last executing test programs: 2m58.208034209s ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_score_adj\x00') write$tcp_mem(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000002dc0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002e00)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() bind$phonet(r3, &(0x7f0000000080)={0x23, 0x5, 0x1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x40, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgrp(0x0) chdir(&(0x7f00000006c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2) 2m51.548230665s ago: executing program 3 (id=84): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpgrp(0x0) setrlimit(0xd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000003f00)=""/102392, 0x18ff8) r2 = syz_open_dev$media(&(0x7f0000000200), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000400)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0}) 2m47.859876131s ago: executing program 3 (id=91): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './cgroup.cpu/test/cgroup.procs\x00'}) write$tcp_mem(r0, &(0x7f0000000100)={0xe, 0x20, 0x6, 0x20, 0x10001}, 0x48) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)=0x4000020) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000065c0)=0x6100204) r2 = syz_io_uring_setup(0xf00, &(0x7f0000006600)={0x0, 0x0, 0x800, 0x0, 0xe7}, 0x0, &(0x7f00000066c0)=0x0, &(0x7f0000006700)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000006740)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) unshare(0x6a060000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000006840)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000069c0)={0x0, 0x0, &(0x7f0000006a00)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x4c}}, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pwritev(r1, &(0x7f0000006ac0)=[{&(0x7f0000006b00)='\x00!', 0x2}], 0x1, 0x739, 0xade) r6 = fsopen(&(0x7f0000006b40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x88) openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006c00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000006cc0)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0xc040) 2m43.543516019s ago: executing program 2 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r1, &(0x7f0000000280)=""/194, 0xc2, 0xc) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x801c0, 0x189) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = creat(0x0, 0x8) close_range(r3, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x284182, 0x0) 2m43.536641919s ago: executing program 3 (id=99): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x268}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000080)=""/172, 0xdc) 2m42.4475061s ago: executing program 2 (id=101): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m40.468129901s ago: executing program 2 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x20}, 0x38) 2m40.318779796s ago: executing program 2 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000480)=""/102392, 0x18ff8) epoll_create1(0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000300)={0x0, 0x10, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCSETA(r4, 0x5406, 0x0) 2m38.244013547s ago: executing program 2 (id=107): socket$kcm(0x2, 0x922000000001, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000007c0), 0x2, 0x141102) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000840)}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 2m36.14640678s ago: executing program 3 (id=109): r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x0, 0x0, 0x1000) 2m35.532457832s ago: executing program 3 (id=112): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r0, &(0x7f0000000740)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1}, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) 2m33.021756907s ago: executing program 2 (id=120): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000340), 0x4) sendmsg$xdp(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000019480)="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", 0x3f1}, {&(0x7f0000019880)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f00000198c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000019940)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x40) recvmmsg(r2, &(0x7f0000019980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x20000020, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000019a00), &(0x7f0000019a40)=0x4) memfd_secret(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 2m19.537372607s ago: executing program 32 (id=112): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r0, &(0x7f0000000740)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1}, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) 2m17.329290431s ago: executing program 33 (id=120): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000340), 0x4) sendmsg$xdp(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000019480)="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", 0x3f1}, {&(0x7f0000019880)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f00000198c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000019940)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x40) recvmmsg(r2, &(0x7f0000019980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x20000020, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000019a00), &(0x7f0000019a40)=0x4) memfd_secret(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 25.218894938s ago: executing program 4 (id=355): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1a0004d, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES64], 0x1, 0xc24, &(0x7f00000002c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x515002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000fc0), 0x2, 0x143102) writev(r3, &(0x7f0000001000)=[{&(0x7f0000001040)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000001080)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={r4}, 0x4) open(&(0x7f0000001140)='.\x00', 0x8000, 0x112) r5 = fsopen(&(0x7f0000001180)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000011c0)='test_dummy_encryption', &(0x7f0000001200)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f00000014c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) syz_mount_image$msdos(&(0x7f00000089c0), &(0x7f0000008a00)='.\x00', 0x820f8, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, &(0x7f0000001a00)) mount$bind(0x0, &(0x7f0000002000)='.\x00', 0x0, 0x21, 0x0) 21.184831217s ago: executing program 6 (id=362): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r4, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x161d) 18.299974561s ago: executing program 5 (id=367): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1a0004d, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES64], 0x1, 0xc24, &(0x7f00000002c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x515002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000fc0), 0x2, 0x143102) writev(r3, &(0x7f0000001000)=[{&(0x7f0000001040)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000001080)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={r4}, 0x4) open(&(0x7f0000001140)='.\x00', 0x8000, 0x112) r5 = fsopen(&(0x7f0000001180)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000011c0)='test_dummy_encryption', &(0x7f0000001200)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f00000014c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mq_open(&(0x7f0000001500)='batadv_slave_1\x00', 0x8c2, 0x71, 0x0) syz_mount_image$msdos(&(0x7f00000089c0), &(0x7f0000008a00)='.\x00', 0x820f8, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, &(0x7f0000001a00)) 15.512306004s ago: executing program 4 (id=369): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f000001ecc0)=0x4000007) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) close(r3) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000200)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 15.083790697s ago: executing program 5 (id=370): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1a0004d, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES64], 0x1, 0xc24, &(0x7f00000002c0)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x515002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000fc0), 0x2, 0x143102) writev(r3, &(0x7f0000001000)=[{&(0x7f0000001040)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000001080)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={r4}, 0x4) open(&(0x7f0000001140)='.\x00', 0x8000, 0x112) r5 = fsopen(&(0x7f0000001180)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001280)='test_dummy_encryption', &(0x7f00000012c0)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f00000014c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) mq_open(&(0x7f0000001500)='batadv_slave_1\x00', 0x8c2, 0x71, 0x0) syz_mount_image$msdos(&(0x7f00000089c0), &(0x7f0000008a00)='.\x00', 0x820f8, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, &(0x7f0000001a00)) 15.073676629s ago: executing program 1 (id=371): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x943f41) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) mount$tmpfs(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYBLOB="1f6f6ebc8ae4f9b936d1aa3bbd3c98d580d64ba42e2a98d3704eacf4ff1952356cd6733e118374e98686ff56877d1b0bcbee805977733e484baa3952e246b626fece9155c975f124177fe2d8f3a57c53d0a301ba9a2bf808ef27ad043c015e838de9d31b80e61bc3672c878a43658225920b1681a34a28b8d32a"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000003c0)={0x3, 0x80000000, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000400)={0x3, 0x6, 0xffffffffffffffff, 0xb, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) setpgid(0x0, 0x0) add_key(&(0x7f0000000440)='id_legacy\x00', 0x0, &(0x7f0000000480)="c5feb906e9af6c94e4bb228aa1ebeac34b1f1a0704e1e9914a58e6be2bdec72b4bdeba50b709343e747fab8612a3dd2d2468175a25ce9eded3302eac2cee5d0f54e9fca8f0f1d13aa17c0c6edaa877427ead9712a2a839e0af0b79d83eac8a9488b12a4473b9d520c3cb8e3d6ea9501eb40d5895208539158578b9c0b329a0ad1bbdfd4f6406c72399ad2b0fc3f7dabba66d0f9b0d5e4aa16a3ab7d5ebd12660260400000000000000000034ca1c3ee4144da116d35ef302b50f15495731a59376e1432c285c1b9d438a872c6927778835975589101b2ebd08fb43e7770efd6ec582ed174898125c9dae473d1fbe389707110f9335c00228a528d72f94721d7dcd7cf56213e4d2b21445c2e1c98f554feab4cc3fff9c04c8630d4f0644e4a0ed0962d62533a9d460751b7bc006eb9cf6241f89e428db18daa5", 0x139, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) waitid(0x1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000ac0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000b00)="060000000300010000", 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002c00)={0x10, 0xfffffffffffffffe, r6}, 0x66) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0xe) 14.211357326s ago: executing program 4 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000180)=""/102392, 0x18ff8) r5 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) fcntl$notify(r5, 0x402, 0x80000024) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r6, &(0x7f0000000000), 0x2, 0x0) 12.785118561s ago: executing program 1 (id=374): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newtaction={0x54, 0x30, 0x51b, 0x70bd2b, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001f00)={0x0, 0x4, @start={0x0, 0x0, "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", "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"}, [0xfff, 0x6c3, 0x9, 0x7ff, 0xfffffffffffffffd, 0x8, 0x7, 0xb, 0xffffffffffffffff, 0x10004, 0x9, 0x6, 0x7, 0x80000001, 0x0, 0x8, 0x3, 0x2, 0xfff, 0xfffffffffffffe00, 0x9, 0xcbe1, 0x9, 0x80000, 0x4, 0xa, 0x6, 0x9, 0x398a0ea0, 0x7, 0x1, 0xf72f, 0xffff, 0x6, 0x7, 0x11, 0x7, 0x80000001, 0x1, 0xfbfb, 0x1, 0x6, 0x3, 0xffffffffffffd0ed, 0x100, 0x7, 0xffc, 0x7, 0x10000, 0x8000000000000001, 0x1, 0xe10, 0x1e, 0x9, 0x7fffffff, 0x5, 0x8001, 0x8, 0x3, 0x655, 0xfd9, 0x2, 0x7, 0x4]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x12e) fsopen(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 12.778169881s ago: executing program 6 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000780)={0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net\x00') getdents(r5, &(0x7f00000008c0)=""/188, 0xbc) r6 = fanotify_init(0x67, 0x800) ppoll(&(0x7f0000000fc0)=[{r6, 0x500a}, {r4, 0x212}], 0x2, 0x0, 0x0, 0x0) 11.735714917s ago: executing program 1 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) close(0x3) r3 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='::0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x6, 0x1e, 0xc, "619419c409610ee156c514e9078ffe42322e77609997f7e8fcbad910eb7f5ecc681ebc680ead067ca6004d5e3937286251f398212536f37fe48c74775451f763", "07f20a990e64b26d314436f6fc559a618594ca9fa438bdaf00e192eb7a06ce71180473cb9ab1cb4f2ddb1fd592e307645b58576a04a3445ae26027abb68c38b5", "43a7089f299f6a75de91531795cdeb5a9116b4a756147d1590834d8cd6282968", [0x589f, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000000000022000000000fa700693156535d3150001000000880016808400010001000000000000003a0e040707506100ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe88000000000000000000000000010100000000000000000000ffff7f000001fc000000000000000000000000000001fe8000000000000000000000000000aa"], 0xac}}, 0x0) 11.616861289s ago: executing program 6 (id=377): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0xc240, 0x0) getpgid(0x0) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 11.576382344s ago: executing program 5 (id=379): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1a0004d, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES64], 0x1, 0xc24, &(0x7f00000002c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x515002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000fc0), 0x2, 0x143102) writev(r3, &(0x7f0000001000)=[{&(0x7f0000001040)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000001080)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={r4}, 0x4) open(&(0x7f0000001140)='.\x00', 0x8000, 0x112) r5 = fsopen(&(0x7f0000001180)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001280)='test_dummy_encryption', &(0x7f00000012c0)='v2\x00ul\x00\x00\n\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfcn\x85o\a\x00\x00\x00\x00\x00\x00\x00\xaa?4\xafq^\x00\x00\x00\x00\x00\x00\x00\xffDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9e\xf1\xe4:\xe2\x05\x00\x00\x00\x00\x00\x00\x00%\x95xX$\x84gRUo\xcd\x83\x95\xc3\xe4I\xc44)%\xb8\x9b\xcbF<\xfb#<\xe2d\xbd\xbd\x9eR\x84M\xa8\v}rQ\xc9\x9f\x9e1]\x9a\xe6\xbe\xc2\xcfc\x04\x17\"\x1a\x00o\x17\xdf\xf1\xa2`}0\x9a\xe8\xf0x\x15\x84`3\xf9\x813\x94\xecj\xd1\xa4\x03\xe6Q\xa9\xcf\xdf\x9a=\xfe\x06\xf2\xb9n|N2\xec\v\x14P\xb1\x8fh9\xa0,\xca!\xc1`\xce\x80\xf8Y)\xd6u\xb9 \x88\x7f\xad+\xc1\xc6\xb0D\x90\xff2\xadc-\x06\xdf<:-\xadA\bTH\xecg\x13\"\xa6\x94q\x83\x19\xd3\x12\x9dbI(\xf6+B\x12Ud\x83\ndv\x8f\xe0H\xba\xf1F\xa2\xbb\x11\xc2M\x92(\xf1%I\a\x9eRu\xe4\xc7L\x93\xa8\xa9\x12\x9c\xe2{]\xff\xff\xff\xffg\x9c\x13\x89\xdd\x1e\xc8\x83\xcf\xc7\xd9\xa4)o\x1aj\x8e\b>c\x9f\x8e\xf3H\xcc\xe0\xc1z\xbd\xae2\x9a\xb7\xd4}f\x9c\x0fA\xcd\xa3\xd5\xbb\xc2-r\xb2M\x15!3f=\xc4\x9f~\xbc[:\v[FT\xec$\xd5\x1c\x99^\x80\x1a\xb5zv\xa9\xed\x1f\xe5\xec\x9f\xdd\xf1\x8f\xe4C\xee\xeb\xaa^\xaf\x86\r>\xde\xa6L\xb3D\xd8v\\\x9f\xfb\xb2\r\xc8\'\x9aAa\xca\xd5\x91\xd9\xe2\x1b\x9d~ \x98\xee\xcf\xb7\xc0n\x9d>q6\xe6\xc6\x025\xef\xbajN\x8f\xd1a\xc6\t\xe4\xb4\x95\xda\xc9\xe6X\xeba\xfb\xce9\xeedZ\xcb\xff4s\x91\xf8\x90rYR\xec%\xd3\x03@\\\xda\xd7,\x035\xb6\xac\xb9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f00000014c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) syz_mount_image$msdos(&(0x7f00000089c0), &(0x7f0000008a00)='.\x00', 0x820f8, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, &(0x7f0000001a00)) mount$bind(0x0, &(0x7f0000002000)='.