last executing test programs: 14.680575614s ago: executing program 1 (id=933): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) prlimit64(0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18bc4ae264000000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 10.531890153s ago: executing program 0 (id=948): mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xd7e253cdbc2c83fc, 0x0) 10.252659366s ago: executing program 0 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 9.992289227s ago: executing program 0 (id=951): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000500), &(0x7f0000000540)={[&(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)='\x00', &(0x7f0000000080)='GPL\x00', &(0x7f0000000580)='&^{\\&\x00']}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.659135651s ago: executing program 0 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711024"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 9.578864815s ago: executing program 1 (id=953): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r3) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r7, 0x0, 0x203e17d0) 8.370895457s ago: executing program 1 (id=955): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e00000000000000070000000500061c00000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100000004d4008100e7ff00000005000500000000000a"], 0x70}, 0x1, 0x400000000000000}, 0x0) 6.880452802s ago: executing program 1 (id=959): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 6.708939129s ago: executing program 2 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 6.700211419s ago: executing program 3 (id=962): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r7, 0x0, 0x203e17d0) 6.594320234s ago: executing program 2 (id=963): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000001000)=[{0x6, 0xe9, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(r3, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=[@cred={{0x18, 0x1, 0x2, {0x0, r4, r5}}}], 0x18, 0x20000084}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0xa4b9, 0x23, 0x0, 0x56) openat$kvm(0xffffffffffffff9c, 0x0, 0x65ebc2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000010c0)={0x80000000, 0x8000, 0x7}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="b4237df6f0c80033a2ac1c4d7122fc85ea9e9c292985470db1d5ecc7c12cca4db8c86800a935dd5fe48efbd66216a7d9ba362e80e6332a523d05ee0c722d2c6d7a5c6056d4457cb0752a27791e6e4ffafd854c47cad6d30205a6b30282a23df8df3fed5e633c763bd6917c9d799cfdd399d5132f713fc47db329bfdda56ab8bb04d7edf4788eb382794bc51fc3e1ea34aed48b66ddf5b0dc702d4e37039e657ba46d588b80cda0936892b40285e1f4f0bcaa5fe3241dad9eb5ce18bcd538f4aef0089d2bcde821f5292db28fdd6ad5deed8bfc9c9c09073a0bef2ce71d5ac4941ba9378dff03172f495e5d83c2e72eebf6898b232fde5cadf3c022659f65e2706a28a252148843640b759e897932fa4ea8be19062d5f775335e517cc4a97dbdd2cb01dda4a50c22b16ed195f55a048af130caa2bb9a251d58720dfdd37ff2991dd8e43146e1305b31953a2d0281254997ecb8a493eb892dda715e24ad4fd0b8f44d772943848bacfcf582b5fdf75712e60d307d95902c9ac78b80bcc270494e4708e1596e9ff83339e493cb02693eca765b0dbba139b1c24d8c32a37dc7bfa01ddce065b9c17e5340f5cf52abf81722eda45bcacf749f712e85f737b06d2515dc62484248b9518b550cc1e25754ebd21773cba092968ea477825260a44a933bfd43c1e0a414ce3c78f893194338aef575c72110636a94624b0a37c46625f40d82734f9ee83a87e9b3264a2dea8d9880e29d79e65d1c190b89e9708969ee2517f4a4d6b3274b8863d5327cf529f9f79f2d30aeaddae9fced63ae7455e44513d81d964649050fb22157a74b70972447d69cd0446ab429e924d29e2cbfc51250d09bcfcc17a113fec3489c462546dd082f62de0009c197f566ca4bc20ec8caac32af7c8d4b10f3761ae3b738f6ee3cedd4e1a9f0efcca1351c0388c55afde53016703c607b0008f4c914fff3c49a52c76f7862a16d032701aebdac25e78ccfd7a526dc8a420e86d84cea364fced1703a6eb33d953f5644f12ccde0faac48f2d0ac1f965313298dceb63933d44eaec2edee1935fa3fbfff12853f5ddc03533990693c4b5fd92d4d73cafb665a50228574ffd8287171e0c304734694a2177169d877917c6026b4ef3b7bae55027e50174c13e0a47ea083b7cf3922c800eecad6333949b0b97eae1c5cf1734976b0846733c340b6487936eaca916d69cd9576e55b4e79170565a3486029dc2c86b442f4b74b5c7d603eeda8992211aa091acec48aeafa64bbb4becdbab6c5abe1c768dd459d637a1f48e54600ce9ce1b51c66e0c5fbbdc5db37d10cfc66b14da5d7ec232ec80328e0f4568926df3a7314a1046b1bbbbcff8be4e19ec3fea4305223eed3e2cda2675a1fe22b21afc87ae3023f1abe7177a49703cf5e782b0151bc0d1587bd56f72d52044ceb401c326be742066e62fbbb09abb3f13e52638b0eb087fb7a6c8e1d98161f5dbcbe9240e2ae0abd57ab4162106aba3b424e59800887096c6d4bffeb5d1d02cd4383a2fdf0c5b6b8f3434957b28522b541e44831b5e1542779cba9007ac11cd9427ea80bab1decd68874b636804530b3ced48dc7a787a8230f764ddbf2fd6281cc53ea034cb5e0a2680cabe03330878a760c6e649e9f3304b653a82b991286aebbbb2e654a01d61c7ca56323b9b3244897676875d8524c40aeb752dbf2309f61ba21df04edfd7afa4cf3ba97cf309218554c7f6b80986b7e1c9a7e89cd095d8ce6f59e3a664f2aee8b06924a3fa26b03584605670161d14f1cffa02b688453b5047a8bb3d6bca9e2459e2d935798520d41a4550c263071a4cdcdeb6e6c66aedaf2dd001fb0f63d57d31f836a97ea14963609a8d890b17f7af7c66e7ef75fc0ff2c6f0c4a7ab4dffc4d095b864e6046809bf9bcd6d24f6479a6e16c8f51e23511d7c723961db9348dc7d2f7f45053ee5a4d0d7a1e55fb40725b785ceea80235f3b8421b2269cef9120b7707ba4c29b241bd37f23f15bb15f7fe8bfd406ed3b43f49bf3f36757d6a0937ffad58d517c0930bbd2e77dbfa863d403ff6197c32fa0f1328c4c2337dc9319bfd3079d167e3d7c1e3fdfb8b92306fa1885038080e2e3aa1876e19749b672ff90794d33571c82b479dcb3a2c2da80834287a0c598887a11426e2e71c2dd8b20518ad6606906550a17b3bc969be98cd111d9156745bfedb2410eec820c744ecb0897aeafa41583daee1814071d4d5114a90c1eab4a7cc4fb7d5d223cb92e09a39793e03060b2f2f6757705df687ca57b9a40088d842bd21c0a83c28be1455c2dca2ac762b05d363743b52225695b4befa45e0901a6fb1ab18ef5e5cbc60a8981d9cea6d59623d783211c223b9733b665dfb6254d75ee705c56035f2f4cc64193b37d3afd58199062391e0e517d994d3d4e0f02829f1f10311a3b8c995c8d10ea20666766eace6b8e390e07c49eba0d8a7e9d9237733e9a03babf73ab16c44a86c5d7883689f8894471ffbfcb8a7902d8391233df5cc2073d665f3054bf23a14ad975c23bf8dc11f187c9ccb49686e776967e4afa6a6022f82807019c6e4a8e5c0dbb5608706744427a37c6f608c4561772f0337e447ce4f233d2be78facc36027dceb019d2fab2495cd4ce3959ce20d99d994a69769b023a9e31b471a907a1fe5e73768113a4ffed625a452593fc92380c80108dcc9d0c640844b031883fd97ce7db0887a3f05e7b4c1b7ef0e3beba06e8c1be1cd2a6169e74e5c4cd8897f787fb971b0c51ddf730f8237084259361afaa7b735820aa360dd4737feae5c675ca6dcd5408c185c3e108bb21ec4d63b2c86fee51e88a4a09efafec35a3b430dac4faf94254d298596e83deb0ce5d764332459ade7672cdec2537646616a12b0d81d30f9f845b65f2c20f4dddf0fc22f8a4493b0c856b99cd447dd4ec03912aa0a7499d1c6078a7dc403707bfbbc07445a6e1103bd6ea54115cb85ccf10ad7bc3e691c0248b9bc6315dcee77481537a4f78891d9348a14d0cf4b78a469016e4ee726474fab470cca619ed5bc7505a36d8b3d873dabc40005740fc4fdc5299e1c79acfba2fb5a34f77fb7c1d4bcd7fda5383890686520467ecdcd96e58381fed615199c8f21ecec49d8b157ac42c4a2d1292c703259f3724fa01b3bbaf52c982c12bd971dd23b657e279c2f798e94631b51a2976cffb03db3652d6ee87e8f7d7e58c9616c4e80b61cd2a0bd227cdd76a96b97b2047b74343f5af72e20efd959e0af6b080973790022f254346b6e4b0ee685b91d6913fa36b970cfe9ce63a7e0d0d180bb1a1f754d627075385988bbd9eb41e44dcd58f9e13ab9700abb3d67f0afb0b7d6a47c5ce7499835b7827598ab053fdf9c4a0804da20497bdff3b34a4f4c529ed4c598c25b33e93bd833fdc17fd5a85