.725711][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 696.181161][ T9272] securityfs: Unknown parameter '' [ 696.273868][ T9273] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 696.301027][ T51] Bluetooth: hci1: command tx timeout [ 698.380109][ T51] Bluetooth: hci1: command tx timeout [ 698.599781][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 698.838384][ T9281] securityfs: Unknown parameter '' [ 700.460197][ T51] Bluetooth: hci1: command tx timeout [ 701.679781][ T2986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.056042][ T9286] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 702.402197][ T2986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.550447][ T51] Bluetooth: hci1: command tx timeout [ 702.648007][ T2986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.710442][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.717789][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.740531][ T9246] bridge_slave_0: entered allmulticast mode [ 702.762554][ T9246] bridge_slave_0: entered promiscuous mode [ 702.803646][ T2986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.836308][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.846430][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.856286][ T9246] bridge_slave_1: entered allmulticast mode [ 702.881478][ T9246] bridge_slave_1: entered promiscuous mode [ 702.995476][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.037207][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.382003][ T9246] team0: Port device team_slave_0 added [ 703.883092][ T9246] team0: Port device team_slave_1 added [ 704.115478][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.123118][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.150492][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.268787][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.287176][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.370867][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.608942][ T9246] hsr_slave_0: entered promiscuous mode [ 704.639289][ T9246] hsr_slave_1: entered promiscuous mode [ 704.660219][ T9246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.678353][ T9246] Cannot create hsr debugfs directory [ 710.308838][ T9246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.353453][ T9246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.458031][ T9246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.499019][ T9246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.929514][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.670194][ T2986] hsr_slave_0: left promiscuous mode [ 711.680888][ T2986] hsr_slave_1: left promiscuous mode [ 711.722286][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.747705][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.766426][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.787612][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.890331][ T2986] bridge_slave_1: left allmulticast mode [ 711.896087][ T2986] bridge_slave_1: left promiscuous mode [ 711.930449][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.014454][ T2986] bridge_slave_0: left allmulticast mode [ 712.032953][ T2986] bridge_slave_0: left promiscuous mode [ 712.078954][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.207320][ T2986] veth1_macvtap: left promiscuous mode [ 712.213065][ T2986] veth0_macvtap: left promiscuous mode [ 712.220238][ T2986] veth1_vlan: left promiscuous mode [ 713.050855][ T9392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 713.129193][ T2986] bond8 (unregistering): Released all slaves [ 713.561636][ T2986] bond7 (unregistering): Released all slaves [ 714.002039][ T2986] bond6 (unregistering): Released all slaves [ 714.355196][ T2986] bond5 (unregistering): Released all slaves [ 714.751315][ T2986] bond4 (unregistering): Released all slaves [ 715.075001][ T2986] bond3 (unregistering): Released all slaves [ 715.492754][ T2986] bond2 (unregistering): Released all slaves [ 715.732241][ T2986] bond1 (unregistering): Released all slaves [ 716.384413][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.444563][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.791350][ T2986] bond0 (unregistering): Released all slaves [ 716.893661][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.098088][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.105317][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.137738][ T9483] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 717.157132][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.164456][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.235923][ T9483] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 717.287084][ T9484] netlink: 'syz.4.866': attribute type 29 has an invalid length. [ 718.018334][ T9509] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.104469][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.712294][ T9532] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 718.727048][ T9532] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 718.771124][ T9534] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 718.921343][ T9246] veth0_vlan: entered promiscuous mode [ 718.962516][ T9246] veth1_vlan: entered promiscuous mode [ 719.091200][ T9538] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 719.103517][ T9246] veth0_macvtap: entered promiscuous mode [ 719.122764][ T9538] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 719.168489][ T9538] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 719.203074][ T9544] netlink: 'syz.0.880': attribute type 29 has an invalid length. [ 719.236212][ T9246] veth1_macvtap: entered promiscuous mode [ 719.327258][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.370773][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.389955][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.417642][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.438905][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.455136][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.468550][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.513288][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.530483][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.553768][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.600046][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.621223][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.643865][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.666793][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.686274][ T9246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.722413][ T9246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.735164][ T9246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.745197][ T9246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.942098][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.959606][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.064988][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.109353][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.863427][ T9591] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.896'. [ 721.741482][ T9620] warning: `syz.0.908' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 723.590037][ T9692] validate_nla: 2 callbacks suppressed [ 723.590053][ T9692] netlink: 'syz.0.936': attribute type 6 has an invalid length. [ 725.042014][ T9744] can: request_module (can-proto-3) failed. [ 725.373009][ T9753] vxcan1 speed is unknown, defaulting to 1000 [ 726.201567][ T9778] netlink: 5 bytes leftover after parsing attributes in process `syz.0.967'. [ 726.211778][ T9778] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 726.249017][ T9778] 0ªî{X¹¦: entered allmulticast mode [ 726.260673][ T9778] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 726.673215][ T9793] (unnamed net_device) (uninitialized): down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 726.831775][ T9793] bond6: entered promiscuous mode [ 727.631889][ T9817] syzkaller0: entered promiscuous mode [ 727.657902][ T9817] syzkaller0: entered allmulticast mode [ 727.845047][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 727.874352][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'. [ 727.886404][ T9822] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 728.552164][ T28] audit: type=1326 audit(1777194043.664:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3639cdd9 code=0x7ffc0000 [ 728.623477][ T28] audit: type=1326 audit(1777194043.664:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3639cdd9 code=0x7ffc0000 [ 728.676041][ T28] audit: type=1326 audit(1777194043.664:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f2a3639cdd9 code=0x7ffc0000 [ 728.766333][ T28] audit: type=1326 audit(1777194043.664:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9848 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3639cdd9 code=0x7ffc0000 [ 729.320484][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 729.410929][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 729.778366][ T9886] syz.5.998[9886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 729.815693][ T9888] loop4: detected capacity change from 0 to 16 [ 729.837539][ T9886] loop5: detected capacity change from 0 to 512 [ 729.886125][ T9886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 729.920061][ T9886] EXT4-fs (loop5): Test dummy encryption mode enabled [ 729.946065][ T9888] erofs: (device loop4): mounted with root inode @ nid 36. [ 730.011111][ T9886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.043981][ T9246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.294834][ T9893] loop0: detected capacity change from 0 to 40427 [ 731.354274][ T9893] F2FS-fs (loop0): invalid crc value [ 731.399041][ T9893] F2FS-fs (loop0): Found nat_bits in checkpoint [ 731.582222][ T9893] F2FS-fs (loop0): Start checkpoint disabled! [ 731.607019][ T9917] loop4: detected capacity change from 0 to 256 [ 731.615494][ T9893] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 731.695966][ T9917] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 731.739281][ T9872] ------------[ cut here ]------------ [ 731.745392][ T9872] kernel BUG at fs/f2fs/segment.c:3481! [ 731.780741][ T9872] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 731.786915][ T9872] CPU: 1 PID: 9872 Comm: syz.0.994 Not tainted syzkaller #0 [ 731.794346][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 731.804455][ T9872] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 731.811036][ T9872] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 1a 79 c1 fd 48 c7 c7 90 f6 6f 8d 4c 89 f6 e8 9b a4 97 00 e9 a4 eb ff ff e8 01 79 c1 fd <0f> 0b e8 fa 78 c1 fd 0f 0b e8 f3 78 c1 fd 0f 0b e8 ec 78 c1 fd 0f [ 731.830689][ T9872] RSP: 0018:ffffc9000be57410 EFLAGS: 00010283 [ 731.836810][ T9872] RAX: ffffffff83c5a8ff RBX: 0000000000000200 RCX: 0000000000080000 [ 731.844819][ T9872] RDX: ffffc90005272000 RSI: 0000000000034eb2 RDI: 0000000000034eb3 [ 731.852942][ T9872] RBP: 0000000000000200 R08: ffff88805c08d45f R09: 1ffff1100b811a8b [ 731.860958][ T9872] R10: dffffc0000000000 R11: ffffed100b811a8c R12: 1ffff920017caef8 [ 731.868980][ T9872] R13: 0000000000000000 R14: 0000000000002200 R15: dffffc0000000000 [ 731.876991][ T9872] FS: 00007f2a3718e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 731.885949][ T9872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.892556][ T9872] CR2: 000000110c3ce908 CR3: 00000000269dd000 CR4: 00000000003506e0 [ 731.900568][ T9872] Call Trace: [ 731.903881][ T9872] [ 731.906844][ T9872] ? f2fs_mark_inode_dirty_sync+0x120/0x1f0 [ 731.912778][ T9872] f2fs_map_blocks+0x1338/0x3e60 [ 731.917763][ T9872] ? f2fs_get_block_locked+0xe0/0xe0 [ 731.923087][ T9872] ? __up_read+0x2b6/0x6b0 [ 731.927525][ T9872] ? up_read+0x20/0x20 [ 731.931628][ T9872] ? f2fs_allocate_pinning_section+0x1af/0x590 [ 731.937816][ T9872] f2fs_expand_inode_data+0x67a/0xa10 [ 731.943218][ T9872] ? f2fs_insert_range+0x470/0x470 [ 731.948363][ T9872] ? __mnt_drop_write_file+0xc3/0x100 [ 731.953862][ T9872] ? file_modified_flags+0x267/0x2a0 [ 731.959207][ T9872] f2fs_fallocate+0x416/0x890 [ 731.963916][ T9872] vfs_fallocate+0x58e/0x700 [ 731.968535][ T9872] do_vfs_ioctl+0x19f6/0x1cc0 [ 731.973249][ T9872] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 731.978919][ T9872] ? tomoyo_path_number_perm+0x217/0x620 [ 731.984593][ T9872] ? __lock_acquire+0x7d40/0x7d40 [ 731.989637][ T9872] ? slab_free_freelist_hook+0x130/0x1a0 [ 731.995302][ T9872] ? tomoyo_path_number_perm+0x5b4/0x620 [ 732.000967][ T9872] ? tomoyo_path_number_perm+0x217/0x620 [ 732.006638][ T9872] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 732.012139][ T9872] ? __fget_files+0x28/0x4b0 [ 732.016753][ T9872] ? __fget_files+0x28/0x4b0 [ 732.021411][ T9872] ? bpf_lsm_file_ioctl+0x9/0x10 [ 732.026368][ T9872] ? security_file_ioctl+0x80/0xa0 [ 732.031587][ T9872] __se_sys_ioctl+0x83/0x170 [ 732.036213][ T9872] do_syscall_64+0x55/0xa0 [ 732.040663][ T9872] ? clear_bhb_loop+0x40/0x90 [ 732.045361][ T9872] ? clear_bhb_loop+0x40/0x90 [ 732.050069][ T9872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.056009][ T9872] RIP: 0033:0x7f2a3639cdd9 [ 732.060458][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.080090][ T9872] RSP: 002b:00007f2a3718e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.088526][ T9872] RAX: ffffffffffffffda RBX: 00007f2a36615fa0 RCX: 00007f2a3639cdd9 [ 732.096519][ T9872] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 732.104520][ T9872] RBP: 00007f2a36432d69 R08: 0000000000000000 R09: 0000000000000000 [ 732.112514][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.120522][ T9872] R13: 00007f2a36616038 R14: 00007f2a36615fa0 R15: 00007ffce799c568 [ 732.128590][ T9872] [ 732.131632][ T9872] Modules linked in: [ 732.192963][ T9872] ---[ end trace 0000000000000000 ]--- [ 732.200777][ T9872] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 732.212472][ T9872] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 1a 79 c1 fd 48 c7 c7 90 f6 6f 8d 4c 89 f6 e8 9b a4 97 00 e9 a4 eb ff ff e8 01 79 c1 fd <0f> 0b e8 fa 78 c1 fd 0f 0b e8 f3 78 c1 fd 0f 0b e8 ec 78 c1 fd 0f [ 732.290314][ T9872] RSP: 0018:ffffc9000be57410 EFLAGS: 00010283 [ 732.321840][ T9872] RAX: ffffffff83c5a8ff RBX: 0000000000000200 RCX: 0000000000080000 [ 732.342309][ T9872] RDX: ffffc90005272000 RSI: 0000000000034eb2 RDI: 0000000000034eb3 [ 732.368024][ T9872] RBP: 0000000000000200 R08: ffff88805c08d45f R09: 1ffff1100b811a8b [ 732.376256][ T9872] R10: dffffc0000000000 R11: ffffed100b811a8c R12: 1ffff920017caef8 [ 732.384834][ T9872] R13: 0000000000000000 R14: 0000000000002200 R15: dffffc0000000000 [ 732.393064][ T9872] FS: 00007f2a3718e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 732.402907][ T9872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.409775][ T9872] CR2: 000000110c3ff77b CR3: 00000000269dd000 CR4: 00000000003506e0 [ 732.418036][ T9872] Kernel panic - not syncing: Fatal exception [ 732.424785][ T9872] Kernel Offset: disabled [ 732.429206][ T9872] Rebooting in 86400 seconds..