\x00', 0x0, 0x21, 0x0) 10.638625359s ago: executing program 1 (id=380): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x4', 0xa) 9.426475402s ago: executing program 0 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000019280), 0x4) sendmsg$kcm(r0, &(0x7f00000192c0)={&(0x7f000001dc40)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000019380)}, 0x0) r1 = getpgrp(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000191c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000180)=""/102392, 0x18ff8) r5 = open(&(0x7f0000019180)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) fcntl$notify(r5, 0x402, 0x80000024) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x3ff}) sendmmsg$inet(r6, &(0x7f0000000000), 0x2, 0x0) 9.369904097s ago: executing program 1 (id=382): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005cc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ecc0)=0x4000007) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) close(r3) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000200)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 8.145135822s ago: executing program 0 (id=383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ad40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f000001aec0), 0x4) sendmsg$inet(r3, &(0x7f000001af00)={0x0, 0x0, 0x0}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019780)=0x410000002) r5 = syz_io_uring_setup(0x254a, &(0x7f00000197c0)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000019840), &(0x7f0000019880), &(0x7f00000198c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980), 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_FP_MODE(0x42, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f000001ad00)={&(0x7f0000000380)={0xa, 0x4e24, 0xbbcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000019980)=[{&(0x7f00000003c0)="d504807f0a8d385c472494c4e1da78380bdb4457807405913c45dfb66663ee2c9650b071ca5314a9b0f0d60c175ebba46a5fdc59dd45ac890a0de72de130716476da7f9fa2d3e93b76ed6d7eceb418cb15cd30bd92fb42b6feaace0dec48c9f578f54e05b20ec808ffcdc47cc7db63c39a22e4cd", 0x74}, {&(0x7f0000000440)="e8b75dcc23e68237732879d55fc072add7fad25eb9bb8e7f43251d87c8d68526ec0fe4c1b49317f08e005b22430b56f46faf1265194d7c53397cb4ca5485fe0e8531ce7e07babf357565292dfdf5a8da987960d8e8417a9f4730aa40a33155f849310ab5b61da29114ed284abae9386c754cc9f612081b77f9b47f46d2e8e81e4802d9ca6a2d70977b44a0a5e7be3629ac6a241d3f0eafc931aa9d32a45be3aca77f2779a2858f0ddd79ff6b0e6760586201d59e6a73a6950855c0ee0ac5904ecb58818fbd", 0xc5}, {&(0x7f0000000540)="5c204cda0bf2d52510", 0x9}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="05db8b2d40e058fc2f9e0071a5cf14c911be", 0x12}], 0x5, &(0x7f0000019a00)=[@hopopts={{0x48, 0x29, 0x36, {0x21, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x5, [0x7fff, 0x1, 0x7fff]}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x25, 0x9, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x8000, [0x9, 0x1, 0x1e]}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}, @dstopts={{0xd8, 0x29, 0x37, {0x67, 0x17, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @generic={0x0, 0x6e, "1736e7858a5463bab9542ea2385c58fb40e101305b3c3d59998ecb3065aa31fe0fbaace0164307f91d25178a73d34c58e5fd24ee9727511b33908c1c88598c1918bdff79c4408e247c769f72a53c6952c126374a0be18d5ae8c38214bc6ffc2067d8b86747d4330b47a848cb6cfe"}, @enc_lim={0x4, 0x1, 0xa}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x0, [0x8, 0xc000, 0x0]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x9, [0x3]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, @rand_addr=' \x01\x00']}}}], 0x220}, 0x24044080) 7.401643257s ago: executing program 1 (id=384): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x4', 0xa) 7.124547865s ago: executing program 6 (id=385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8585"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.051512983s ago: executing program 5 (id=386): io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000019440)={0x80000001, 0xffffffffffffffff, 0x24, {0x31, 0x100000000}}, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, &(0x7f00000193c0)=[{&(0x7f0000019400)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000eeffff7f0c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x3e}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000019340)={0x2000200b}) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4) 6.627841516s ago: executing program 6 (id=387): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002940)=0x6) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=@newtaction={0x54, 0x30, 0x51b, 0x70bd2b, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x54}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001f00)={0x0, 0x4, @start={0x0, 0x0, "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", "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"}, [0xfff, 0x6c3, 0x9, 0x7ff, 0xfffffffffffffffd, 0x8, 0x7, 0xb, 0xffffffffffffffff, 0x10004, 0x9, 0x6, 0x7, 0x80000001, 0x0, 0x8, 0x3, 0x2, 0xfff, 0xfffffffffffffe00, 0x9, 0xcbe1, 0x9, 0x80000, 0x4, 0xa, 0x6, 0x9, 0x398a0ea0, 0x7, 0x1, 0xf72f, 0xffff, 0x6, 0x7, 0x11, 0x7, 0x80000001, 0x1, 0xfbfb, 0x1, 0x6, 0x3, 0xffffffffffffd0ed, 0x100, 0x7, 0xffc, 0x7, 0x10000, 0x8000000000000001, 0x1, 0xe10, 0x1e, 0x9, 0x7fffffff, 0x5, 0x8001, 0x8, 0x3, 0x655, 0xfd9, 0x2, 0x7, 0x4]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x12e) close_range(r3, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 6.614826247s ago: executing program 0 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400100000008000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) close(0x3) 5.665731504s ago: executing program 6 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000780)={0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net\x00') getdents(r5, &(0x7f00000008c0)=""/188, 0xbc) r6 = fanotify_init(0x67, 0x800) ppoll(&(0x7f0000000fc0)=[{r6, 0x500a}, {r4, 0x212}], 0x2, 0x0, 0x0, 0x0) 5.631171547s ago: executing program 0 (id=390): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) close(0x3) r3 = fsopen(&(0x7f00000003c0)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='[:ew0\xccp\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='::0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0x10004000000006) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x6, 0x1e, 0xc, "619419c409610ee156c514e9078ffe42322e77609997f7e8fcbad910eb7f5ecc681ebc680ead067ca6004d5e3937286251f398212536f37fe48c74775451f763", "07f20a990e64b26d314436f6fc559a618594ca9fa438bdaf00e192eb7a06ce71180473cb9ab1cb4f2ddb1fd592e307645b58576a04a3445ae26027abb68c38b5", "43a7089f299f6a75de91531795cdeb5a9116b4a756147d1590834d8cd6282968", [0x589f, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000000000022000000000fa700693156535d3150001000000880016808400010001000000000000003a0e040707506100ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafe88000000000000000000000000010100000000000000000000ffff7f000001fc000000000000000000000000000001fe8000000000000000000000000000aa"], 0xac}}, 0x0) 4.52078181s ago: executing program 4 (id=391): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() tkill(r5, 0xb) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.970468499s ago: executing program 4 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) open(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x80001, 0x10) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000540)={0x0, 0x5961, 0x4, 0x0, 0x3e2}, &(0x7f00000005c0), &(0x7f0000000680), &(0x7f00000006c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x700, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.897226797s ago: executing program 0 (id=393): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800012000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000002, 0x13, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x100) ioctl(0xffffffffffffffff, 0xffff454b, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x184) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x804, &(0x7f0000000680)={[{@metacopy_off}, {@verity_on}, {@volatile}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) chdir(&(0x7f00000006c0)='./bus\x00') syz_open_dev$sndmidi(&(0x7f0000000700), 0x6, 0x121c81) open(&(0x7f0000000740)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="9b689b969622368d6079d4710eb270bc7a5e"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 1.777067609s ago: executing program 5 (id=394): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005cc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001ecc0)=0x4000007) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) close(r3) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000200)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 59.994503ms ago: executing program 5 (id=395): clock_gettime(0x7, &(0x7f00000009c0)) syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0x3) mq_open(0x0, 0x8c2, 0x30, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2400c890) mkdir(&(0x7f0000000600)='./file2\x00', 0x1ff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mount(&(0x7f0000000800)=@filename='127.0.0.1:/\x00', &(0x7f0000000900)='./file2\x00', &(0x7f0000000940)='nfs\x00', 0x0, &(0x7f0000000980)='addr=127.0.0.1,vers=3,proto=udp\x00') mkdir(&(0x7f0000000a00)='./file4\x00', 0x1ff) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=0x1000) mount(0x0, &(0x7f0000001a80)='./file4\x00', &(0x7f0000001ac0)='rpc_pipefs\x00', 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)) 22.309827ms ago: executing program 4 (id=396): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0xc240, 0x0) getpgid(0x0) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 0s ago: executing program 0 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8585"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): is unknown, defaulting to 1000 [ 65.528919][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 65.558167][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.572935][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.581282][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.599050][ T4275] device bridge_slave_0 entered promiscuous mode [ 65.611911][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.619477][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.632380][ T4275] device bridge_slave_1 entered promiscuous mode [ 65.640587][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.649417][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.657160][ T4277] device bridge_slave_0 entered promiscuous mode [ 65.682245][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.726201][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.733684][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.746330][ T4277] device bridge_slave_1 entered promiscuous mode [ 65.791926][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.822189][ T4288] team0: Port device team_slave_0 added [ 65.849472][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.859971][ T4288] team0: Port device team_slave_1 added [ 65.907635][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.914886][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.926476][ T4276] device bridge_slave_0 entered promiscuous mode [ 65.945281][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.956715][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.976541][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.984484][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.010883][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.022742][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.032384][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.040360][ T4276] device bridge_slave_1 entered promiscuous mode [ 66.049214][ T4275] team0: Port device team_slave_0 added [ 66.057917][ T4275] team0: Port device team_slave_1 added [ 66.081018][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.090460][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.117544][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.152395][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.161686][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.188376][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.216061][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.228034][ T4277] team0: Port device team_slave_0 added [ 66.235578][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.245400][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.252495][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.278841][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.322963][ T4277] team0: Port device team_slave_1 added [ 66.348521][ T4296] Bluetooth: hci2: command 0x0409 tx timeout [ 66.354839][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 66.393182][ T4275] device hsr_slave_0 entered promiscuous mode [ 66.401046][ T4275] device hsr_slave_1 entered promiscuous mode [ 66.427907][ T4296] Bluetooth: hci4: command 0x0409 tx timeout [ 66.431987][ T4276] team0: Port device team_slave_0 added [ 66.434383][ T4296] Bluetooth: hci3: command 0x0409 tx timeout [ 66.440408][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 66.471527][ T4288] device hsr_slave_0 entered promiscuous mode [ 66.481291][ T4288] device hsr_slave_1 entered promiscuous mode [ 66.489186][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.497093][ T4288] Cannot create hsr debugfs directory [ 66.533634][ T4276] team0: Port device team_slave_1 added [ 66.551849][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.559203][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.585971][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.636863][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.647769][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.674477][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.743956][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.753779][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.787616][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.829458][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.836445][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.887604][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.916843][ T4277] device hsr_slave_0 entered promiscuous mode [ 66.928506][ T4277] device hsr_slave_1 entered promiscuous mode [ 66.935350][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.946830][ T4277] Cannot create hsr debugfs directory [ 66.980087][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 67.060973][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.098366][ T4276] device hsr_slave_0 entered promiscuous mode [ 67.106151][ T4276] device hsr_slave_1 entered promiscuous mode [ 67.113505][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.126669][ T4276] Cannot create hsr debugfs directory [ 67.324077][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.340323][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.354534][ T4292] device bridge_slave_0 entered promiscuous mode [ 67.364693][ T4288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.403255][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.411779][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.420692][ T4292] device bridge_slave_1 entered promiscuous mode [ 67.436229][ T4288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.475888][ T4288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.488501][ T4288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.516450][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.558273][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.611045][ T4292] team0: Port device team_slave_0 added [ 67.641167][ T4292] team0: Port device team_slave_1 added [ 67.659194][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.695653][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.721874][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.744768][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.767139][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.774547][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.801170][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.833443][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.841483][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.874116][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.913320][ T3937] infiniband rxe0: set active [ 67.919457][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.935935][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.945870][ T4362] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.972265][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.011718][ T4292] device hsr_slave_0 entered promiscuous mode [ 68.019402][ T4292] device hsr_slave_1 entered promiscuous mode [ 68.026131][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.034110][ T4292] Cannot create hsr debugfs directory [ 68.048408][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.077248][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.115440][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.143846][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.161214][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.181242][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.255841][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.265760][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.276779][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.360455][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.369431][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.379802][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.387037][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.395790][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.404966][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.414314][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.421474][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.429560][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 68.429585][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 