f0ae6e641492c4ce20eef7359ae892e66e2e7c4b238443d278c346e517f0f93a8b033974328742abce3b964599b5dcd0513a20594db6b148b0a7a7b10640c6ffebe43269bad0fe3cbdcaeb6e33eb2b71053e85384436125c5cf9e0434e5cbaceaceaffa9c1c2bbeabe722820281fae9df531fd72eb6157836e55df6ba6b1ddcd4d5533968e2100420fcf9faf64cff19151962c99943a73edd3e3663490f64db47123d8b8e2c60f0499c3319caa26b9d529e6de52c4674ca0c82089349e30d67d075d9a2b415dc6d7f389294dbb9763af188631a728f8812e76b17a104cc33d41a55be1b992bb99d1e7c28fc8859732270d9948fbe63f6513e59bf038579d990e64fad2c425f3f8bc67aa87d006b8a5a4230c0ee70cf1d3fcd6e0a9b7aae08f73f6aa0467a035e0fb2e47d3f360dad68afbaf8ed43b63e5119242bce9c0e92e65eee583c2a659aa68d3f638be95f5b22a74e598a23560eaeb97851a46a40c9f04e4e0fac5399b770eac394c7a2416f78a88dc9fa2f839be38070a3fa8fb7ca337a37c8401d9d83e30f2c68dfe58080377964073015b2cad16bcd4fceadd7661b995773663bd8e3c26a8833530b6522227264f478e0fc440d1fb31ad78cd6041e24bf8e2e12efaba238e4f08800b83bc6c94cb45a68d0f88d2a91b5600b75151dfcf5f3d74ea1da8f41085ae0fae56b9eec13d9371bcc1e1dd189da63fb7edf3c3fd9ed8ec677e4c64b0ccd66e4565b5a5c005f1269b4cfa4c420035456ebbd6e980f89cadfab788d3a789b729c2a6eb0ddd3d70d3db39b83c7356a15da4b4d8cf4e9b30dc773ffaa310ce7761dd85121cb24771a875e5ed67ec12d350bcf07aa2d9e34aac34fa2e0bda8fbab52f37f20d32602b1e4a7c6df0d1f21e636a1d50828dc251d12a3be48c739e50d95dd74df472c4d6d1b88a20eed79a78943e1f08ee5bc8a92dd159686ae0a7432fd509e766f71bb07a9acfeb981f89c7848d7020cf1125f80951cbafff432452d6987bfd3614496ace43857e28786ebaae32e9500ac1c761d4c78e5198a249cbbacfa9e3a276fcf8d2af5d0a7cd777b93e06fc0b2b129af57537cbc67aa1493a516670c31caadcf19c54b31e14843900749f1be2bc025b3132846223eed56b4df1dcd16bef70b19fc4a67ce5ff84219a03ec00e79169bef7028e750b9ffe021e26f5d6dce5699796171cdd53e03f0106cefe77947616840c969b6ea2551273e2d90861949dafe7ca569d07f605eb83476596beabe9b837c8cc532b789c38a5e67e3d41a74c321c978c34104c77cf308710c28c3d3bd9f6867d2b62f3f3e510580d89f14a7cd4f46ade8ebb4500effbeee73c740dcc46f2e1e91612de97d16b03eb9b84fba9abb0c8f1421004b70983cc4d523bb3a1b3984b44a681b570ef066d13b63560e64a35c8bc0075a40d6c9e33a8313162791aac60b660eb84b3000da870902923317a59290539789dc1ab4ec107b1a8520f148cbd20970ed7ad648cb90cf75c8877884801bf410c34cd092c6c05432eb03b4ead258ae14e70f6843331485aa6eea9cefc30b3c46f53233da442d514e89ad9844183fd95684104ad15704b33b41c557c08aaa7e396bae45548b85195df4a14964c95c40e26db9e8ea2ac0a0b82cb8827280aa3060c67ecf2d9028a331611f5e763f80ecc2fb35c4546926595d5a8ef834b9efc6218cadf06b86014fe0494235f1ea19fd9bcc71f8faab11d1f2f823f2d72102b668302af8af0ce6e08ec07886bfc81f32c279c7855595d2a249f2f2565896a03cfc6708d0a679bac32bf23bcaef3639a1668e085b5afce09b219975a94ca26fa864c84a43dc79136e1b1f8355773637ad0e877e1e6fd255982afdf67597e5a01a51537501b1f3bebf548664a3fe91dc94d92a4d716d5e63cae27d02637477fd5e8eccb476e3d71384566d10143c371677f8aeaf46d78f6a946d80444b576ddd8b1b47dc63dae8a0f6716701eb0ae3a2e0906859050a33a952200cebac636113b40f42560c029a6990af31334471e2b981911ac66ef1100f8610ffb7a8d7e7a14ec200ff35e4c1490dc294cbf738fe13a6a056edc53e892687592a2430b29753fa7d0c2b2a3d71047dbca183b76f53f6457de203b55716f0cafb03839a40389b603789f6ba8dc6a20b761db091beb069666c2ba569d6375259d7d3bf8b119d2f1565b68d081a4970b7ebfe6de4c75b43c0d64e3561040b22cbadc5aa3e61f65a58ad49f8065b34a7795365092ffa4c200835b8626568932f221562fb18008a61d3ef2a01175497e186d11a1ebd397fde0c06da0cb5517ad026169974c5a6cc9aae01c4c95432f7fa75199e719d0739675e68861e153f7ba816bef8df867b16d"], 0x17) 5.555445949s ago: executing program 4 (id=965): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="00230b40afc918", 0x7}}, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 5.472352243s ago: executing program 3 (id=966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1d, 0x4, @loopback, 0x40}, 0x1c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x8a1, 0x96, 0x0, 0x2, 0xd59f83, 0x19ef, 0x6, 0x9, 0xffffffff, 0x4, 0x20027ff, 0x2880, 0x2, 0xbb5, 0xf, 0x8, {0x8}, 0xd0, 0x9}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) process_mrelease(0xffffffffffffffff, 0x0) 5.464839743s ago: executing program 2 (id=967): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) 4.405365439s ago: executing program 0 (id=968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1001}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x10a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000001540)='\t'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 4.345523332s ago: executing program 1 (id=969): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x404a00) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x2010, r4, 0xc000) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x5000) sendfile(r5, r5, 0x0, 0x200900) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580), 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x123, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1c08004721011500650000030690780a0101020a010102070735ffffffff004e224e2366a6c4f6d4be922ce33feca4cc58ee", @ANYRES32=r6, @ANYRES32=0x41424344, @ANYBLOB="b1c20005907800090303000112ff9a30062b66ab5f75734e0d07e2adcd0000009adf2a114220672dc82836a297895147cdcf71d522eea1e7aee5615c30cfa60c757358d824495f6266eb6482627be871ceda340596c391c94a00f81c39ba8380b7813419c91ef9cb8ae49ac64cdde251627ce9ebd04dcd7b935da4dd342f2f572cffa8b7496acd8a13f1873ddc4d939e30eb9cdc0ea5bfbf437f503663a807828a24ef21f960915adb9fcb282d81739bddafb36ae3a899010b21c6025ab423e048131b6401ebe05bb15bdef159c88158ced9fa8ba1155e29cd1652b6887042"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 4.332785752s ago: executing program 2 (id=970): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002240)={0x3}) write$FUSE_NOTIFY_RESEND(r4, &(0x7f00000027c0)={0x14}, 0x14) r6 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.092483112s ago: executing program 4 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 4.008807116s ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080050) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 3.519726847s ago: executing program 4 (id=973): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x808, 0xa416}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000003c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f19233764796e2c64796e2c6c6f636b3d6c6f63616c2c64796e2c00"/38]) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x2c, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) 2.365029367s ago: executing program 2 (id=974): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) 857.891363ms ago: executing program 4 (id=975): ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 624.831483ms ago: executing program 3 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000b00)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0xd4c, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@dstopts={0x5c, 0x1a5, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x61, 0xcfd, "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"}]}], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) 558.491366ms ago: executing program 2 (id=977): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000001000)=[{0x6, 0xe9, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) sendmmsg$unix(r3, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=[@cred={{0x18, 