last executing test programs: 17.747466779s ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 17.300587947s ago: executing program 4 (id=320): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = getpgid(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0, 0x8000, 0x80, 0x2, 0xfec, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x34, 0x3, [{0x1, 0x4, "f9d6a9959f1d433cf10fe67169472bef"}, {0x0, 0x2}, {0x1, 0xe, "62655903cbd0b86b29ffcbd5"}, {0xb15137fa2f048ae0, 0x1a, "bb5e9f3a1d446113a1802c74a5"}, {0x5, 0x2}, {0x1, 0x9, "49eb42ef425aab"}]}]}}}}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) 11.929105358s ago: executing program 3 (id=329): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x250}, {r2, 0x4050}], 0x2, 0xffffffb3) close_range(r1, 0xffffffffffffffff, 0x0) 10.524251106s ago: executing program 3 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.400194071s ago: executing program 1 (id=335): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf00000001090212"], 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9.532500777s ago: executing program 3 (id=336): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f00000002c0)={0x0, 0x7, 0xb, '\x00', &(0x7f0000000280)=0x7}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2, 0x9, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0e020000234d8522a8a56829b8e0453cdda63192c52c279ece4afdf76799f89419fddce062ba55f4ea63fe6e8d633e1bed4ebc0e495800748b5b65e654aa40bf170840f9651f876874336227dc7b74de533ccf1a13954dec2c50a67a9490b9ec5648b187d4dbadced01da1ade538c1861050736a114d0656ed87ca88f8aa2de459e9e5772f9adf8013e039dd92bf0340eca29207e147a9048f91d24b93066ceecb0389e2f8eabcf1e3f11253c6ebed77d8e3cf3528965e3c5164f4fe0900000020b1925f5d1fb64f94394ea068171acc4fdd2d9131478d84b5b248b2ebc101e5b875a8788d92", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x59b1e1b54c2dff8f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x88440, 0x36, 0x9}, 0x18) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00006b7000/0x3000)=nil, 0x3000, 0x9) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) 8.329569437s ago: executing program 4 (id=338): socket$kcm(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r2, 0x3, 0x1, 0x8}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x202, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0xfe, 0x2, 0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 8.23503128s ago: executing program 3 (id=339): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 6.952521583s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 5.861496678s ago: executing program 1 (id=344): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x250}, {r2, 0x4050}], 0x2, 0xffffffb3) close_range(r1, 0xffffffffffffffff, 0x0) 5.624622068s ago: executing program 0 (id=346): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) 5.400770207s ago: executing program 0 (id=347): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 4.452583736s ago: executing program 0 (id=349): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0xf) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="cfc20e1b7bf4ea759f8ad65a62a87fd140bb21baebbd455c7cafa5e0aa2d25d0ea2203e98fd4a0c8e6477e44a7feec5070a0d0cc0b97b659bfb583176a93110bb0d44900268579494879b9537f6ad556112167344924eb61d85a9cdd869ce7a66267dd28b7444f37bf5067c11b83ae01599094b1d80d5b71ebb121fa467d03f7396bfd3b03790fdc70b1d7cd04a68c1a0d1387a43ace19c94260e74557e2cc034a6e4c27b8b2201708a1197570ac58f144e716e85e0c6a8ed4fde553e1fe58efef14f892c6f06c26"}) socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_io_uring_setup(0x3a76, &(0x7f000000a9c0)={0x0, 0x3448, 0x0, 0x1, 0x392}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000000c0)={0x0, 0x1}, 0x1) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x1c0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x10030, 0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}}, 0xfffffffffffffd7c) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.296552343s ago: executing program 1 (id=350): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="203149000000cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.820845892s ago: executing program 3 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x3, 0x22}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.530908254s ago: executing program 2 (id=352): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0) setfsuid(0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) pipe(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/timers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x800, 0xffff, 0x3, 0x1, "554fb508fec144aca1197d9cf178c7a7aa0d87", 0x8000, 0x1}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='f2fs\x00', 0xa7905f90db5ff5ac, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, 0x0, &(0x7f0000001500)=@udp6=r4}, 0x20) 2.825205743s ago: executing program 2 (id=355): openat$nullb(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x68, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2c}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @remote}, "b2f6fc43e5721dcc"}}}}}, 0x0) 2.712272808s ago: executing program 2 (id=356): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x104, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0x46471cffc281cb8c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.839970184s ago: executing program 0 (id=357): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0x2a25}]) 1.832404784s ago: executing program 4 (id=358): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x0, 0xfffffffe, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg0\x00', 0x0}) r3 = fsopen(0x0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffd}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0c00018008000100050004000c00"], 0x30}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'8255\x00', [0x4f27, 0x1, 0x3, 0x4, 0x7, 0xcc9, 0xf, 0x1007, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1001, 0x7, 0x101, 0xc, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x6, 0x20001e58, 0x7, 0x63e, 0x13c, 0x8, 0x4, 0x8, 0xfffffff8]}) 1.676478431s ago: executing program 2 (id=359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r7, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0) 910.043612ms ago: executing program 1 (id=360): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x250}, {0xffffffffffffffff, 0x4050}], 0x2, 0xffffffb3) close_range(r1, 0xffffffffffffffff, 0x0) 804.595607ms ago: executing program 4 (id=361): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x20202, 0xa4) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0xc1d, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r9, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x6b7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000004) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="010325bd700000dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) sendfile(r0, r0, 0x0, 0x68) 208.548321ms ago: executing program 2 (id=362): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 208.177071ms ago: executing program 0 (id=363): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") socket(0x27, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x40000000000007, 0x9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 75.156596ms ago: executing program 4 (id=364): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000400)={0x0, 0xec2c, 0x80, 0xfffffffd, 0x87}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e1d, 0x2, @local, 0xe}}, 0x978, 0x0, 0xfffffffc, 0x0, 0x50, 0x6, 0xe0}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r5, 0x2}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x68, 0x4004, @fd_index=0x8005, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0xee01) 705.78µs ago: executing program 2 (id=365): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000440)={0x40, 0x8, 0x6, "82fce9a4d70c"}, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 1 (id=366): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 56.951204][ T4172] cgroup: Unknown subsys name 'net' [ 57.084714][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.570926][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.638068][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.654718][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.683144][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.757156][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.859641][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.866870][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.875616][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.907334][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.915229][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.923956][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.931716][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.939064][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.947417][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.955558][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.964571][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.973011][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.980316][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.003421][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.010754][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.019010][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.026469][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.034172][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.041972][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.103884][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.111156][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.119589][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.128546][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.148016][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.160789][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.170132][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.177293][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.185730][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.201485][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.216189][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.226901][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.276681][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.300698][ T4182] team0: Port device team_slave_0 added [ 