68.436022][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.451173][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.479569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.490660][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.500611][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.509113][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 68.509125][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 68.521196][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 68.549147][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.557089][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.589606][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.602127][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.611236][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.620146][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.631504][ T4292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.649859][ T4288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.663274][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.673110][ T4292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.682997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.691737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.708615][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.727590][ T4292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.744014][ T4292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.755781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.770510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.814415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.829382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.843566][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.851319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.865943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.875041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.883849][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.891002][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.899183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.932286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.944688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.954815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.965620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.976324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.986323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.000322][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.016821][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.045592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.058844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.072858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.084346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.095202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.131321][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.147012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.156701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.170858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.180041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.194646][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.210129][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.218592][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.253774][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.262848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.273910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.282493][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.289641][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.300046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.309796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.318730][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.325804][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.333726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.343283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.351928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.360984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.370113][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.377220][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.385130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.394112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.453609][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.465909][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.481818][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.494415][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.506728][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.514011][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.530773][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.544573][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.554363][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.563696][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.573485][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.582518][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.592202][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.600723][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.609485][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.618401][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.626747][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.635562][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.667650][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.675629][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.684752][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.694024][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.703866][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.713432][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.722406][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.744932][ T4288] device veth0_vlan entered promiscuous mode [ 69.765878][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.779252][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.797884][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.806379][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.815775][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.823549][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.831477][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.840250][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.863222][ T4288] device veth1_vlan entered promiscuous mode [ 69.873421][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.894484][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.926525][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.965379][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.975074][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.998308][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.034487][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.054709][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.074423][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.095259][ T4288] device veth0_macvtap entered promiscuous mode [ 70.110367][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.120609][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.149571][ T4288] device veth1_macvtap entered promiscuous mode [ 70.173102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.198803][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.214157][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.221303][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.263873][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.313506][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.329295][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.345011][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.369364][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.388419][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.395549][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.418231][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.448881][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.465471][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.474394][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.483872][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.495434][ T4288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.507606][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 70.513746][ T4288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.522749][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 70.530688][ T4288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.539506][ T4288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.574853][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.588304][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 70.588323][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 70.588350][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 70.614404][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.624456][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.669222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.691909][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.700749][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.710174][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.719085][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.742696][ T4292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.759244][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.781392][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.790248][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.799247][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.808170][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.816396][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.824150][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.863481][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.874320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.890116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.930954][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.944626][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.969731][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.983943][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.996432][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.014071][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.057943][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.066995][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.077259][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.092857][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.105852][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.114655][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.124165][ T4275] device veth0_vlan entered promiscuous mode [ 71.151041][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.166900][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.184893][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.213498][ T4275] device veth1_vlan entered promiscuous mode [ 71.232552][ T4277] device veth0_vlan entered promiscuous mode [ 71.252930][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.262194][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.302936][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.312899][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318319][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.319842][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.328303][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.343467][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.364317][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.375388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.385501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.399350][ T4277] device veth1_vlan entered promiscuous mode [ 71.414215][ T4275] device veth0_macvtap entered promiscuous mode [ 71.426836][ T4276] device veth0_vlan entered promiscuous mode [ 71.447775][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.456216][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.465712][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.582616][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.592892][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.618406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.647049][ T4275] device veth1_macvtap entered promiscuous mode [ 71.663559][ T4276] device veth1_vlan entered promiscuous mode [ 71.728292][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.744146][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.899353][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.967667][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.019571][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.117364][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.195411][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.298290][ T4277] device veth0_macvtap entered promiscuous mode [ 72.342566][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.368334][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.394938][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.433960][ T4277] device veth1_macvtap entered promiscuous mode [ 72.456987][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.490992][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.523377][ T4292] device veth0_vlan entered promiscuous mode [ 72.560971][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.587560][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 72.594266][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.604376][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 72.652741][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.667755][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 72.668269][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 72.673955][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 72.686789][ T4276] device veth0_macvtap entered promiscuous mode [ 72.708344][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.740550][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.750630][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.768121][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.788401][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.801397][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.843435][ T4292] device veth1_vlan entered promiscuous mode [ 72.863029][ T4276] device veth1_macvtap entered promiscuous mode [ 72.884836][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.900975][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.937690][ T34] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.947305][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.039346][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.058576][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.074126][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.087641][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.099035][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.110130][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.138324][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.148686][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 73.157700][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.166615][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.181399][ T34] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 73.209748][ T34] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 73.220471][ T34] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.227097][ T34] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 73.246884][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246906][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.277601][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.304752][ T34] usb 4-1: config 0 descriptor?? [ 73.318783][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.328224][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.365945][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.388516][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.409526][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.427565][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.440790][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.457436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #112!!! [ 