0x1, 0x2, {0x0, r4, r5}}}], 0x18, 0x20000084}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0xa4b9, 0x23, 0x0, 0x56) openat$kvm(0xffffffffffffff9c, 0x0, 0x65ebc2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000010c0)={0x80000000, 0x8000, 0x7}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x17) 523.096627ms ago: executing program 4 (id=978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x403, 0x4) 395.105003ms ago: executing program 1 (id=979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/221, 0x26, 0xdd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/104, 0x68}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, 0x0, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) socket$pptp(0x18, 0x1, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1}) 380.443783ms ago: executing program 3 (id=980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) 296.827317ms ago: executing program 4 (id=981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="00230b40afc918", 0x7}}, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 220.25331ms ago: executing program 3 (id=982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1001}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x10a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000001540)='\t'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=983): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, 0x0, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b0474f1800000000000000000a00000000000071120b00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) kernel console output (not intermixed with test programs): 61.451893][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.458878][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.485385][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.497479][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.504637][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.531252][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.560201][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.567275][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.593783][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.605114][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.612151][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.638656][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.663529][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.670735][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.697302][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.710673][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.718773][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.745251][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.794572][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.801956][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.828130][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.840817][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.847786][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.873831][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.890451][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 61.893972][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 61.905533][ T4272] device hsr_slave_0 entered promiscuous mode [ 61.912361][ T4272] device hsr_slave_1 entered promiscuous mode [ 61.919059][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.926948][ T4272] Cannot create hsr debugfs directory [ 61.970083][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 61.970100][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 61.970286][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 62.000239][ T4271] device hsr_slave_0 entered promiscuous mode [ 62.007257][ T4271] device hsr_slave_1 entered promiscuous mode [ 62.014429][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.022268][ T4271] Cannot create hsr debugfs directory [ 62.033801][ T4260] device hsr_slave_0 entered promiscuous mode [ 62.040887][ T4260] device hsr_slave_1 entered promiscuous mode [ 62.047330][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.055075][ T4260] Cannot create hsr debugfs directory [ 62.101257][ T4268] device hsr_slave_0 entered promiscuous mode [ 62.108100][ T4268] device hsr_slave_1 entered promiscuous mode [ 62.115168][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.123029][ T4268] Cannot create hsr debugfs directory [ 62.423448][ T4263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.434826][ T4263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.444695][ T4263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.456020][ T4263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.526445][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.539015][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.563572][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.572203][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.638129][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.659446][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.692067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.702728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.711152][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.723051][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.735622][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.757070][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.766872][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.777257][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.784507][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.793707][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.822035][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.830630][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.839467][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.848101][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.855190][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.864691][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.877690][ T4260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.902544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.914923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.925777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.937183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.946653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.957200][ T4260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.985378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.993780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.002763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.014442][ T4260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.023483][ T4260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.037501][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.047925][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.057514][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.096447][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.128006][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.147845][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.159339][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.190587][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.213117][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.225317][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.243147][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.258913][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.266116][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.288681][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.301129][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.313641][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.393535][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.408657][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.419228][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.426457][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.453175][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.474215][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.518660][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.526966][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.535255][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.543969][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.551803][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.559371][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.578078][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.603509][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.613249][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.622249][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.631506][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.640968][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.649535][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.659285][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.666451][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.674248][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.682601][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.715199][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.724471][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.735277][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.744196][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.751397][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.759194][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.768975][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.777456][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.785748][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.803439][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.815577][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.836107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.845843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.862321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.870995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.884202][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.899205][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.913142][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.928282][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.945107][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.960288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.970069][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 63.975134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.980062][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 63.986047][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.997496][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.028220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.037578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.047799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.057261][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 64.057272][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 64.061374][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 64.066011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.084968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.094372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.102497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.139224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.152034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.161905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.172285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.181000][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.188309][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.196223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.205932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.215392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.226717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.244370][ T4263] device veth0_vlan entered promiscuous mode [ 64.259807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.273546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.286882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.303663][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.314845][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.338072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.349016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.366515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.378072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.393670][ T4263] device veth1_vlan entered promiscuous mode [ 64.420708][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.436147][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.448226][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.459802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.468121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.482985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.496123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.546648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.555457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.565765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.575258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.585201][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.592399][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.606970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.616246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.624828][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.631907][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.641151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.652204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.678801][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.692720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.711221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.727030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.736393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.752652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.778346][ T4263] device veth0_macvtap entered promiscuous mode [ 64.803751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.814564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.833441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.847124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.864059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.874640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.897119][ T4263] device veth1_macvtap entered promiscuous mode [ 64.921561][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.938694][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.949125][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.976372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.985638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.012016][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.020854][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.044571][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.056315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.073026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.087121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.096091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.113062][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.133878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.144187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.172286][ T4263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.190042][ T4263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199158][ T4263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.216709][ T4263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.237507][ T4272] device veth0_vlan entered promiscuous mode [ 65.245852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.263483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.280507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.288931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.304681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.316215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.364558][ T4272] device veth1_vlan entered promiscuous mode [ 65.377507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.387536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.395164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.408231][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.515936][ T4268] device veth0_vlan entered promiscuous mode [ 65.523799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.534238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.563295][ T4272] device veth0_macvtap entered promiscuous mode [ 65.581642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.592371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.602028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.611478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.631036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.669516][ T4272] device veth1_macvtap entered promiscuous mode [ 65.703815][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.711996][ T4268] device veth1_vlan entered promiscuous mode [ 65.724457][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.767292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.776966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.792504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.805760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.817837][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.829614][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.844772][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.867383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.877494][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.887435][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.892753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.908992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.918142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.933443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.962892][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.979560][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.993739][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.018592][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.028473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.043225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.053177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.061721][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 66.061730][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 66.076200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.097407][ T4268] device veth0_macvtap entered promiscuous mode [ 66.117431][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.131341][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 66.137514][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 66.143980][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 66.144056][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.200389][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.209256][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.244031][ T4268] device veth1_macvtap entered promiscuous mode [ 66.278588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.294451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.307653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.384731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.479925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.488954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.497430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.505993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.514524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.523118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.531576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.540013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.548613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.557367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.632496][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.674671][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.853780][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.885505][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.031125][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.115578][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.156435][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.191813][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.262643][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.284649][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.312021][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.335359][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.348770][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.366742][ T4271] device veth0_vlan entered promiscuous mode [ 