61.314818][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.326799][ T4186] team0: Port device team_slave_0 added [ 61.341621][ T4182] team0: Port device team_slave_1 added [ 61.355424][ T4184] team0: Port device team_slave_0 added [ 61.368387][ T4186] team0: Port device team_slave_1 added [ 61.382607][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.390635][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.398436][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.408166][ T4184] team0: Port device team_slave_1 added [ 61.436441][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.444120][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.452755][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.469424][ T4183] team0: Port device team_slave_0 added [ 61.483742][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.490960][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.517073][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.548629][ T4183] team0: Port device team_slave_1 added [ 61.555480][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.562951][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.590147][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.602420][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.609880][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.636805][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.659623][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.666720][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.692916][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.713781][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.720875][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.747581][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.764822][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.777390][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.793829][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.801200][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.827529][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.880467][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.887554][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.914192][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.950990][ T4185] team0: Port device team_slave_0 added [ 61.957692][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.964985][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.991433][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.013922][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.021230][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.037129][ T4185] team0: Port device team_slave_1 added [ 62.058548][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.066437][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.073403][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.081652][ T4182] Cannot create hsr debugfs directory [ 62.098742][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.105499][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.112723][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.120651][ T4184] Cannot create hsr debugfs directory [ 62.155914][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.163280][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.189458][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.225620][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.233064][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.259743][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.303666][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.311689][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.318337][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.327062][ T4183] Cannot create hsr debugfs directory [ 62.339718][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 62.346655][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 62.353527][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 62.359747][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 62.365961][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 62.388051][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.395237][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.401859][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.409806][ T4185] Cannot create hsr debugfs directory [ 62.680580][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.697458][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.710203][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.721731][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.731359][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.741249][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.754595][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.776646][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.847197][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.856250][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.866210][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.886404][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.895444][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.924082][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.940718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.953907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.972680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.984661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.995645][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.003207][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.044255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.053391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.063163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.073694][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.081032][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.089229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.098238][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.130249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.141752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.151076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.163342][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.174809][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.191931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.214385][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.226647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.236319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.260572][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.269478][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.289556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.298547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.314873][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.326666][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.334729][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.347861][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.371159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.380359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.456086][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.473340][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.507309][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.518358][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.534490][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.556624][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.570044][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.578386][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.594740][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.608383][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.618199][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.627605][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.634750][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.644381][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.670141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.679828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.688439][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.695780][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.706256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.714633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.722971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.732158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.741154][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.748221][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.756245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.765697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.774302][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.781382][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.790981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.802232][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.823321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.831917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.839925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.847663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.856379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.865836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.882571][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.889714][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.901808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.922453][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.945905][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.955723][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.964989][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.977219][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.985996][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.995489][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.004304][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.011494][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.020838][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.029990][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.055023][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.066909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.076822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.086808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