73.476063][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.494572][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.517687][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.535665][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.548186][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.560927][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.579720][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.591805][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.609215][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.619119][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.641437][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.661629][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.675726][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.687066][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.698426][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.709076][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.719991][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.731682][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.749583][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.759789][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769009][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778096][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.800045][ T34] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 73.850279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.878279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.892292][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.910459][ T34] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -90 [ 73.921470][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.946994][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956620][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.045338][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.078006][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.130483][ T4292] device veth0_macvtap entered promiscuous mode [ 74.224706][ T4292] device veth1_macvtap entered promiscuous mode [ 74.269351][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.295617][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.344331][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.359480][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377884][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.390004][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.401273][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.402816][ T22] usb 4-1: USB disconnect, device number 2 [ 74.435182][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.457509][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.468126][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.489499][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.502249][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.528192][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.548211][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.566585][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.576790][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.600375][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.604946][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.631651][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.638759][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.657616][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.671487][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.681614][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.692308][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.706567][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.730086][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.761299][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.789636][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.797649][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.806061][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.814241][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.815028][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.865149][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.868395][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.887602][ T4292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896645][ T4292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915532][ T4292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.924515][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.932285][ T4292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.956354][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.969452][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.007488][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.039743][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.056715][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.086028][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.100544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.237440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 75.250399][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.257446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.263950][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.303004][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.611956][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.689304][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.725970][ T4440] mmap: syz.2.3 (4440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.777580][ T4280] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.791292][ T4440] gadgetfs: bound to dummy_udc driver [ 76.867658][ T4374] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.635769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.797438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.807440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 77.817423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 77.827420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 77.857614][ T4374] usb 5-1: Using ep0 maxpacket: 32 [ 77.867077][ T4374] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.867743][ T4280] usb 4-1: Using ep0 maxpacket: 32 [ 77.896547][ T4280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.928112][ T4280] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 77.970375][ T4449] process 'syz.0.9' launched './file1' with NULL argv: empty string added [ 77.998186][ T4374] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.008742][ T4374] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.017198][ T4374] usb 5-1: Product: syz [ 78.021647][ T4374] usb 5-1: Manufacturer: syz [ 78.026413][ T4374] usb 5-1: SerialNumber: syz [ 78.136840][ T4374] usb 5-1: config 0 descriptor?? [ 78.151319][ T4439] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 78.477488][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.485699][ T4280] usb 4-1: Product: syz [ 78.489952][ T4280] usb 4-1: Manufacturer: syz [ 78.494574][ T4280] usb 4-1: SerialNumber: syz [ 78.506979][ T4374] hub 5-1:0.0: bad descriptor, ignoring hub [ 78.514731][ T4374] hub: probe of 5-1:0.0 failed with error -5 [ 78.597451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 78.607454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 78.691565][ T4280] usb 4-1: config 0 descriptor?? [ 78.732266][ T4280] usb 4-1: can't set config #0, error -71 [ 78.997447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.034063][ T4280] usb 4-1: USB disconnect, device number 3 [ 80.229481][ T3603] usb 5-1: USB disconnect, device number 2 [ 80.472791][ T4364] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.287524][ T4364] usb 3-1: Using ep0 maxpacket: 16 [ 81.382507][ T4364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.461063][ T4474] Bluetooth: MGMT ver 1.22 [ 81.551131][ T129] cfg80211: failed to load regulatory.db [ 81.988883][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.165657][ T4364] usb 3-1: string descriptor 0 read error: -71 [ 82.177650][ T4364] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 82.196993][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.240362][ T4364] usb 3-1: config 0 descriptor?? [ 82.298491][ T4364] usb 3-1: can't set config #0, error -71 [ 82.346107][ T4364] usb 3-1: USB disconnect, device number 2 [ 83.547497][ T4297] Bluetooth: hci0: command 0x0c3a tx timeout [ 83.547555][ T4296] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 85.365835][ T4502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 85.487494][ T129] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.683040][ T129] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.743550][ T129] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 86.403569][ T129] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 86.433697][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.468033][ T129] usb 4-1: Product: syz [ 86.476426][ T129] usb 4-1: Manufacturer: syz [ 86.482326][ T129] usb 4-1: SerialNumber: syz [ 86.521528][ T4497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.530008][ T4497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.539718][ T129] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 86.561347][ T129] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 86.618660][ T129] usbserial_generic 4-1:1.0: generic converter detected [ 86.662700][ T129] usb 4-1: generic converter now attached to ttyUSB0 [ 86.678195][ T3603] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.759389][ T4364] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.011691][ T3603] usb 3-1: Using ep0 maxpacket: 32 [ 88.035543][ T3603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.068131][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.077639][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.137684][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.147280][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.157493][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.167012][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.177688][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.187287][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.242373][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.251984][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.282276][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.291790][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.302778][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.312298][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.347559][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.357139][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.367652][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.377158][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.407703][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 88.437735][ T3603] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 88.446829][ T3603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.477564][ T3603] usb 3-1: Product: syz [ 88.481887][ T3603] usb 3-1: Manufacturer: syz [ 88.486609][ T3603] usb 3-1: SerialNumber: syz [ 88.521798][ T3603] usb 3-1: config 0 descriptor?? [ 88.532479][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.554294][ T3603] usb 3-1: bad CDC descriptors [ 88.560393][ T3603] usb 3-1: unsupported MDLM descriptors [ 88.594312][ T3603] usb 4-1: USB disconnect, device number 4 [ 88.625824][ T3603] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 88.659630][ T3603] usbserial_generic 4-1:1.0: device disconnected [ 88.737545][ T4374] usb 1-1: Using ep0 maxpacket: 16 [ 88.745370][ T4374] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.779766][ T129] usb 3-1: USB disconnect, device number 3 [ 88.795266][ T4374] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.844692][ T4374] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 88.883907][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.904579][ T4374] usb 1-1: Product: syz [ 88.922700][ T4374] usb 1-1: Manufacturer: syz [ 88.932851][ T4374] usb 1-1: SerialNumber: syz [ 90.404994][ T4374] usb 1-1: config 0 descriptor?? [ 90.622135][ T4374] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 91.767583][ T4374] rc_core: IR keymap rc-imon-pad not found [ 91.773569][ T4374] Registered IR keymap rc-empty [ 91.923506][ T4374] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 91.972007][ T4374] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 92.398585][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.421649][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.431944][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.589142][ T4374] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 92.633441][ T4374] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 92.713161][ T4374] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:2> initialized [ 92.855735][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 92.869308][ T4374] usb 1-1: USB disconnect, device number 2 [ 93.074976][ T4586] tipc: Enabling of bearer rejected, failed to enable media [ 93.085829][ T4588] nbd4: detected capacity change from 0 to 4 [ 93.101393][ T4588] block nbd4: shutting down sockets [ 93.117339][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.126650][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.136543][ T95] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.146142][ T95] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.155065][ T95] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.164731][ T95] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.178561][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.187861][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.196010][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.205625][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 93.217185][ T4279] ldm_validate_partition_table(): Disk read failed. [ 93.307636][ T4279] Dev nbd4: unable to read RDB block 0 [ 93.357443][ T3603] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.307148][ T4279] nbd4: unable to read partition table [ 94.717775][ T4279] nbd4: partition table beyond EOD, truncated [ 95.267552][ T3603] usb 4-1: Using ep0 maxpacket: 32 [ 98.162231][ T3603] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 98.174582][ T3603] usb 4-1: can't read configurations, error -71 [ 98.438872][ T4605] fuse: Bad value for 'fd' [ 101.425514][ T4399] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.537489][ T4399] usb 3-1: Using ep0 maxpacket: 32 [ 102.967538][ T4399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.101976][ T4399] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 104.178858][ T4399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.103862][ T4648] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 105.234788][ T4399] usb 3-1: Product: syz [ 105.249098][ T4399] usb 3-1: Manufacturer: syz [ 105.254116][ T4399] usb 3-1: SerialNumber: syz [ 105.260876][ T4399] usb 3-1: config 0 descriptor?? [ 105.277674][ T4399] usb 3-1: can't set config #0, error -71 [ 105.288791][ T4399] usb 3-1: USB disconnect, device number 4 [ 106.411444][ T4664] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.794568][ T4664] kvm [4663]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000079 [ 106.827994][ T4664] kvm [4663]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x15 [ 108.180336][ T4686] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 109.607769][ T4377] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.803379][ T4377] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 109.841825][ T4377] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.893446][ T4377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.913777][ T4377] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 109.937510][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.947521][ T4636] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.979854][ T4377] usb 1-1: config 0 descriptor?? [ 110.157691][ T4636] usb 4-1: Using ep0 maxpacket: 32 [ 110.170670][ T4636] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.203061][ T4636] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 110.237495][ T4636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.277567][ T4636] usb 4-1: Product: syz [ 110.281775][ T4636] usb 4-1: Manufacturer: syz [ 110.316952][ T4636] usb 4-1: SerialNumber: syz [ 110.329735][ T4636] usb 4-1: config 0 descriptor?? [ 110.348528][ T4636] usb 4-1: bad CDC descriptors [ 110.353735][ T4636] usb 4-1: unsupported MDLM descriptors [ 110.393193][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.416835][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.446722][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.459432][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.490583][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.516719][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.526298][ T4377] hid_mf 0003:0079:1844.0002: unknown main item tag 0x0 [ 110.543704][ T4377] hid_mf 0003:0079:1844.0002: unbalanced collection at end of report description [ 110.641290][ T4377] hid_mf 0003:0079:1844.0002: HID parse failed. [ 110.716372][ T4377] hid_mf: probe of 0003:0079:1844.0002 failed with error -22 [ 110.782861][ T4714] ======================================================= [ 110.782861][ T4714] WARNING: The mand mount option has been deprecated and [ 110.782861][ T4714] and is ignored by this kernel. Remove the mand [ 110.782861][ T4714] option from the mount to silence this warning. [ 110.782861][ T4714] ======================================================= [ 110.867285][ T4714] overlayfs: failed to resolve './file1': -2 [ 110.875589][ T4711] ceph: No mds server is up or the cluster is laggy [ 110.970771][ T3603] libceph: connect (1)[c::]:6789 error -101 [ 111.064156][ T3603] libceph: mon0 (1)[c::]:6789 connect error [ 111.074089][ T4377] usb 1-1: USB disconnect, device number 3 [ 113.899959][ T4370] usb 4-1: USB disconnect, device number 7 [ 122.129670][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 125.637634][ T4377] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 126.421118][ T4809] ima: policy update failed [ 126.971966][ T26] audit: type=1807 audit(1794101555.961:2): UNKNOWN=a res=0 [ 127.016366][ T26] audit: type=1802 audit(1794101555.961:3): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.102" res=0 errno=0 [ 127.038760][ T4377] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 127.048480][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 127.317993][ T26] audit: type=1802 audit(1794101556.301:4): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.102" res=0 errno=0 [ 127.336617][ T4377] usb 2-1: Product: syz [ 127.350526][ T4377] usb 2-1: Manufacturer: syz [ 127.371374][ T4377] usb 2-1: SerialNumber: syz [ 127.429164][ T4377] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 128.628447][ T4797] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 128.636488][ T4797] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 129.519136][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.577672][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.738536][ T4377] vp7045: USB control message 'out' went wrong. [ 129.745160][ T4377] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 129.793253][ T4377] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 129.878443][ T4377] usb 2-1: USB disconnect, device number 2 [ 132.241640][ T22] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 133.288493][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.294868][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.348143][ T22] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 133.417436][ T22] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 133.457483][ T22] usb 2-1: Product: syz [ 133.461703][ T22] usb 2-1: Manufacturer: syz [ 133.476675][ T22] usb 2-1: SerialNumber: syz [ 133.524019][ T22] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 133.715830][ T4832] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 133.745841][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.772954][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.571217][ T22] vp7045: USB control message 'out' went wrong. [ 134.583561][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 134.657446][ T22] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 134.711250][ T22] usb 2-1: USB disconnect, device number 3 [ 134.786595][ T4860] Zero length message leads to an empty skb [ 134.821548][ T4860] netlink: 'syz.0.119': attribute type 11 has an invalid length. [ 136.267120][ T4871] lo speed is unknown, defaulting to 1000 [ 136.273873][ T4871] lo speed is unknown, defaulting to 1000 [ 136.285398][ T4871] lo speed is unknown, defaulting to 1000 [ 136.309813][ T4871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.353438][ T4871] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.399365][ T4873] capability: warning: `syz.1.122' uses 32-bit capabilities (legacy support in use) [ 137.204326][ T4871] lo speed is unknown, defaulting to 1000 [ 137.210839][ T4871] lo speed is unknown, defaulting to 1000 [ 137.217896][ T4871] lo speed is unknown, defaulting to 1000 [ 137.224205][ T4871] lo speed is unknown, defaulting to 1000 [ 137.230641][ T4871] lo speed is unknown, defaulting to 1000 [ 137.286891][ T4296] Bluetooth: hci4: command 0x0405 tx timeout [ 137.878854][ T4371] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 138.080594][ T4371] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 138.524912][ T4371] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 138.533261][ T4371] usb 5-1: Product: syz [ 138.537566][ T4371] usb 5-1: Manufacturer: syz [ 138.571631][ T4371] usb 5-1: SerialNumber: syz [ 138.593005][ T4371] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 138.794485][ T4875] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 138.821593][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.844850][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.882895][ T4371] vp7045: USB control message 'out' went wrong. [ 138.906329][ T4371] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 138.932974][ T4371] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 138.955062][ T4371] usb 5-1: USB disconnect, device number 3 [ 139.367658][ T4897] Invalid ELF header magic: != ELF [ 140.105568][ T4896] sched: RT throttling activated [ 142.267192][ T4920] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.358682][ T4920] lo speed is unknown, defaulting to 1000 [ 148.567561][ T4371] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 148.918567][ T4371] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 149.470854][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 149.479974][ T4371] usb 1-1: Product: syz [ 149.484177][ T4371] usb 1-1: Manufacturer: syz [ 149.489343][ T4371] usb 1-1: SerialNumber: syz [ 149.510908][ T4371] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 150.330675][ T4944] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 150.564942][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.627904][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.655291][ T4371] vp7045: USB control message 'in' went wrong. [ 150.671832][ T4371] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 150.722836][ T4371] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 150.759931][ T4371] usb 1-1: USB disconnect, device number 4 [ 150.805899][ T4296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.816078][ T4296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.824436][ T4296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.833774][ T4296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.842765][ T4296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.851249][ T4296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.944921][ T4960] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.283852][ T4296] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.294017][ T4960] lo speed is unknown, defaulting to 1000 [ 151.307469][ T34] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.316691][ T4296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.335627][ T4296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.363816][ T4296] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.371601][ T4296] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.379078][ T4296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.541037][ T34] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.862785][ T34] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 152.288859][ T34] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 152.335786][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 152.350720][ T34] usb 2-1: Product: syz [ 152.373388][ T34] usb 2-1: Manufacturer: syz [ 152.601007][ T4964] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.917491][ T4297] Bluetooth: hci5: command 0x0409 tx timeout [ 153.477701][ T4297] Bluetooth: hci6: command 0x0409 tx timeout [ 154.824227][ T4964] lo speed is unknown, defaulting to 1000 [ 156.114543][ T4297] Bluetooth: hci5: command 0x041b tx timeout [ 156.121460][ T4289] Bluetooth: hci6: command 0x041b tx timeout [ 156.315501][ T4377] usb 2-1: USB disconnect, device number 4 [ 156.389508][ T4960] chnl_net:caif_netlink_parms(): no params data found [ 157.458460][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.480962][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.514859][ T4960] device bridge_slave_0 entered promiscuous mode [ 157.577207][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.187774][ T4297] Bluetooth: hci6: command 0x040f tx timeout [ 158.188604][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 158.425370][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.433458][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.463887][ T4960] device bridge_slave_1 entered promiscuous mode [ 158.518790][ T4964] chnl_net:caif_netlink_parms(): no params data found [ 159.413199][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.755739][ T5011] tmpfs: Unknown parameter 'grpquota' [ 160.267662][ T4297] Bluetooth: hci6: command 0x0419 tx timeout [ 160.273748][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 160.321780][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.380437][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.428809][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.529464][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.634333][ T4960] team0: Port device team_slave_0 added [ 161.682241][ T4960] team0: Port device team_slave_1 added [ 161.752974][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.767264][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.796680][ T4964] device bridge_slave_0 entered promiscuous mode [ 161.837539][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 161.850081][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.857160][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.870398][ T4964] device bridge_slave_1 entered promiscuous mode [ 161.882327][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.895173][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.925416][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.951227][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 161.983826][ T4964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.998348][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.007042][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.033635][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.049253][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 162.075492][ T4964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.267485][ T4716] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.502363][ T5028] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.740519][ T4964] team0: Port device team_slave_0 added [ 162.932845][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.987189][ T4960] device hsr_slave_0 entered promiscuous mode [ 163.003630][ T4960] device hsr_slave_1 entered promiscuous mode [ 163.051058][ T4716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.096903][ T4716] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 163.171499][ T4960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.180609][ T4716] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 163.192808][ T4960] Cannot create hsr debugfs directory [ 163.236725][ T4964] team0: Port device team_slave_1 added [ 163.252593][ T4716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.272237][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 163.292576][ T4716] usb 2-1: Product: syz [ 163.321307][ T4716] usb 2-1: Manufacturer: syz [ 163.473392][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 163.579608][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.819530][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 163.859334][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.887108][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 163.898326][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.906440][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.952570][ T4964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.972572][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 164.004819][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.033179][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.040682][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.116483][ T4964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.277601][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 164.451472][ T5028] hsr0 speed is unknown, defaulting to 1000 [ 164.771169][ T4964] device hsr_slave_0 entered promiscuous mode [ 165.599656][ T4964] device hsr_slave_1 entered promiscuous mode [ 165.628847][ T4964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.638167][ T4964] Cannot create hsr debugfs directory [ 165.647564][ T4399] usb 2-1: USB disconnect, device number 5 [ 165.674549][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 166.164573][ T5067] tmpfs: Unknown parameter 'grpquota' [ 169.052094][ T4960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.157902][ T4280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 169.396844][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 169.480725][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.564990][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 169.666827][ T4280] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 169.761534][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.836840][ T4280] usb 5-1: Product: syz [ 169.873384][ T4280] usb 5-1: Manufacturer: syz [ 169.911436][ T4280] usb 5-1: SerialNumber: syz [ 170.005243][ T4280] usb 5-1: config 0 descriptor?? [ 170.024481][ T4960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.068726][ T4960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.236368][ T4280] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 170.251888][ T4960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.348865][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.175'. [ 170.410474][ T4964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 170.448205][ T5098] usb 5-1: USB disconnect, device number 4 [ 170.556869][ T4964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.747268][ T5118] tmpfs: Unknown parameter 'grpquota' [ 170.797589][ T132] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 170.857304][ T4964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.001762][ T132] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 171.080947][ T132] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 171.168035][ T132] usb 1-1: Product: syz [ 171.208574][ T132] usb 1-1: Manufacturer: syz [ 171.243781][ T132] usb 1-1: SerialNumber: syz [ 171.335567][ T4964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.414750][ T132] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 171.569476][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.587631][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.719063][ T132] vp7045: USB control message 'out' went wrong. [ 171.725328][ T132] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 171.803071][ T132] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 171.856612][ T132] usb 1-1: USB disconnect, device number 5 [ 172.813048][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.832053][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.865956][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.028357][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.291472][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.365363][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.458341][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.465552][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.781618][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.166101][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.193960][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.194699][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 176.223041][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.230254][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.272964][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.305438][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.376953][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.395995][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.411179][ T5168] FAULT_INJECTION: forcing a failure. [ 176.411179][ T5168] name failslab, interval 1, probability 0, space 0, times 1 [ 176.439075][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.458209][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.473516][ T5168] CPU: 0 PID: 5168 Comm: syz.0.188 Not tainted syzkaller #0 [ 176.480832][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 176.491006][ T5168] Call Trace: [ 176.494301][ T5168] [ 176.497244][ T5168] dump_stack_lvl+0x188/0x24e [ 176.501981][ T5168] ? show_regs_print_info+0x12/0x12 [ 176.507205][ T5168] ? load_image+0x410/0x410 [ 176.511738][ T5168] ? __might_sleep+0xd0/0xd0 [ 176.516348][ T5168] ? __lock_acquire+0x7ea0/0x7ea0 [ 176.521408][ T5168] should_fail_ex+0x390/0x4c0 [ 176.526150][ T5168] should_failslab+0x5/0x20 [ 176.530673][ T5168] slab_pre_alloc_hook+0x59/0x300 [ 176.535999][ T5168] ? fsnotify_alloc_group+0x70/0x3b0 [ 176.541313][ T5168] __kmem_cache_alloc_node+0x4f/0x270 [ 176.546721][ T5168] ? fsnotify_alloc_group+0x70/0x3b0 [ 176.552034][ T5168] kmalloc_trace+0x26/0xe0 [ 176.556472][ T5168] fsnotify_alloc_group+0x70/0x3b0 [ 176.561617][ T5168] do_inotify_init+0x51/0x450 [ 176.566318][ T5168] __x64_sys_inotify_init1+0x33/0x40 [ 176.571623][ T5168] do_syscall_64+0x4c/0xa0 [ 176.576148][ T5168] ? clear_bhb_loop+0x60/0xb0 [ 176.580851][ T5168] ? clear_bhb_loop+0x60/0xb0 [ 176.585560][ T5168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.591504][ T5168] RIP: 0033:0x7f6ee279fb19 [ 176.596047][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.615681][ T5168] RSP: 002b:00007f6ee09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 176.624134][ T5168] RAX: ffffffffffffffda RBX: 00007f6ee2a25fa0 RCX: 00007f6ee279fb19 [ 176.632227][ T5168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 176.640222][ T5168] RBP: 00007f6ee2837b70 R08: 0000000000000000 R09: 0000000000000000 [ 176.648213][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.656198][ T5168] R13: 00007f6ee2a26038 R14: 00007f6ee2a25fa0 R15: 00007ffde1ef4568 [ 176.664212][ T5168] [ 176.730801][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.860922][ T5175] tmpfs: Unknown parameter 'grpquota' [ 176.876785][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.281201][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.398188][ T5177] ip_tables: iptables: counters copy to user failed while replacing table [ 177.421554][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.495793][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.713429][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.779748][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.814140][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.842916][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.854338][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.922816][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.963433][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.993639][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.000833][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.776771][ T4964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.788294][ T4964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.849049][ T5194] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 179.912330][ T5198] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 179.912330][ T5198] program syz.0.195 not setting count and/or reply_len properly [ 179.919710][ T5194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.970706][ T9] device hsr_slave_0 left promiscuous mode [ 179.988520][ T9] device hsr_slave_1 left promiscuous mode [ 180.006922][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.055878][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.080903][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.114496][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.137896][ T9] device bridge_slave_1 left promiscuous mode [ 180.147852][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.171965][ T9] device bridge_slave_0 left promiscuous mode [ 180.185059][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.215346][ T9] device hsr_slave_0 left promiscuous mode [ 180.230717][ T9] device hsr_slave_1 left promiscuous mode [ 180.244980][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.254779][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.278694][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.284803][ T5207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.198'. [ 180.286546][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.305539][ T9] device bridge_slave_1 left promiscuous mode [ 180.311905][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.322839][ T9] device bridge_slave_0 left promiscuous mode [ 180.331452][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.391743][ T9] device veth1_macvtap left promiscuous mode [ 180.404178][ T9] device veth0_macvtap left promiscuous mode [ 180.413504][ T9] device veth1_vlan left promiscuous mode [ 180.420036][ T9] device veth0_vlan left promiscuous mode [ 180.448382][ T9] device veth1_macvtap left promiscuous mode [ 180.466968][ T9] device veth0_macvtap left promiscuous mode [ 180.478577][ T9] device veth1_vlan left promiscuous mode [ 180.487305][ T9] device veth0_vlan left promiscuous mode [ 180.562597][ T5215] ip_tables: iptables: counters copy to user failed while replacing table [ 181.744739][ T5223] tmpfs: Unknown parameter 'grpquota' [ 186.172128][ T9] team0 (unregistering): Port device team_slave_1 removed [ 186.229552][ T9] team0 (unregistering): Port device team_slave_0 removed [ 186.334167][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.555727][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.256709][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 187.293035][ T9] bond0 (unregistering): Released all slaves [ 187.456805][ T5249] ip_tables: iptables: counters copy to user failed while replacing table [ 188.628789][ T9] team0 (unregistering): Port device team_slave_1 removed [ 188.684583][ T9] team0 (unregistering): Port device team_slave_0 removed [ 188.727795][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.773312][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.927642][ T4399] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.055463][ T9] bond0 (unregistering): Released all slaves [ 189.112207][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.124121][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.132576][ T4399] usb 1-1: Using ep0 maxpacket: 32 [ 189.141094][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.149746][ T4399] usb 1-1: config 0 interface 0 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 189.160630][ T4399] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.167253][ T4399] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 189.176880][ T4399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.177916][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.189059][ T4399] usb 1-1: config 0 descriptor?? [ 189.192228][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.210826][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.220918][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.230115][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.240443][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.249191][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.259137][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.267940][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.276385][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.285037][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.293648][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.316940][ T5200] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 189.328709][ T4594] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.374115][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.416025][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.461495][ T4755] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.480076][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 189.626877][ T4399] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 189.647213][ T4399] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 189.665940][ T4399] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 189.683820][ T4399] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 189.696619][ T4399] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 189.935239][ T4399] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 190.035742][ T4399] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -38 [ 190.045971][ T4399] usb 1-1: USB disconnect, device number 6 [ 191.147544][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 191.148551][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 191.161688][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 191.576858][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.603161][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.690639][ T4964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.046351][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.102844][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.368944][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.549028][ T5280] fido_id[5280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 193.051297][ T5303] ip_tables: iptables: counters copy to user failed while replacing table [ 193.859746][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 195.271541][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.277928][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.655388][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.692134][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.745324][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.764691][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.794923][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.803319][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.815321][ T4960] device veth0_vlan entered promiscuous mode [ 197.834623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.848030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.883738][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 197.888333][ T4960] device veth1_vlan entered promiscuous mode [ 197.912518][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.923489][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.933336][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.943144][ T4964] device veth0_vlan entered promiscuous mode [ 197.959298][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.969238][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.978289][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.993085][ T4964] device veth1_vlan entered promiscuous mode [ 199.156895][ T4960] device veth0_macvtap entered promiscuous mode [ 199.168798][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.188308][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.232010][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.361064][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.382707][ T4960] device veth1_macvtap entered promiscuous mode [ 200.535628][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.558204][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.587867][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.622697][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.647471][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.673553][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.704274][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.721496][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.736700][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.766446][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.785355][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.823653][ T4964] device veth0_macvtap entered promiscuous mode [ 200.834653][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.860193][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.890706][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.935333][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.951055][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.978888][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.014976][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.046189][ T4964] device veth1_macvtap entered promiscuous mode [ 201.062923][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.171888][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.180442][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.190274][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.216246][ T4960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.239803][ T4960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.257384][ T4960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.266129][ T4960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.356300][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.384110][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.411400][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.440633][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.469499][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.500527][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.539005][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.563927][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.649109][ T5387] ip_tables: iptables: counters copy to user failed while replacing table [ 202.754530][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.835330][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.885521][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.024026][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.115244][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.220938][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.355386][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.457887][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.518105][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.590332][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.688399][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.794924][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.898236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.938829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.060129][ T4964] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.163306][ T4964] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.272263][ T4964] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.392704][ T4964] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.712085][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.808086][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.834756][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.842392][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.887847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.896206][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.924404][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.973950][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.995768][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.124026][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.144496][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.205221][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.510553][ T5421] jffs2: notice: (5421) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.197477][ T4280] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 210.513652][ T5457] ip_tables: iptables: counters copy to user failed while replacing table [ 211.118983][ T4280] usb 7-1: config 5 has an invalid interface number: 143 but max is 0 [ 211.137371][ T4280] usb 7-1: config 5 has no interface number 0 [ 211.143655][ T4280] usb 7-1: config 5 interface 143 has no altsetting 0 [ 211.165976][ T4280] usb 7-1: New USB device found, idVendor=187f, idProduct=0500, bcdDevice=8d.b8 [ 211.183785][ T4280] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.208636][ T4280] usb 7-1: Product: syz [ 211.212847][ T4280] usb 7-1: Manufacturer: syz [ 211.236395][ T4280] usb 7-1: SerialNumber: syz [ 211.427477][ T4636] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 212.302589][ T4280] smsusb:smsusb_probe: board id=17, interface number 143 [ 212.416083][ T4280] usb 7-1: USB disconnect, device number 2 [ 212.586210][ T4636] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 212.611868][ T4636] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 212.637440][ T4636] usb 6-1: Product: syz [ 212.646309][ T4636] usb 6-1: Manufacturer: syz [ 213.786925][ T4636] usb 6-1: SerialNumber: syz [ 214.098143][ T4636] usb 6-1: can't set config #4, error -71 [ 214.106535][ T4636] usb 6-1: USB disconnect, device number 2 [ 216.554083][ T5495] gadgetfs: bound to dummy_udc driver [ 216.840726][ T5506] FAULT_INJECTION: forcing a failure. [ 216.840726][ T5506] name failslab, interval 1, probability 0, space 0, times 0 [ 216.877416][ T4399] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 216.886211][ T5506] CPU: 0 PID: 5506 Comm: syz.6.261 Not tainted syzkaller #0 [ 216.893539][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 216.903651][ T5506] Call Trace: [ 216.906940][ T5506] [ 216.909886][ T5506] dump_stack_lvl+0x188/0x24e [ 216.914586][ T5506] ? show_regs_print_info+0x12/0x12 [ 216.919802][ T5506] ? load_image+0x410/0x410 [ 216.924316][ T5506] ? __stack_depot_save+0x439/0x480 [ 216.929606][ T5506] ? verify_lock_unused+0x140/0x140 [ 216.934810][ T5506] should_fail_ex+0x390/0x4c0 [ 216.939490][ T5506] should_failslab+0x5/0x20 [ 216.943984][ T5506] slab_pre_alloc_hook+0x59/0x300 [ 216.949007][ T5506] ? tipc_conn_alloc+0x57/0x4a0 [ 216.953858][ T5506] __kmem_cache_alloc_node+0x4f/0x270 [ 216.959233][ T5506] ? tipc_conn_alloc+0x57/0x4a0 [ 216.964163][ T5506] kmalloc_trace+0x26/0xe0 [ 216.968577][ T5506] tipc_conn_alloc+0x57/0x4a0 [ 216.973272][ T5506] tipc_topsrv_kern_subscr+0xf5/0x250 [ 216.978640][ T5506] ? conn_put+0x320/0x320 [ 216.982969][ T5506] ? tipc_own_addr+0x45/0x2a0 [ 216.987649][ T5506] tipc_group_create+0x357/0x4e0 [ 216.992587][ T5506] tipc_sk_join+0x256/0x6a0 [ 216.997087][ T5506] ? __tipc_sendstream+0x1330/0x1330 [ 217.002391][ T5506] tipc_setsockopt+0x6b8/0x960 [ 217.007170][ T5506] ? tipc_shutdown+0x560/0x560 [ 217.011944][ T5506] ? aa_sock_opt_perm+0x74/0x100 [ 217.016884][ T5506] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 217.022422][ T5506] ? security_socket_setsockopt+0x7a/0xa0 [ 217.028229][ T5506] ? tipc_shutdown+0x560/0x560 [ 217.032997][ T5506] __sys_setsockopt+0x2bf/0x3d0 [ 217.037855][ T5506] __x64_sys_setsockopt+0xb1/0xc0 [ 217.042876][ T5506] do_syscall_64+0x4c/0xa0 [ 217.047380][ T5506] ? clear_bhb_loop+0x60/0xb0 [ 217.052053][ T5506] ? clear_bhb_loop+0x60/0xb0 [ 217.056754][ T5506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.062664][ T5506] RIP: 0033:0x7f57fc99fb19 [ 217.067175][ T5506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.086801][ T5506] RSP: 002b:00007f57fd7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.095218][ T5506] RAX: ffffffffffffffda RBX: 00007f57fcc25fa0 RCX: 00007f57fc99fb19 [ 217.103185][ T5506] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 217.111156][ T5506] RBP: 00007f57fca37b70 R08: 0000000000000010 R09: 0000000000000000 [ 217.119126][ T5506] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 217.127093][ T5506] R13: 00007f57fcc26038 R14: 00007f57fcc25fa0 R15: 00007ffcc80225b8 [ 217.135164][ T5506] [ 217.156025][ C0] gadgetfs: connected [ 217.161935][ T4399] gadgetfs: disconnected [ 217.334701][ T5492] gadgetfs: suspended from state 2 [ 217.557405][ T4399] usb 1-1: device not accepting address 7, error -71 [ 218.034565][ T5525] ip_tables: iptables: counters copy to user failed while replacing table [ 220.067665][ T3603] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 220.478277][ T3603] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 220.597007][ T3603] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 220.713177][ T3603] usb 6-1: Product: syz [ 220.766157][ T3603] usb 6-1: Manufacturer: syz [ 220.836141][ T3603] usb 6-1: SerialNumber: syz [ 221.002021][ T3603] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 221.161222][ T5542] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 221.207560][ T5542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.312382][ T5542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.077725][ T3603] vp7045: USB control message 'out' went wrong. [ 222.087612][ T3603] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 222.138781][ T3603] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 222.166834][ T3603] usb 6-1: USB disconnect, device number 3 [ 223.446911][ T4716] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.684743][ T4716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.695763][ T4716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.707541][ T4716] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.738992][ T4716] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.857524][ T4716] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 223.897913][ T4716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.114535][ T5580] ip_tables: iptables: counters copy to user failed while replacing table [ 225.112347][ T5582] tipc: Started in network mode [ 225.117690][ T5582] tipc: Node identity 4, cluster identity 4711 [ 225.124001][ T5582] tipc: Node number set to 4 [ 226.201318][ T4716] usb 1-1: USB disconnect, device number 9 [ 226.433859][ T5595] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 226.433859][ T5595] [ 226.448240][ T5595] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 226.462766][ T5595] CIFS: Attempting to mount \\127.0.0.1\share [ 227.345534][ T5595] CIFS: VFS: cifs_mount failed w/return code = -112 [ 228.109912][ T4297] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 228.118733][ T4297] Bluetooth: hci4: Injecting HCI hardware error event [ 228.132509][ T4296] Bluetooth: hci4: hardware error 0x00 [ 229.688389][ T5622] ksmbd: Unknown IPC event: 4, ignore. [ 230.187524][ T4296] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 230.672841][ T5637] netlink: 400 bytes leftover after parsing attributes in process `syz.4.295'. [ 230.734378][ T5643] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 235.177513][ T4716] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.422168][ T4716] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.594183][ T4716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.715667][ T4716] usb 5-1: Product: syz [ 236.027759][ T4716] usb 5-1: Manufacturer: syz [ 236.032604][ T4716] usb 5-1: SerialNumber: syz [ 236.508708][ T4716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 236.761317][ T4716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 236.812624][ T4716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 236.857889][ T4716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.975782][ T4716] lan78xx: probe of 5-1:1.0 failed with error -32 [ 238.453258][ T5098] usb 5-1: USB disconnect, device number 5 [ 240.748704][ T4636] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 240.937877][ T4636] usb 7-1: Using ep0 maxpacket: 32 [ 240.948920][ T4636] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 240.974093][ T4636] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.016658][ T4636] usb 7-1: config 0 interface 0 has no altsetting 0 [ 241.033841][ T4636] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 241.072494][ T4636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.107805][ T4636] usb 7-1: config 0 descriptor?? [ 241.534930][ T4636] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 241.562495][ T4636] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 241.589940][ T4636] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 241.611264][ T4636] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 241.635594][ T4636] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0 [ 241.877259][ T4636] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 242.238149][ T4636] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -90 [ 242.511766][ T4636] usb 7-1: USB disconnect, device number 3 [ 242.588378][ T5758] loop1: detected capacity change from 0 to 1024 [ 242.614287][ T5758] EXT4-fs: Ignoring removed bh option [ 242.636501][ T5755] fido_id[5755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 243.304698][ T4296] Bluetooth: hci6: link tx timeout [ 243.310326][ T4296] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 243.473594][ T5758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 243.770049][ T5771] loop0: detected capacity change from 0 to 1024 [ 243.787676][ T5758] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.055591][ T5774] device bridge1 entered promiscuous mode [ 244.127562][ T5771] EXT4-fs: Ignoring removed bh option [ 244.446587][ T5778] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.315: lblock 3 mapped to illegal pblock 3 (length 3) [ 244.468947][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 244.589974][ T5758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.315: bg 0: block 112: padding at end of block bitmap is not set [ 244.654357][ T5778] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 244.654641][ T5758] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 244.666722][ T5778] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.666722][ T5778] [ 244.689292][ T5758] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.689292][ T5758] [ 244.698938][ T5758] EXT4-fs (loop1): Total free blocks count 0 [ 244.705086][ T5758] EXT4-fs (loop1): Free/Dirty block details [ 244.711388][ T5758] EXT4-fs (loop1): free_blocks=0 [ 244.716389][ T5758] EXT4-fs (loop1): dirty_blocks=64 [ 244.721592][ T5758] EXT4-fs (loop1): Block reservation details [ 244.785085][ T5771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.809575][ T50] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 244.814605][ T5771] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.882628][ T14] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 244.902090][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.911158][ T14] usb 6-1: Product: syz [ 245.063553][ T14] usb 6-1: Manufacturer: syz [ 245.081929][ T14] usb 6-1: SerialNumber: syz [ 245.136114][ T5786] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.321: lblock 3 mapped to illegal pblock 3 (length 3) [ 245.161109][ T5786] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 245.173696][ T5786] EXT4-fs (loop0): This should not happen!! Data will be lost [ 245.173696][ T5786] [ 245.328336][ T5771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.321: bg 0: block 112: padding at end of block bitmap is not set [ 245.349231][ T5771] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 245.361902][ T5771] EXT4-fs (loop0): This should not happen!! Data will be lost [ 245.361902][ T5771] [ 245.371609][ T5771] EXT4-fs (loop0): Total free blocks count 0 [ 245.377638][ T5771] EXT4-fs (loop0): Free/Dirty block details [ 245.383657][ T5771] EXT4-fs (loop0): free_blocks=0 [ 245.388816][ T5771] EXT4-fs (loop0): dirty_blocks=64 [ 245.393924][ T5771] EXT4-fs (loop0): Block reservation details [ 245.413696][ T4296] Bluetooth: hci6: command 0x0406 tx timeout [ 245.469688][ T4450] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 245.813906][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 246.143183][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 246.258312][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 246.412057][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 246.649799][ T14] lan78xx: probe of 6-1:1.0 failed with error -32 [ 247.020288][ T5819] loop6: detected capacity change from 0 to 2048 [ 247.652583][ T5819] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 247.667420][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.699156][ T5819] UDF-fs: Scanning with blocksize 512 failed [ 247.706610][ T4716] usb 6-1: USB disconnect, device number 4 [ 247.764399][ T5819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.847627][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 247.854598][ T14] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 247.887647][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.013260][ T14] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 248.023355][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.039652][ T14] usb 1-1: config 0 descriptor?? [ 249.729884][ T5842] device bridge1 entered promiscuous mode [ 251.720976][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 251.727000][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 251.811487][ T14] usb 1-1: USB disconnect, device number 10 [ 251.863808][ T5845] loop6: detected capacity change from 0 to 1024 [ 251.977845][ T5845] EXT4-fs: Ignoring removed bh option [ 252.129070][ T5852] bridge0: port 3(netdevsim0) entered blocking state [ 252.136477][ T5852] bridge0: port 3(netdevsim0) entered disabled state [ 252.152742][ T5852] device netdevsim0 entered promiscuous mode [ 252.162334][ T5852] bridge0: port 3(netdevsim0) entered blocking state [ 252.169628][ T5852] bridge0: port 3(netdevsim0) entered forwarding state [ 253.062766][ T5845] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 253.082439][ T5845] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.865713][ T26] audit: type=1800 audit(1794101683.681:5): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.335" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 253.900492][ T4964] EXT4-fs (loop6): unmounting filesystem. [ 253.958350][ T26] audit: type=1800 audit(1794101683.681:6): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.335" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 255.456744][ T26] audit: type=1326 audit(1794101685.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee279fb19 code=0x7ffc0000 [ 255.514435][ T26] audit: type=1326 audit(1794101685.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee279fb19 code=0x7ffc0000 [ 255.610455][ T26] audit: type=1326 audit(1794101685.361:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ee279fb19 code=0x7ffc0000 [ 255.639122][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645646][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.646478][ T5882] loop5: detected capacity change from 0 to 1024 [ 256.240390][ T5882] EXT4-fs: Ignoring removed bh option [ 256.266690][ T26] audit: type=1326 audit(1794101685.391:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee279fb19 code=0x7ffc0000 [ 256.325791][ T26] audit: type=1326 audit(1794101685.391:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee279fb19 code=0x7ffc0000 [ 256.386755][ T5882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 256.482488][ T5882] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.577590][ T26] audit: type=1326 audit(1794101685.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ee279f7ab code=0x7ffc0000 [ 256.867634][ T5894] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.345: lblock 3 mapped to illegal pblock 3 (length 3) [ 257.016713][ T5882] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.345: bg 0: block 112: padding at end of block bitmap is not set [ 257.037786][ T5894] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 257.050136][ T5894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 257.050136][ T5894] [ 257.063548][ T5882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 257.076236][ T5882] EXT4-fs (loop5): This should not happen!! Data will be lost [ 257.076236][ T5882] [ 257.085934][ T5882] EXT4-fs (loop5): Total free blocks count 0 [ 257.092027][ T5882] EXT4-fs (loop5): Free/Dirty block details [ 257.097985][ T5882] EXT4-fs (loop5): free_blocks=0 [ 257.103130][ T5882] EXT4-fs (loop5): dirty_blocks=64 [ 257.108299][ T5882] EXT4-fs (loop5): Block reservation details [ 257.189414][ T4375] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 257.469292][ T26] audit: type=1326 audit(1794101685.391:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ee279f7ab code=0x7ffc0000 [ 257.604936][ T5904] rt1719: probe of 0-0004 failed with error -5 [ 257.612042][ T5904] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 258.213423][ T4375] rpcbind: server 127.0.0.1 not responding, timed out [ 258.459249][ T5905] netlink: 64 bytes leftover after parsing attributes in process `syz.5.346'. [ 258.507795][ T26] audit: type=1326 audit(1794101685.391:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.0.