67.388426][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.411490][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.451199][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.462471][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.474278][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.486817][ T4260] device veth0_vlan entered promiscuous mode [ 67.496354][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.507955][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.518280][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.527302][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.536307][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.546471][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.571365][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.582673][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593161][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.602217][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.624689][ T4271] device veth1_vlan entered promiscuous mode [ 67.653627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.713671][ T4260] device veth1_vlan entered promiscuous mode [ 67.734204][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.776717][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.881791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.897590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.929442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.958908][ T4260] device veth0_macvtap entered promiscuous mode [ 67.966692][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.989255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.001133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.014728][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.025114][ T4271] device veth0_macvtap entered promiscuous mode [ 68.055893][ T4260] device veth1_macvtap entered promiscuous mode [ 68.065612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.080739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.093352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.102553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.123546][ T4271] device veth1_macvtap entered promiscuous mode [ 68.130085][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 68.139935][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 68.152005][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.163235][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.186471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.197327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.210218][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 68.210297][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 68.216254][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 68.263232][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.276039][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.286711][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.298483][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.360360][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.389773][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.424396][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.439694][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.860488][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.033245][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.050615][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.071795][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.110227][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.129730][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.170866][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.183243][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.193471][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.234575][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.261635][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.269909][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.309715][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.340125][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.373060][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.419880][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.443507][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.467588][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.479836][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.501882][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.513353][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.551853][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.572466][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.601053][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.621029][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.638532][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.655493][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.666431][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689407][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.737730][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.745605][ T4402] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 69.777088][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.810541][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.836330][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.857030][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.867953][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.881582][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901730][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.952387][ T4404] block device autoloading is deprecated and will be removed. [ 69.963161][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.988153][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.057287][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.077277][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.088435][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.108020][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.381094][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.406755][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.419747][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.442055][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.507012][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.528098][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.599420][ T4415] Bluetooth: MGMT ver 1.22 [ 71.172941][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.179697][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.064321][ T4411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 72.104902][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.139345][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.162481][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.216785][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.263475][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.298348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.435937][ T14] cfg80211: failed to load regulatory.db [ 76.632412][ T4446] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 76.768887][ T4450] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 77.696559][ T4466] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22'. [ 77.764522][ T4460] device syzkaller0 entered promiscuous mode [ 78.035751][ T26] audit: type=1326 audit(1765179694.160:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.3.