.096393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.105531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.114620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.127852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.136547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.145642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.155648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.164428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.174644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.188576][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.200417][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.220771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.230797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.245662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.254342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.265025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.274287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.283899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.292839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.305782][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.317988][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.336131][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.349780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.365563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.376449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.391869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.402733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.419264][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 64.429458][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 64.435763][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 64.442173][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.453737][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 64.461481][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.479335][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 64.479613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.496882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.508296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.518622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.528453][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.535705][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.545090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.554432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.563532][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.570833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.585731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.594640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.604838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.613912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.624441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.633526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.645069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.653090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.662337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.670585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.679382][ T4186] device veth0_vlan entered promiscuous mode [ 64.706969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.720568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.740752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.748358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.758273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.777624][ T4186] device veth1_vlan entered promiscuous mode [ 64.808380][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.833210][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.843818][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.884682][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.894927][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.917318][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.929689][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.957882][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.970416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.980888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.991113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.001460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.018236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.027945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.048027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.069783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.088542][ T4183] device veth0_vlan entered promiscuous mode [ 65.112844][ T4186] device veth0_macvtap entered promiscuous mode [ 65.150126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.160286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.170421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.179687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.188252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.196200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.206333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.218072][ T4183] device veth1_vlan entered promiscuous mode [ 65.231988][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.242954][ T4186] device veth1_macvtap entered promiscuous mode [ 65.315825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.325428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.341347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.355415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.365703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.384576][ T4183] device veth0_macvtap entered promiscuous mode [ 65.396966][ T4183] device veth1_macvtap entered promiscuous mode [ 65.408032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.416311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.426508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.435486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.447238][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.471794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.481751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.503835][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.512574][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.527222][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.540200][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.552338][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.564967][ T4184] device veth0_vlan entered promiscuous mode [ 65.574171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.583031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.591470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.600605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.610959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.620422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.629328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.638165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.647423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.656379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.665060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.673085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.690317][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700461][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.710511][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720405][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.762389][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.773488][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.787182][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.814889][ T4184] device veth1_vlan entered promiscuous mode [ 65.823630][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.834539][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.843830][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.854277][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.864563][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.874668][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.883629][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.893163][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.903331][ T4182] device veth0_vlan entered promiscuous mode [ 65.921256][ T4182] device veth1_vlan entered promiscuous mode [ 65.933499][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.943379][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956293][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965607][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996762][ T4185] device veth0_vlan entered promiscuous mode [ 66.004148][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.013574][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.023238][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.036893][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.045532][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.089001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.097357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.122363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.144958][ T4185] device veth1_vlan entered promiscuous mode [ 66.161983][ T4184] device veth0_macvtap entered promiscuous mode [ 66.177348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.186480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.197176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.206770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.215795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.227643][ T4182] device veth0_macvtap entered promiscuous mode [ 66.250760][ T4184] device veth1_macvtap entered promiscuous mode [ 66.271593][ T4182] device veth1_macvtap entered promiscuous mode [ 