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ee279f7ab code=0x7ffc0000 [ 258.849370][ T5911] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 263.100055][ T5943] device bridge1 entered promiscuous mode [ 265.085195][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 265.085209][ T26] audit: type=1326 audit(1794101694.961:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334239fb19 code=0x7ffc0000 [ 266.364236][ T26] audit: type=1326 audit(1794101694.961:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239fb19 code=0x7ffc0000 [ 266.568115][ T26] audit: type=1326 audit(1794101694.961:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334239fb19 code=0x7ffc0000 [ 266.693684][ T26] audit: type=1326 audit(1794101694.961:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 266.792407][ T26] audit: type=1326 audit(1794101694.961:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 266.857629][ T4595] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 266.903446][ T26] audit: type=1326 audit(1794101694.961:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 267.027474][ T26] audit: type=1326 audit(1794101694.961:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 267.077389][ T4595] usb 2-1: Using ep0 maxpacket: 16 [ 267.153726][ T26] audit: type=1326 audit(1794101694.961:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 267.378001][ T26] audit: type=1326 audit(1794101694.961:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 267.610868][ T26] audit: type=1326 audit(1794101694.961:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.1.360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f334239f7ab code=0x7ffc0000 [ 268.070596][ T4595] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.282280][ T5982] orangefs_mount: mount request failed with -4 [ 268.514335][ T4595] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 268.532757][ T4595] usb 2-1: can't read configurations, error -71 [ 269.054673][ T5991] loop4: detected capacity change from 0 to 2048 [ 269.354126][ T5995] loop1: detected capacity change from 0 to 2048 [ 269.364439][ T5991] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 269.372448][ T5991] UDF-fs: Scanning with blocksize 512 failed [ 269.409571][ T5991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.455534][ T5998] loop5: detected capacity change from 0 to 2048 [ 269.532049][ T5998] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 269.563887][ T5998] UDF-fs: Scanning with blocksize 512 failed [ 269.688232][ T5995] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 269.737561][ T5995] UDF-fs: Scanning with blocksize 512 failed [ 269.849503][ T5995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.869136][ T5998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.987467][ T4595] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 270.225130][ T4595] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 270.255714][ T4595] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 272.409448][ T4595] usb 1-1: Product: syz [ 272.417486][ T4595] usb 1-1: Manufacturer: syz [ 272.422151][ T4595] usb 1-1: SerialNumber: syz [ 272.441299][ T4595] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 272.665619][ T6001] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 272.732983][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.478833][ T4297] Bluetooth: hci5: command 0x0406 tx timeout [ 273.486032][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.712915][ T4595] vp7045: USB control message 'out' went wrong. [ 273.745403][ T4595] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 274.657387][ T4595] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 274.696489][ T6022] loop5: detected capacity change from 0 to 2048 [ 274.749104][ T4595] usb 1-1: USB disconnect, device number 11 [ 274.810640][ T6022] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 274.857436][ T6022] UDF-fs: Scanning with blocksize 512 failed [ 274.902258][ T6022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.047046][ T6061] orangefs_mount: mount request failed with -4 [ 277.101927][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 277.101942][ T26] audit: type=1326 audit(1794101706.981:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc99fb19 code=0x7ffc0000 [ 277.168842][ T26] audit: type=1326 audit(1794101707.021:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99fb19 code=0x7ffc0000 [ 277.216102][ T26] audit: type=1326 audit(1794101707.021:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc99fb19 code=0x7ffc0000 [ 277.217794][ T6064] loop5: detected capacity change from 0 to 2048 [ 277.351981][ T6068] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 278.155161][ T26] audit: type=1326 audit(1794101707.021:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc99fb19 code=0x7ffc0000 [ 278.179312][ T26] audit: type=1326 audit(1794101707.021:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.203500][ T26] audit: type=1326 audit(1794101707.021:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.227442][ T26] audit: type=1326 audit(1794101707.021:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.255778][ T26] audit: type=1326 audit(1794101707.021:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.279782][ T26] audit: type=1326 audit(1794101707.021:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.304040][ T26] audit: type=1326 audit(1794101707.021:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.6.377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57fc99f7ab code=0x7ffc0000 [ 278.318685][ T6064] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 278.384365][ T6064] UDF-fs: Scanning with blocksize 512 failed [ 278.453322][ T6064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.327434][ T4370] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 284.379653][ T6111] orangefs_mount: mount request failed with -4 [ 285.727762][ T4594] rpcbind: server 127.0.0.1 not responding, timed out [ 287.946520][ T6140] tipc: Enabling of bearer rejected, failed to enable media [ 287.964242][ T6140] i2c i2c-0: Failed to register i2c client rt1719 at 0x04 (-16) [ 288.581139][ C1] ================================================================== [ 288.589314][ C1] BUG: KASAN: use-after-free in __xfrm_state_delete+0x3db/0x940 [ 288.596936][ C1] Write of size 8 at addr ffff8880561fad90 by task kworker/1:1H/95 [ 288.604829][ C1] [ 288.607144][ C1] CPU: 1 PID: 95 Comm: kworker/1:1H Not tainted syzkaller #0 [ 288.614499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 288.624552][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 288.630967][ C1] Call Trace: [ 288.634244][ C1] [ 288.637099][ C1] dump_stack_lvl+0x188/0x24e [ 288.641884][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 288.646943][ C1] ? show_regs_print_info+0x12/0x12 [ 288.652333][ C1] ? load_image+0x410/0x410 [ 288.656853][ C1] ? __virt_addr_valid+0x467/0x540 [ 288.662163][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 288.667460][ C1] print_report+0xa8/0x210 [ 288.671871][ C1] kasan_report+0x10b/0x140 [ 288.676374][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 288.681662][ C1] __xfrm_state_delete+0x3db/0x940 [ 288.686779][ C1] xfrm_timer_handler+0x10b/0x970 [ 288.691898][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 288.697002][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 288.702967][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 288.708253][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 288.714139][ C1] ? _raw_spin_unlock+0x40/0x40 [ 288.718980][ C1] __hrtimer_run_queues+0x522/0xc90 [ 288.724181][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 288.729192][ C1] ? hrtimer_interrupt+0x980/0x980 [ 288.734306][ C1] hrtimer_run_softirq+0x173/0x290 [ 288.739419][ C1] handle_softirqs+0x291/0x910 [ 288.744183][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 288.749037][ C1] ? do_softirq+0x210/0x210 [ 288.753541][ C1] ? hrtimer_interrupt+0x775/0x980 [ 288.758666][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 288.763856][ C1] __irq_exit_rcu+0x13b/0x230 [ 288.768516][ C1] ? irq_exit_rcu+0x20/0x20 [ 288.773003][ C1] irq_exit_rcu+0x5/0x20 [ 288.777414][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 288.783056][ C1] [ 288.785975][ C1] [ 288.788901][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 288.794880][ C1] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 288.800714][ C1] Code: dd 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 33 d6 e7 08 e8 5e 44 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 288.820429][ C1] RSP: 0018:ffffc900025e7780 EFLAGS: 00000282 [ 288.826552][ C1] RAX: e1a32ee81bad9500 RBX: 0000000000000000 RCX: e1a32ee81bad9500 [ 288.834618][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 288.842592][ C1] RBP: ffffc900025e77d0 R08: ffffffff91b62357 R09: 1ffffffff236c46a [ 288.850563][ C1] R10: dffffc0000000000 R11: fffffbfff236c46b R12: ffff88801b731e00 [ 288.858536][ C1] R13: ffff8880b8d3ba48 R14: dffffc0000000000 R15: ffff8880b8d3b7d0 [ 288.866521][ C1] __schedule+0x1091/0x4140 [ 288.871042][ C1] ? release_firmware_map_entry+0x187/0x187 [ 288.876942][ C1] ? preempt_schedule+0xbc/0xd0 [ 288.881812][ C1] preempt_schedule_common+0x82/0xd0 [ 288.887094][ C1] preempt_schedule+0xbc/0xd0 [ 288.891795][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 288.897443][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 288.903447][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 288.908470][ C1] ? lock_chain_count+0x20/0x20 [ 288.913308][ C1] preempt_schedule_thunk+0x16/0x18 [ 288.918524][ C1] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 288.924339][ C1] ? _raw_spin_unlock+0x40/0x40 [ 288.929184][ C1] ? __snd_rawmidi_transmit_ack+0x230/0x2b0 [ 288.935247][ C1] snd_rawmidi_transmit+0x98/0xc0 [ 288.940281][ C1] snd_vmidi_output_work+0x1a2/0x3e0 [ 288.945583][ C1] ? snd_virmidi_output_drain+0x70/0x70 [ 288.951119][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 288.956304][ C1] ? process_one_work+0x7b4/0x1160 [ 288.961471][ C1] process_one_work+0x8ab/0x1160 [ 288.966418][ C1] ? worker_detach_from_pool+0x240/0x240 [ 288.972052][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 288.977068][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 288.982614][ C1] ? wq_worker_running+0x97/0x190 [ 288.987641][ C1] worker_thread+0xaf5/0x12a0 [ 288.992314][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 288.998195][ C1] kthread+0x29d/0x330 [ 289.002261][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 289.007270][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.011858][ C1] ret_from_fork+0x1f/0x30 [ 289.016307][ C1] [ 289.019374][ C1] [ 289.021689][ C1] Allocated by task 4716: [ 289.026010][ C1] kasan_set_track+0x4b/0x70 [ 289.030628][ C1] __kasan_kmalloc+0x8e/0xa0 [ 289.035230][ C1] __kmalloc+0xb3/0x240 [ 289.039370][ C1] xfrm_hash_resize+0x84/0xff0 [ 289.044149][ C1] process_one_work+0x8ab/0x1160 [ 289.049092][ C1] worker_thread+0xd6e/0x12a0 [ 289.053942][ C1] kthread+0x29d/0x330 [ 289.058019][ C1] ret_from_fork+0x1f/0x30 [ 289.062459][ C1] [ 289.064768][ C1] The buggy address belongs to the object at ffff8880561fac00 [ 289.064768][ C1] which belongs to the cache kmalloc-512 of size 512 [ 289.078806][ C1] The buggy address is located 400 bytes inside of [ 289.078806][ C1] 512-byte region [ffff8880561fac00, ffff8880561fae00) [ 289.092200][ C1] [ 289.094521][ C1] The buggy address belongs to the physical page: [ 289.100940][ C1] page:ffffea0001587e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880561fbc00 pfn:0x561f8 [ 289.112380][ C1] head:ffffea0001587e00 order:2 compound_mapcount:0 compound_pincount:0 [ 289.120808][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 289.128975][ C1] raw: 00fff00000010200 ffffea00015d0208 ffffea00015bca08 ffff888018441c80 [ 289.137569][ C1] raw: ffff8880561fbc00 0000000000100008 00000001ffffffff 0000000000000000 [ 289.146239][ C1] page dumped because: kasan: bad access detected [ 289.152676][ C1] page_owner tracks the page as allocated [ 289.158373][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4292, tgid 4292 (syz-executor), ts 68312237444, free_ts 19904907708 [ 289.180002][ C1] post_alloc_hook+0x173/0x1a0 [ 289.184763][ C1] get_page_from_freelist+0x206b/0x2180 [ 289.191095][ C1] __alloc_pages+0x1ec/0x4f0 [ 289.195670][ C1] alloc_slab_page+0x5d/0x180 [ 289.200332][ C1] new_slab+0x87/0x2d0 [ 289.204384][ C1] ___slab_alloc+0xbc5/0x1240 [ 289.209043][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 289.214500][ C1] __kmalloc_node_track_caller+0xa0/0x240 [ 289.220278][ C1] __alloc_skb+0x226/0x7d0 [ 289.224951][ C1] netlink_ack+0x373/0x1160 [ 289.229443][ C1] netlink_rcv_skb+0x26d/0x440 [ 289.234213][ C1] netlink_unicast+0x7ad/0x920 [ 289.239082][ C1] netlink_sendmsg+0x8ad/0xbd0 [ 289.243835][ C1] __sys_sendto+0x497/0x650 [ 289.248934][ C1] __x64_sys_sendto+0xda/0xf0 [ 289.253615][ C1] do_syscall_64+0x4c/0xa0 [ 289.258144][ C1] page last free stack trace: [ 289.262798][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 289.268244][ C1] free_unref_page+0x2e/0x3f0 [ 289.272906][ C1] free_contig_range+0x9d/0x150 [ 289.277752][ C1] destroy_args+0xef/0xa0e [ 289.282168][ C1] debug_vm_pgtable+0x33c/0x38e [ 289.287025][ C1] do_one_initcall+0x257/0x800 [ 289.291969][ C1] do_initcall_level+0x13d/0x1ed [ 289.296905][ C1] do_initcalls+0x4b/0x8a [ 289.301308][ C1] kernel_init_freeable+0x401/0x5ab [ 289.306759][ C1] kernel_init+0x19/0x1b0 [ 289.311349][ C1] ret_from_fork+0x1f/0x30 [ 289.315760][ C1] [ 289.318075][ C1] Memory state around the buggy address: [ 289.323686][ C1] ffff8880561fac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.331752][ C1] ffff8880561fad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.339892][ C1] >ffff8880561fad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.348056][ C1] ^ [ 289.352659][ C1] ffff8880561fae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.360813][ C1] ffff8880561fae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.368895][ C1] ================================================================== [ 289.379485][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.386687][ C1] CPU: 1 PID: 95 Comm: kworker/1:1H Not tainted syzkaller #0 [ 289.394085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 289.404136][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 289.410555][ C1] Call Trace: [ 289.413818][ C1] [ 289.416646][ C1] dump_stack_lvl+0x188/0x24e [ 289.421320][ C1] ? memcpy+0x3c/0x60 [ 289.425287][ C1] ? show_regs_print_info+0x12/0x12 [ 289.430485][ C1] ? load_image+0x410/0x410 [ 289.434990][ C1] panic+0x2d3/0x710 [ 289.438887][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 289.443376][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 289.449428][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 289.455324][ C1] ? _raw_spin_unlock+0x40/0x40 [ 289.460158][ C1] ? print_memory_metadata+0x314/0x400 [ 289.465700][ C1] check_panic_on_warn+0x80/0xa0 [ 289.470642][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 289.475921][ C1] end_report+0x66/0x110 [ 289.480148][ C1] kasan_report+0x118/0x140 [ 289.484641][ C1] ? __xfrm_state_delete+0x3db/0x940 [ 289.489924][ C1] __xfrm_state_delete+0x3db/0x940 [ 289.495135][ C1] xfrm_timer_handler+0x10b/0x970 [ 289.500149][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 289.505178][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 289.511081][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 289.516283][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 289.522172][ C1] ? _raw_spin_unlock+0x40/0x40 [ 289.527039][ C1] __hrtimer_run_queues+0x522/0xc90 [ 289.532233][ C1] ? xfrm_state_alloc+0x2a0/0x2a0 [ 289.537252][ C1] ? hrtimer_interrupt+0x980/0x980 [ 289.542479][ C1] hrtimer_run_softirq+0x173/0x290 [ 289.547631][ C1] handle_softirqs+0x291/0x910 [ 289.552397][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 289.557248][ C1] ? do_softirq+0x210/0x210 [ 289.561734][ C1] ? hrtimer_interrupt+0x775/0x980 [ 289.566841][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 289.572035][ C1] __irq_exit_rcu+0x13b/0x230 [ 289.576692][ C1] ? irq_exit_rcu+0x20/0x20 [ 289.581181][ C1] irq_exit_rcu+0x5/0x20 [ 289.585404][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 289.591045][ C1] [ 289.593957][ C1] [ 289.596872][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 289.602866][ C1] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 289.608930][ C1] Code: dd 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 e9 e7 04 00 00 4c 89 e7 e8 33 d6 e7 08 e8 5e 44 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 289.628535][ C1] RSP: 0018:ffffc900025e7780 EFLAGS: 00000282 [ 289.634585][ C1] RAX: e1a32ee81bad9500 RBX: 0000000000000000 RCX: e1a32ee81bad9500 [ 289.642721][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac1cc0 RDI: ffffffff8afe72a0 [ 289.650675][ C1] RBP: ffffc900025e77d0 R08: ffffffff91b62357 R09: 1ffffffff236c46a [ 289.658646][ C1] R10: dffffc0000000000 R11: fffffbfff236c46b R12: ffff88801b731e00 [ 289.666598][ C1] R13: ffff8880b8d3ba48 R14: dffffc0000000000 R15: ffff8880b8d3b7d0 [ 289.674627][ C1] __schedule+0x1091/0x4140 [ 289.679165][ C1] ? release_firmware_map_entry+0x187/0x187 [ 289.685101][ C1] ? preempt_schedule+0xbc/0xd0 [ 289.689944][ C1] preempt_schedule_common+0x82/0xd0 [ 289.695233][ C1] preempt_schedule+0xbc/0xd0 [ 289.699896][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 289.705538][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 289.711605][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 289.716614][ C1] ? lock_chain_count+0x20/0x20 [ 289.721480][ C1] preempt_schedule_thunk+0x16/0x18 [ 289.726668][ C1] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 289.732469][ C1] ? _raw_spin_unlock+0x40/0x40 [ 289.737311][ C1] ? __snd_rawmidi_transmit_ack+0x230/0x2b0 [ 289.743468][ C1] snd_rawmidi_transmit+0x98/0xc0 [ 289.748484][ C1] snd_vmidi_output_work+0x1a2/0x3e0 [ 289.753753][ C1] ? snd_virmidi_output_drain+0x70/0x70 [ 289.759279][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 289.764565][ C1] ? process_one_work+0x7b4/0x1160 [ 289.769669][ C1] process_one_work+0x8ab/0x1160 [ 289.774635][ C1] ? worker_detach_from_pool+0x240/0x240 [ 289.780296][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 289.785307][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 289.790839][ C1] ? wq_worker_running+0x97/0x190 [ 289.795843][ C1] worker_thread+0xaf5/0x12a0 [ 289.800536][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 289.806420][ C1] kthread+0x29d/0x330 [ 289.810475][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 289.815502][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.820159][ C1] ret_from_fork+0x1f/0x30 [ 289.824577][ C1] [ 289.827957][ C1] Kernel Offset: disabled [ 289.832291][ C1] Rebooting in 86400 seconds..