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b078f749 code=0x0 [ 78.353031][ T4473] netlink: 124 bytes leftover after parsing attributes in process `syz.3.24'. [ 78.427117][ T4473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.569599][ T4486] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 79.611154][ T4481] ======================================================= [ 79.611154][ T4481] WARNING: The mand mount option has been deprecated and [ 79.611154][ T4481] and is ignored by this kernel. Remove the mand [ 79.611154][ T4481] option from the mount to silence this warning. [ 79.611154][ T4481] ======================================================= [ 79.646125][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.657094][ T4481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.678937][ T4481] overlayfs: failed to look up (tracing) for ino (-66) [ 81.251203][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055530400: rx timeout, send abort [ 81.261225][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055530400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.755664][ T4499] md: could not open device unknown-block(0,0). [ 81.774881][ T4499] md: md_import_device returned -6 [ 82.740682][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057085000: rx timeout, send abort [ 82.750572][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057085000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.811138][ T4524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.838436][ T4524] overlayfs: failed to look up (tracing) for ino (-66) [ 83.873687][ T4526] Zero length message leads to an empty skb [ 84.679295][ T4510] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 84.753113][ T4511] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 87.013208][ T4569] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 90.497852][ T4597] device syzkaller0 entered promiscuous mode [ 90.584024][ T4597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.61'. [ 95.351562][ T4625] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.415240][ T4625] overlayfs: failed to look up (tracing) for ino (-66) [ 95.424249][ T4625] overlayfs: failed to resolve './file1': -2 [ 97.378758][ T4664] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.451772][ T4669] overlayfs: failed to resolve './file1': -2 [ 97.564298][ T4664] overlayfs: failed to look up (tracing) for ino (-66) [ 99.158498][ T4673] device syzkaller0 entered promiscuous mode [ 99.211566][ T4673] netlink: 52 bytes leftover after parsing attributes in process `syz.4.81'. [ 100.168772][ T4700] netlink: 92 bytes leftover after parsing attributes in process `syz.1.86'. [ 100.330548][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 100.418384][ T4681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.510820][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.519163][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.578918][ T4700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.609532][ T4698] overlayfs: failed to resolve './file1': -2 [ 100.705997][ T4681] overlayfs: failed to look up (tracing) for ino (-66) [ 104.754744][ T4748] device syzkaller0 entered promiscuous mode [ 105.084354][ T4760] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.380369][ T4759] overlayfs: failed to resolve './file1': -2 [ 106.461488][ T26] audit: type=1326 audit(1765179722.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.1.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x0 [ 106.567263][ T4767] binder: BINDER_SET_CONTEXT_MGR already set [ 106.589216][ T4767] binder: 4764:4767 ioctl 4018620d 2000000002c0 returned -16 [ 106.921262][ T4776] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 106.973825][ T4776] overlayfs: overlapping lowerdir path [ 109.836236][ T4800] netlink: 92 bytes leftover after parsing attributes in process `syz.0.109'. [ 110.542506][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 112.016101][ T4814] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.031328][ T4814] overlayfs: failed to look up (tracing) for ino (-66) [ 112.039586][ T4814] overlayfs: failed to resolve './file1': -2 [ 112.141296][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.187623][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.216212][ T4800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.747854][ T4830] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.809599][ T4830] overlayfs: failed to look up (tracing) for ino (-66) [ 115.297852][ T26] audit: type=1326 audit(1765179731.420:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 117.626465][ T4849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.125'. [ 117.648433][ T4854] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.703676][ T4851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 117.721544][ T4849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.125'. [ 117.724741][ T4851] overlayfs: failed to look up (tracing) for ino (-66) [ 117.744974][ T4851] overlayfs: failed to resolve './file1': -2 [ 120.801349][ T4886] netlink: 92 bytes leftover after parsing attributes in process `syz.2.132'. [ 120.914969][ T4889] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.972067][ T4889] overlayfs: failed to look up (tracing) for ino (-66) [ 121.614636][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 121.772501][ T26] audit: type=1326 audit(1765179737.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.4.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 122.088557][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.153558][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.264482][ T4885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.877167][ T26] audit: type=1326 audit(1765179739.950:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 124.084997][ T4916] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.986318][ T26] audit: type=1326 audit(1765179739.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.008435][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.018229][ T26] audit: type=1326 audit(1765179739.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.040759][ T26] audit: type=1326 audit(1765179739.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.062898][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.069719][ T26] audit: type=1326 audit(1765179739.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.092053][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.100353][ T26] audit: type=1326 audit(1765179740.