66.299411][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.305129][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.307617][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.319871][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.336010][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.346990][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.360553][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.372292][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.383533][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.393813][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.404982][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.416581][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.444017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.452802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.462155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.470825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.478605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.487856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.496926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.499263][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 66.511343][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 66.511526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.517496][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 66.527174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.537327][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 66.543429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.546360][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 66.567613][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.577013][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.587484][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.596359][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613171][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.624654][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.634992][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.646267][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.657025][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.668619][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.681762][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.693026][ T4185] device veth0_macvtap entered promiscuous mode [ 66.707679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.720969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.729936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.742276][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.754094][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765376][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.776243][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.786443][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.797133][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.809612][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.829467][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.837498][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.847462][ T4185] device veth1_macvtap entered promiscuous mode [ 66.858651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.868170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.877102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.885886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.896368][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905598][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916472][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.925489][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.981970][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.993731][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.003643][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.019754][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.029850][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.040959][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.054545][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.066607][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.077267][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.088292][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.100772][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.120815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.130229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.141826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.157007][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.169071][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.179588][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.190461][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.201019][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.211791][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.224155][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.235123][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246461][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.257303][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.261444][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275011][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275978][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.284240][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.301076][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.337656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.347606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.363803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.399756][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.408432][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.464487][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.475908][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.532454][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.587545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.069485][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.079550][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.235028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.411021][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.450508][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.499324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.508376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.517357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.526374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.535331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.544361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.553812][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.563029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.573025][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 68.597619][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.621205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 68.632467][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 68.641060][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 68.647379][ T4249] Bluetooth: hci2: command 0x0419 tx timeout [ 68.657211][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 68.664410][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 68.673658][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.727881][ T4309] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.740012][ T4309] F2FS-fs (loop5): Unable to read 1th superblock [ 68.746851][ T4309] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.758071][ T4309] F2FS-fs (loop5): Unable to read 2th superblock [ 68.781976][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.796231][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.132949][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.210885][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.616477][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.796212][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.796459][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.871241][ T4329] netlink: 'syz.2.7': attribute type 12 has an invalid length. [ 72.558718][ C0] sched: RT throttling activated [ 72.688185][ T4337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.987093][ T4342] Zero length message leads to an empty skb [ 75.157001][ T4355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.983123][ T4358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13'. [ 76.695399][ T4371] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 81.701745][ T23] cfg80211: failed to load regulatory.db [ 82.295913][ T4414] xt_l2tp: invalid flags combination: 0 [ 82.429552][ T4418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.29'. [ 83.865389][ T4427] ======================================================= [ 83.865389][ T4427] WARNING: The mand mount option has been deprecated and [ 83.865389][ T4427] and is ignored by this kernel. Remove the mand [ 83.865389][ T4427] option from the mount to silence this warning. [ 83.865389][ T4427] ======================================================= [ 84.719082][ T4435] binder: 4410:4435 ioctl 4018620d 0 returned -22 [ 85.063178][ T4440] loop2: detected capacity change from 0 to 512 [ 85.133080][ T4440] EXT4-fs (loop2): Ignoring removed oldalloc option [ 85.186241][ T4440] EXT4-fs (loop2): 1 truncate cleaned up [ 85.193649][ T4440] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 85.263060][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 85.273590][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 85.281173][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.291454][ T4196] Workqueue: hci1 hci_rx_work [ 85.296186][ T4196] Call Trace: [ 85.299492][ T4196] [ 85.302486][ T4196] dump_stack_lvl+0x168/0x230 [ 85.307593][ T4196] ? show_regs_print_info+0x20/0x20 [ 85.312891][ T4196] ? load_image+0x3b0/0x3b0 [ 85.317640][ T4196] sysfs_create_dir_ns+0x252/0x280 [ 85.322857][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 85.327967][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 85.333094][ T4196] ? le_conn_complete_evt+0xcbc/0x1590 [ 85.338566][ T4196] ? hci_event_packet+0xe05/0x12f0 [ 85.343780][ T4196] ? process_one_work+0x863/0x1000 [ 85.349003][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 85.354227][ T4196] kobject_add_internal+0x662/0xd00 [ 85.359518][ T4196] kobject_add+0x152/0x210 [ 85.364166][ T4196] ? kobject_init+0x1d0/0x1d0 [ 85.369047][ T4196] ? klist_children_get+0x50/0x50 [ 85.374160][ T4196] ? get_device_parent+0x121/0x3f0 [ 85.379553][ T4196] device_add+0x483/0xfb0 [ 85.383900][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 85.388833][ T4196] le_conn_complete_evt+0xcbc/0x1590 [ 85.394119][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 85.399227][ T4196] ? __mutex_trylock_common+0x14f/0x250 [ 85.404953][ T4196] hci_le_meta_evt+0xd04/0x3b80 [ 85.409801][ T4196] ? hci_event_packet+0x36d/0x12f0 [ 85.415010][ T4196] ? hci_event_packet+0x2e2/0x12f0 [ 85.420377][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 85.425520][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 85.431779][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 85.437569][ T4196] ? mark_lock+0x94/0x320 [ 85.441929][ T4196] ? mutex_unlock+0x10/0x10 [ 85.446605][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 85.452588][ T4196] ? lock_chain_count+0x20/0x20 [ 85.457443][ T4196] ? __rwlock_init+0x140/0x140 [ 85.462203][ T4196] hci_event_packet+0xe05/0x12f0 [ 85.467147][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 85.472365][ T4196] ? rcu_lock_release+0x20/0x20 [ 85.477229][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 85.482475][ T4196] hci_rx_work+0x255/0xa10 [ 85.486902][ T4196] process_one_work+0x863/0x1000 [ 85.491861][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 85.497565][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 85.503103][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 85.508220][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 85.513608][ T4196] ? wq_worker_running+0x97/0x170 [ 85.518651][ T4196] worker_thread+0xaa8/0x12a0 [ 85.523351][ T4196] kthread+0x436/0x520 [ 85.527424][ T4196] ? rcu_lock_release+0x20/0x20 [ 85.532272][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 85.536869][ T4196] ret_from_fork+0x1f/0x30 [ 85.541362][ T4196] [ 85.546835][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.558524][ T4196] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.573653][ T4196] Bluetooth: hci1: failed to register connection device [ 85.614194][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 85.789158][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 86.694485][ T26] audit: type=1326 audit(1764591504.975:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 86.713267][ T23] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 86.725354][ T23] usb 5-1: config 0 has no interface number 0 [ 86.731839][ T23] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 86.746135][ T23] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.756202][ T23] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.956695][ T26] audit: type=1326 audit(1764591505.025:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 86.986952][ T26] audit: type=1326 audit(1764591505.025:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 87.268474][ T26] audit: type=1326 audit(1764591505.025:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 87.294102][ T23] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 87.386585][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.506591][ T23] usb 5-1: Product: syz [ 87.566706][ T23] usb 5-1: Manufacturer: syz [ 87.795886][ T23] usb 5-1: SerialNumber: syz [ 87.802724][ T26] audit: type=1326 audit(1764591505.025:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 87.879501][ T23] usb 5-1: config 0 descriptor?? [ 87.900182][ T4441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.944862][ T23] vmk80xx 5-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 87.954294][ T26] audit: type=1326 audit(1764591505.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 87.996694][ T23] vmk80xx: probe of 5-1:0.136 failed with error -22 [ 88.028935][ T26] audit: type=1326 audit(1764591505.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 88.216205][ T26] audit: type=1326 audit(1764591505.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 88.239649][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.255395][ T2343] usb 5-1: USB disconnect, device number 2 [ 88.545089][ T26] audit: type=1326 audit(1764591505.035:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 88.609006][ T23] usb 4-1: config 67 has an invalid interface number: 177 but max is 0 [ 88.766833][ T26] audit: type=1326 audit(1764591505.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704162749 code=0x7ffc0000 [ 88.804553][ T23] usb 4-1: config 67 has no interface number 0 [ 88.807811][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 88.835007][ T23] usb 4-1: config 67 interface 177 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 88.838766][ T4246] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.877838][ T23] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=eb.17 [ 88.887626][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.909241][ T4473] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.932045][ T23] usb 4-1: bad CDC descriptors [ 88.940107][ T23] usb 4-1: bad CDC descriptors [ 88.945234][ T23] cdc_acm 4-1:67.177: Zero length descriptor references [ 88.952508][ T23] cdc_acm: probe of 4-1:67.177 failed with error -22 [ 89.020800][ T4489] batman_adv: batadv0: Adding interface: dummy0 [ 89.027114][ T4489] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.055776][ T4489] batman_adv: batadv0: Interface activated: dummy0 [ 89.137754][ T23] usb 4-1: USB disconnect, device number 2 [ 89.251750][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.768830][ T4246] usb 1-1: string descriptor 0 read error: -71 [ 89.784831][ T4246] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 89.804452][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.838490][ T4246] usb 1-1: config 0 descriptor?? [ 89.887379][ T4246] usb 1-1: can't set config #0, error -71 [ 89.917390][ T4246] usb 1-1: USB disconnect, device number 2 [ 90.000528][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 90.011527][ T1324] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.184781][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 90.212489][ T4506] process 'syz.3.59' launched './file0' with NULL argv: empty string added [ 90.444762][ T4246] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 90.497749][ T7] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 90.655268][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.730399][ T7] usb 3-1: Product: syz [ 90.735191][ T7] usb 3-1: Manufacturer: syz [ 90.741385][ T7] usb 3-1: SerialNumber: syz [ 90.757189][ T7] usb 3-1: config 0 descriptor?? [ 90.779227][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.789136][ T4484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.861783][ T7] usb 3-1: ucan: probing device on interface #0 [ 90.868326][ T7] usb 3-1: ucan: invalid EP count (1) [ 90.885411][ T7] usb 3-1: ucan: probe failed; try to update the device firmware [ 92.515741][ T4226] usb 3-1: USB disconnect, device number 2 [ 92.536280][ T4246] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 92.545294][ T1324] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.558660][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.569315][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.781242][ T1324] usb 2-1: Product: syz [ 92.785593][ T1324] usb 2-1: Manufacturer: syz [ 92.790790][ T4246] usb 1-1: config 0 has no interface number 0 [ 92.797290][ T1324] usb 2-1: SerialNumber: syz [ 92.809837][ T1324] usb 2-1: config 0 descriptor?? [ 92.838967][ T1324] usb 2-1: can't set config #0, error -71 [ 92.855519][ T1324] usb 2-1: USB disconnect, device number 2 [ 92.889094][ T4246] usb 1-1: string descriptor 0 read error: -71 [ 92.897579][ T4246] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 94.500668][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.631180][ T4246] usb 1-1: config 0 descriptor?? [ 94.685793][ T4246] usb 1-1: can't set config #0, error -71 [ 95.317752][ T4246] usb 1-1: USB disconnect, device number 3 [ 96.748775][ T4295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.439818][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 97.768013][ T4295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 98.074830][ T4295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 98.145696][ T4295] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.818895][ T4295] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 100.607119][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 100.627638][ T4295] usb 1-1: Product: syz [ 100.632338][ T4295] usb 1-1: Manufacturer: syz [ 100.645338][ T4295] usb 1-1: SerialNumber: syz [ 100.814143][ T4295] usb 1-1: can't set config #1, error -71 [ 100.849340][ T4295] usb 1-1: USB disconnect, device number 4 [ 103.928803][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.978918][ T4226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.026103][ T4226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.095309][ T4226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.196429][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.514700][ T4640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.167939][ T2343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.819039][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 108.963352][ T2343] usb 2-1: Using ep0 maxpacket: 32 [ 110.180331][ T2343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.112094][ T4670] netlink: 56 bytes leftover after parsing attributes in process `syz.2.102'. [ 111.399381][ T2343] usb 2-1: string descriptor 0 read error: -71 [ 111.405659][ T2343] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 112.429854][ T4226] usb 5-1: can't set config #27, error -110 [ 112.557612][ T2343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.601836][ T2343] usb 2-1: config 0 descriptor?? [ 112.828400][ T2343] usb 2-1: can't set config #0, error -71 [ 113.570255][ T2343] usb 2-1: USB disconnect, device number 3 [ 114.148600][ T4406] usb 5-1: USB disconnect, device number 3 [ 115.849595][ T4704] Invalid ELF header magic: != ELF [ 117.218897][ T4589] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.484548][ T4733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.119'. [ 117.508900][ T4589] usb 2-1: Using ep0 maxpacket: 16 [ 117.620254][ T4246] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.640249][ T4589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.728014][ T4589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.860688][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.929190][ T4246] usb 1-1: Using ep0 maxpacket: 32 [ 117.979685][ T4589] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 118.021510][ T4589] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 118.059247][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.106925][ T4589] usb 2-1: Manufacturer: syz [ 118.112547][ T4246] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 118.136522][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.155074][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.243467][ T4589] usb 2-1: config 0 descriptor?? [ 118.295669][ T4246] usb 1-1: config 0 has no interface number 0 [ 118.368313][ T4246] usb 1-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.510740][ T4246] usb 1-1: config 0 interface 2 has no altsetting 0 [ 118.759406][ T4246] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 118.799528][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.841605][ T4589] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 118.869924][ T4246] usb 1-1: Product: syz [ 118.876757][ T4589] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 118.893141][ T4246] usb 1-1: Manufacturer: syz [ 118.937049][ T4246] usb 1-1: SerialNumber: syz [ 118.944824][ T4589] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 118.960186][ T4589] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 118.967400][ T4741] loop4: detected capacity change from 0 to 1024 [ 118.995551][ T4589] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 119.006866][ T4589] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 119.277881][ T4744] Cannot find set identified by id 65534 to match [ 120.194678][ T4246] usb 1-1: config 0 descriptor?? [ 120.741121][ T4246] usb 1-1: can't set config #0, error -71 [ 120.772365][ T4246] usb 1-1: USB disconnect, device number 5 [ 120.796891][ T4589] usb 2-1: USB disconnect, device number 4 [ 121.096429][ T4755] hfsplus: request for non-existent node 33554434 in B*Tree [ 121.104058][ T4755] hfsplus: request for non-existent node 33554434 in B*Tree [ 122.435118][ T4765] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 122.444668][ T4765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 122.454600][ T4765] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.518784][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 122.518803][ T26] audit: type=1800 audit(1764591540.715:37): pid=4765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.127" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 123.015114][ T4784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'. [ 123.179075][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.509076][ T23] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.538873][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.589823][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.618942][ T23] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.656050][ T23] usb 5-1: config 1 interface 1 has no altsetting 0 [ 124.838967][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.875976][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.906438][ T23] usb 5-1: Product: syz [ 124.927057][ T23] usb 5-1: Manufacturer: syz [ 124.954298][ T23] usb 5-1: SerialNumber: syz [ 125.009882][ T23] cdc_ncm 5-1:1.0: skipping garbage [ 125.017362][ T23] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 125.053513][ T23] cdc_ncm 5-1:1.0: bind() failure [ 125.229982][ T4227] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.519148][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 125.711034][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.958445][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.077476][ T4227] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 126.138841][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.239797][ T4227] usb 2-1: config 0 descriptor?? [ 126.256853][ T4246] usb 5-1: USB disconnect, device number 4 [ 127.290245][ T4227] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 127.571296][ T4227] usb 2-1: USB disconnect, device number 5 [ 127.587980][ T4818] loop4: detected capacity change from 0 to 1024 [ 127.970436][ T4823] hfsplus: request for non-existent node 33554434 in B*Tree [ 127.978631][ T4823] hfsplus: request for non-existent node 33554434 in B*Tree [ 129.123016][ T4830] netlink: 56 bytes leftover after parsing attributes in process `syz.4.143'. [ 132.643987][ T4858] device bridge0 entered promiscuous mode [ 132.739366][ T4858] device macsec1 entered promiscuous mode [ 132.901016][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907910][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.172697][ T4874] loop0: detected capacity change from 0 to 1024 [ 135.486385][ T4877] hfsplus: request for non-existent node 33554434 in B*Tree [ 135.493829][ T4877] hfsplus: request for non-existent node 33554434 in B*Tree [ 141.780159][ T4916] ptrace attach of "./syz-executor exec"[4917] was attempted by "./syz-executor exec"[4916] [ 143.082604][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 143.568818][ T4240] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.648747][ T1324] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 143.821818][ T4240] usb 3-1: Using ep0 maxpacket: 8 [ 143.939038][ T4240] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.015197][ T4240] usb 3-1: config 0 has no interfaces? [ 144.028963][ T1324] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.055387][ T1324] usb 1-1: config 0 has no interface number 0 [ 144.069382][ T4240] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.086286][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 144.108941][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.141041][ T1324] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 144.184510][ T4240] usb 3-1: config 0 descriptor?? [ 144.213890][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 144.275863][ T1324] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.311822][ T1324] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.331766][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.372213][ T1324] usb 1-1: config 0 descriptor?? [ 144.393935][ T4929] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.404518][ T4929] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.452670][ T1324] ldusb 1-1:0.55: Interrupt in endpoint not found [ 144.699816][ T4933] cgroup: No subsys list or none specified [ 145.455691][ T4227] usb 1-1: USB disconnect, device number 6 [ 146.510531][ T4406] usb 3-1: USB disconnect, device number 3 [ 150.384771][ T4968] comedi comedi4: comedi_config --init_data is deprecated [ 150.420709][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.060127][ T2343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.469185][ T2343] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.519337][ T2343] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.663623][ T2343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.773934][ T2343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 151.882889][ T2343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 151.972324][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.013088][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.054158][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 152.063450][ T5000] bridge: RTM_NEWNEIGH with invalid ether address [ 152.099016][ T2343] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.216806][ T2343] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.225703][ T2343] usb 2-1: Product: syz [ 152.319768][ T2343] usb 2-1: Manufacturer: syz [ 152.389445][ T2343] cdc_wdm 2-1:1.0: skipping garbage [ 152.401459][ T2343] cdc_wdm 2-1:1.0: skipping garbage [ 152.465200][ T2343] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 152.476951][ T2343] cdc_wdm 2-1:1.0: Unknown control protocol [ 152.534917][ T5008] loop4: detected capacity change from 0 to 1024 [ 153.018894][ T5001] Cannot find add_set index 0 as target [ 153.282369][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.313741][ T5008] hfsplus: request for non-existent node 33554434 in B*Tree [ 153.313792][ T5008] hfsplus: request for non-existent node 33554434 in B*Tree [ 153.378747][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 153.514492][ T4227] usb 2-1: USB disconnect, device number 6 [ 154.029191][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.362475][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.152977][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.379274][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.811477][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.910989][ T5061] loop4: detected capacity change from 0 to 1024 [ 156.976346][ T5061] hfsplus: request for non-existent node 33554434 in B*Tree [ 156.983804][ T5061] hfsplus: request for non-existent node 33554434 in B*Tree [ 157.418849][ T1324] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.708927][ T1324] usb 1-1: Using ep0 maxpacket: 32 [ 157.828872][ T1324] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 157.860833][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.621647][ T5076] tmpfs: Unknown parameter 'usrquota' [ 158.649782][ T1324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.660191][ T1324] usb 1-1: config 0 has no interface number 0 [ 158.666747][ T1324] usb 1-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.680246][ T1324] usb 1-1: config 0 interface 2 has no altsetting 0 [ 158.699995][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.899566][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.015161][ T1324] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 159.024936][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.033978][ T1324] usb 1-1: Product: syz [ 159.046581][ T1324] usb 1-1: Manufacturer: syz [ 159.051348][ T1324] usb 1-1: SerialNumber: syz [ 159.087763][ T1324] usb 1-1: config 0 descriptor?? [ 159.811052][ T1324] usb 1-1: invalid MIDI in EP 0 [ 160.622460][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.780066][ T1324] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 160.797095][ T1324] usb 1-1: USB disconnect, device number 7 [ 161.073439][ T4542] udevd[4542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.849833][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.395526][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.460243][ T4330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.630367][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.499208][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.111391][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.001541][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.311775][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.613653][ T5182] netlink: 56 bytes leftover after parsing attributes in process `syz.2.234'. [ 168.337352][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.349927][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.430415][ T5184] batman_adv: batadv0: Adding interface: dummy0 [ 168.436929][ T5184] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.469001][ T5184] batman_adv: batadv0: Interface activated: dummy0 [ 168.498793][ T4226] Bluetooth: hci5: command 0x1003 tx timeout [ 168.505059][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 169.380091][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.718903][ T4190] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 169.938786][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 170.269435][ T4190] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.358912][ T4190] usb 4-1: config 1 has an invalid interface number: 181 but max is 0 [ 170.438831][ T4190] usb 4-1: config 1 has no interface number 0 [ 170.449469][ T4190] usb 4-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 170.460844][ T4190] usb 4-1: config 1 interface 181 has no altsetting 0 [ 170.476143][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.870192][ T4226] Bluetooth: hci5: command 0x1001 tx timeout [ 170.878825][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 171.008890][ T4190] usb 4-1: string descriptor 0 read error: -22 [ 171.128890][ T4190] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 171.138007][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.664629][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.812376][ T5227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.247'. [ 172.898814][ T2343] Bluetooth: hci5: command 0x1009 tx timeout [ 172.964630][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.998909][ T4190] usb 4-1: can't set config #1, error -71 [ 173.022997][ T4190] usb 4-1: USB disconnect, device number 3 [ 173.231642][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.925784][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.980078][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.557018][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.415472][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.702623][ T5274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.262'. [ 177.808150][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.087016][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.378813][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 178.398906][ T4406] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.498972][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.849948][ T4406] usb 1-1: Using ep0 maxpacket: 8 [ 178.869477][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.891199][ T5299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.995176][ T5299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 179.325318][ T23] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 179.334677][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.375771][ T23] usb 4-1: Product: syz [ 179.381116][ T23] usb 4-1: Manufacturer: syz [ 179.386950][ T23] usb 4-1: SerialNumber: syz [ 179.460500][ T23] usb 4-1: config 0 descriptor?? [ 179.547083][ T23] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 179.659778][ T4406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.764248][ T4406] usb 1-1: config 0 has no interfaces? [ 179.778423][ T4406] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 179.820017][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.850809][ T4406] usb 1-1: config 0 descriptor?? [ 179.866177][ T5303] kvm: pic: single mode not supported [ 179.866242][ T5303] kvm: pic: single mode not supported [ 179.873391][ T5303] kvm: pic: non byte read [ 179.956127][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.963333][ T5307] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.420831][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.553567][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.692687][ T5317] loop7: detected capacity change from 0 to 7 [ 181.788496][ T4246] usb 4-1: USB disconnect, device number 4 [ 181.836550][ T5320] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 181.876504][ T5317] Dev loop7: unable to read RDB block 7 [ 181.905345][ T5317] loop7: unable to read partition table [ 181.915710][ T5317] loop7: partition table beyond EOD, truncated [ 181.938901][ T5317] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 182.003561][ T3561] Dev loop7: unable to read RDB block 7 [ 182.017159][ T3561] loop7: unable to read partition table [ 182.027509][ T3561] loop7: partition table beyond EOD, truncated [ 182.579480][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.693745][ T1107] usb 1-1: USB disconnect, device number 8 [ 182.828903][ T4246] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.887803][ T5319] ODEBUG: Out of memory. ODEBUG disabled [ 183.128489][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.551419][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.559843][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.949158][ T4246] usb 5-1: device not accepting address 5, error -71 [ 185.994103][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.388742][ T5354] Cannot find set identified by id 65534 to match [ 187.160972][ T4406] Bluetooth: hci2: command 0x0406 tx timeout [ 187.652068][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.661359][ T4406] Bluetooth: hci1: command 0x0406 tx timeout [ 187.804554][ T26] audit: type=1326 audit(1764591606.085:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee8f19749 code=0x7ffc0000 [ 187.835591][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.846400][ T4406] Bluetooth: hci0: command 0x0406 tx timeout [ 187.879883][ T4406] Bluetooth: hci4: command 0x0406 tx timeout [ 187.903140][ T26] audit: type=1326 audit(1764591606.115:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee8f19749 code=0x7ffc0000 [ 187.912821][ T4406] Bluetooth: hci3: command 0x0406 tx timeout [ 188.003924][ T26] audit: type=1326 audit(1764591606.115:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee8f1b667 code=0x7ffc0000 [ 188.036872][ T26] audit: type=1326 audit(1764591606.115:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1ee8f1b5dc code=0x7ffc0000 [ 188.218515][ T5371] Unsupported ieee802154 address type: 0 [ 188.257820][ T26] audit: type=1326 audit(1764591606.115:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1ee8f1b514 code=0x7ffc0000 [ 188.342284][ T26] audit: type=1326 audit(1764591606.115:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1ee8f1b514 code=0x7ffc0000 [ 188.402438][ T5373] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.427366][ T26] audit: type=1326 audit(1764591606.115:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1ee8f183aa code=0x7ffc0000 [ 188.461853][ T5373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.469697][ T5373] IPv6: NLM_F_CREATE should be set when creating new route [ 188.492690][ T26] audit: type=1326 audit(1764591606.115:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee8f19749 code=0x7ffc0000 [ 188.631841][ T26] audit: type=1326 audit(1764591606.115:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee8f19749 code=0x7ffc0000 [ 189.459380][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.970492][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.406985][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.301118][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.324896][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.051298][ T5408] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.090185][ T5408] (syz.3.300,5408,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 194.162318][ T5408] (syz.3.300,5408,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 194.174313][ T5408] (syz.3.300,5408,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 194.188740][ T5408] (syz.3.300,5408,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 194.341765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.351710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.352072][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369623][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419034][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.697223][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.093932][ T5431] hub 6-0:1.0: USB hub found [ 196.100611][ T5431] hub 6-0:1.0: 1 port detected [ 196.880635][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.122780][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.630243][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.908743][ T4295] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.140164][ T2343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.344892][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.369722][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.386999][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.399481][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.409817][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.559448][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 200.721807][ T4295] usb 1-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 200.781799][ T4295] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 200.891594][ T4295] usb 1-1: string descriptor 0 read error: -71 [ 200.915125][ T4295] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.182023][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.398787][ T4295] usb 1-1: can't set config #4, error -71 [ 201.416591][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 201.632463][ T4295] usb 1-1: USB disconnect, device number 9 [ 201.684624][ T4190] net_ratelimit: 1 callbacks suppressed [ 201.684644][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.892758][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.533554][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.497395][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.836159][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.584045][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.915508][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.949275][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.965105][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.581115][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.750656][ T2343] Bluetooth: hci1: command 0x0406 tx timeout [ 206.758000][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.780475][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.383995][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.821139][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.827265][ T5526] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 208.909043][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.748462][ T13] usb 2-1: config 0 has no interfaces? [ 209.754125][ T13] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 209.763414][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.774079][ T13] usb 2-1: config 0 descriptor?? [ 209.795774][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.859079][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.040711][ T5517] Bluetooth: hci0: invalid len left 7, exp >= 72 [ 210.069924][ T1107] usb 2-1: USB disconnect, device number 7 [ 210.899217][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.022214][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.043001][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.053808][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.063797][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.238876][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.715639][ T5560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.724698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.754194][ T5560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.774884][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.784098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.799306][ T5561] syz.2.345 (5561): drop_caches: 0 [ 212.812117][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.445052][ T4330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.499097][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.561922][ T4246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.718836][ T1324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.538930][ T4190] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 216.289100][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.308731][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 216.323976][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.359299][ T4190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.447738][ T5593] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 216.455354][ T5593] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 216.462253][ T5593] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 216.468896][ T5593] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 216.476217][ T5593] comedi comedi3: 8255: I/O port conflict (0xf,4) [ 216.482935][ T5593] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 216.489519][ T5593] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 216.497675][ T5593] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 216.504548][ T5593] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 216.512972][ T5593] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 216.521442][ T5593] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 216.529435][ T5593] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 216.536210][ T5593] comedi comedi3: 8255: I/O port conflict (0x1a449,4) [ 216.543499][ T5593] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 216.550427][ T5593] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 216.558515][ T5593] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 216.565470][ T5593] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 216.572720][ T5593] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 216.580147][ T5593] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 216.587172][ T5593] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 216.594148][ T5593] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 216.601038][ T5593] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 216.607765][ T5593] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 216.685225][ T4190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.782811][ T4190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.921088][ T4190] usb 4-1: config 0 descriptor?? [ 217.255047][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 217.265333][ T4406] net_ratelimit: 3 callbacks suppressed [ 217.265349][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.288789][ T1324] usb 2-1: can't read configurations, error -71 [ 217.304097][ T4406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.361252][ T5602] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.845859][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.907391][ T5608] loop0: detected capacity change from 0 to 512 [ 217.930132][ T5608] EXT4-fs (loop0): Ignoring removed oldalloc option [ 217.967328][ T5607] input: syz1 as /devices/virtual/input/input5 [ 217.975429][ T5608] EXT4-fs (loop0): 1 truncate cleaned up [ 217.981779][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 218.141372][ T4190] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 336.148579][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 336.155311][ C0] rcu: 0-...!: (1 GPs behind) idle=057/1/0x4000000000000000 softirq=11983/11989 fqs=150 [ 336.166378][ C0] (t=10502 jiffies g=15469 q=367) [ 336.171598][ C0] rcu: rcu_preempt kthread starved for 10203 jiffies! g15469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 336.182779][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 336.192850][ C0] rcu: RCU grace-period kthread stack dump: [ 336.198745][ C0] task:rcu_preempt state:R running task stack:27904 pid: 15 ppid: 2 flags:0x00004000 [ 336.209703][ C0] Call Trace: [ 336.213014][ C0] [ 336.215946][ C0] __schedule+0x11bb/0x4390 [ 336.220462][ C0] ? release_firmware_map_entry+0x190/0x190 [ 336.226360][ C0] schedule+0x11b/0x1e0 [ 336.230509][ C0] schedule_timeout+0x15c/0x280 [ 336.235359][ C0] ? console_conditional_schedule+0x40/0x40 [ 336.241238][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 336.247171][ C0] ? update_process_times+0x200/0x200 [ 336.252755][ C0] ? prepare_to_swait_event+0x331/0x350 [ 336.258328][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 336.263345][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 336.269677][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 336.274435][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 336.279730][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 336.284920][ C0] rcu_gp_kthread+0x98/0x350 [ 336.289595][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 336.294809][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 336.300690][ C0] ? __kthread_parkme+0x157/0x1b0 [ 336.305705][ C0] kthread+0x436/0x520 [ 336.309786][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 336.314972][ C0] ? kthread_blkcg+0xd0/0xd0 [ 336.319547][ C0] ret_from_fork+0x1f/0x30 [ 336.324413][ C0] [ 336.327418][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 336.333899][ C0] Sending NMI from CPU 0 to CPUs 1: [ 336.339104][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 336.340090][ C0] NMI backtrace for cpu 0 [ 336.352349][ C0] CPU: 0 PID: 5608 Comm: syz.0.363 Not tainted syzkaller #0 [ 336.359617][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.369665][ C0] Call Trace: [ 336.372944][ C0] [ 336.375775][ C0] dump_stack_lvl+0x168/0x230 [ 336.380463][ C0] ? show_regs_print_info+0x20/0x20 [ 336.385681][ C0] ? load_image+0x3b0/0x3b0 [ 336.390266][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 336.395472][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 336.400431][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 336.406684][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 336.412049][ C0] ? _raw_spin_lock+0x40/0x40 [ 336.416712][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 336.422778][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 336.428750][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 336.433937][ C0] print_cpu_stall+0x31d/0x5f0 [ 336.438702][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 336.443983][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 336.448829][ C0] ? account_process_tick+0x227/0x3a0 [ 336.454275][ C0] update_process_times+0x193/0x200 [ 336.459462][ C0] tick_sched_timer+0x37d/0x560 [ 336.464405][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 336.469604][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 336.475230][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 336.480366][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 336.486550][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 336.491541][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 336.497530][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 336.503236][ C0] [ 336.506154][ C0] [ 336.509165][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.515478][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x70 [ 336.521979][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 3d f6 ff ff eb 31 eb 35 e8 e4 72 d4 f7 e8 df 70 d4 f7 fb 65 48 8b 05 a6 f6 58 76 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 91 b4 bc f7 48 [ 336.542091][ C0] RSP: 0018:ffffc900035eff08 EFLAGS: 00000286 [ 336.548245][ C0] RAX: ffff888072f63b80 RBX: 0000000000000027 RCX: 0f1ae4d1229f7d00 [ 336.556527][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580 [ 336.564580][ C0] RBP: ffffc900035eff48 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 336.572544][ C0] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: 0000000000000000 [ 336.580676][ C0] R13: 0000000000000000 R14: ffffc900035eff58 R15: 0000000000000000 [ 336.588952][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 336.594852][ C0] do_syscall_64+0x24/0xa0 [ 336.599452][ C0] ? clear_bhb_loop+0x30/0x80 [ 336.604326][ C0] ? clear_bhb_loop+0x30/0x80 [ 336.609047][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.614962][ C0] RIP: 0033:0x7f07041595e7 [ 336.619377][ C0] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d b2 62 d9 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 23 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 336.639248][ C0] RSP: 002b:00007f07023c8a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 336.647670][ C0] RAX: ffffffffffffffda RBX: 00007f07023c8bb0 RCX: 00007f07041595e7 [ 336.655906][ C0] RDX: 00007f07023c8a80 RSI: 00007f07023c8bb0 RDI: 0000000000000021 [ 336.664247][ C0] RBP: 0000000000000000 R08: 0040000000000007 R09: 0000000000000009 [ 336.672314][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.680309][ C0] R13: 00007f07043b9038 R14: 00007f07043b8fa0 R15: 00007ffee4c490e8 [ 336.688668][ C0] [ 336.694978][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.701616][ T1421] ieee802154 phy1 wpan1: encryption failed: -22