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.153754][ T26] audit: type=1326 audit(1765179740.090:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 125.176131][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.382426][ T4934] tipc: Started in network mode [ 125.399784][ T4934] tipc: Node identity 868b0fcf12ea, cluster identity 4711 [ 125.417295][ T4934] tipc: Enabled bearer , priority 0 [ 125.432804][ T4934] device syzkaller0 entered promiscuous mode [ 126.053098][ T26] audit: type=1326 audit(1765179740.090:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x7ffc0000 [ 126.075201][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.113042][ T4934] tipc: Resetting bearer [ 126.161452][ T4933] tipc: Resetting bearer [ 126.228764][ T4937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.143'. [ 126.283386][ T4938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.143'. [ 126.303458][ T4933] tipc: Disabling bearer [ 126.356501][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 128.057088][ T4947] binder: BINDER_SET_CONTEXT_MGR already set [ 128.162962][ T4950] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.221672][ T4950] overlayfs: failed to look up (tracing) for ino (-66) [ 128.900302][ T4947] binder: 4945:4947 ioctl 4018620d 200000000100 returned -16 [ 128.953307][ T4947] binder: BINDER_SET_CONTEXT_MGR already set [ 128.966984][ T4947] binder: 4945:4947 ioctl 4018620d 2000000002c0 returned -16 [ 129.112402][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 129.125252][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 129.137070][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 132.330927][ T4979] netlink: 92 bytes leftover after parsing attributes in process `syz.1.154'. [ 132.347614][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 132.376076][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.393277][ T4979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.611917][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618329][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.748924][ T4956] infiniband syz!: set active [ 132.759515][ T4956] infiniband syz!: added team_slave_0 [ 132.771380][ T4956] rdma_rxe: unable to create cq [ 132.776568][ T4956] infiniband syz!: Couldn't create ib_mad CQ [ 132.810593][ T4980] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 132.819053][ T4956] infiniband syz!: Couldn't open port 1 [ 132.996306][ T4956] RDS/IB: syz!: added [ 133.019388][ T4956] smc: adding ib device syz! with port count 1 [ 133.039397][ T4956] smc: ib device syz! port 1 has pnetid [ 133.098521][ T4980] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.187455][ T4987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.201879][ T4987] overlayfs: failed to look up (tracing) for ino (-66) [ 135.210730][ T4987] overlayfs: failed to resolve './file1': -2 [ 135.243920][ T4992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.161'. [ 135.327002][ T4992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.161'. [ 135.537927][ T4999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.595846][ T4999] overlayfs: failed to look up (tracing) for ino (-66) [ 136.498057][ T5006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.566580][ T5006] overlayfs: failed to look up (tracing) for ino (-66) [ 140.794444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029174000: rx timeout, send abort [ 140.802876][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029174000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.047150][ T5029] netlink: 92 bytes leftover after parsing attributes in process `syz.2.172'. [ 141.067316][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 142.673780][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.580487][ T5050] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.594688][ T5050] overlayfs: failed to resolve './file1': -2 [ 146.338650][ T5029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.363307][ T5084] tipc: Started in network mode [ 150.434033][ T5088] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.493884][ T5088] overlayfs: failed to look up (tracing) for ino (-66) [ 151.190243][ T5084] tipc: Node identity 12e3d8e4cc63, cluster identity 4711 [ 151.197507][ T5084] tipc: Enabled bearer , priority 0 [ 151.210132][ T5087] device syzkaller0 entered promiscuous mode [ 151.227878][ T5084] tipc: Resetting bearer [ 151.237247][ T5083] tipc: Resetting bearer [ 152.120317][ T5083] tipc: Disabling bearer [ 152.391117][ T5099] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 152.506593][ T5103] netlink: 92 bytes leftover after parsing attributes in process `syz.4.191'. [ 152.537640][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 152.637282][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.661898][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.716404][ T5103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.518250][ T5106] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.532668][ T5106] overlayfs: failed to resolve './file1': -2 [ 154.832527][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 154.844064][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 154.854342][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 156.118659][ T26] audit: type=1326 audit(1765179772.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.1.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x0 [ 156.229844][ T5129] binder: BINDER_SET_CONTEXT_MGR already set [ 156.246729][ T5129] binder: 5125:5129 ioctl 4018620d 2000000002c0 returned -16 [ 156.283623][ T5129] netlink: 124 bytes leftover after parsing attributes in process `syz.1.200'. [ 158.108000][ T5141] tipc: Enabled bearer , priority 0 [ 158.119129][ T5141] device syzkaller0 entered promiscuous mode [ 158.215442][ T5142] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.271497][ T5142] overlayfs: failed to look up (tracing) for ino (-66) [ 158.465905][ T5141] tipc: Resetting bearer [ 158.502154][ T5140] tipc: Resetting bearer [ 159.268644][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c57400: rx timeout, send abort [ 159.283862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802673bc00: rx timeout, send abort [ 159.420058][ T5140] tipc: Disabling bearer [ 159.427234][ T5147] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 159.451253][ T4322] tipc: Node number set to 2489389007 [ 159.458315][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802673bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.551613][ T5157] device syzkaller0 entered promiscuous mode [ 159.705951][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 159.719224][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 159.729331][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 159.777118][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c57400: abort rx timeout. Force session deactivation [ 163.301918][ T26] audit: type=1326 audit(1765179779.430:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b078f749 code=0x0 [ 163.414094][ T5182] binder: BINDER_SET_CONTEXT_MGR already set [ 163.531309][ T5182] binder: 5178:5182 ioctl 4018620d 2000000002c0 returned -16 [ 164.258311][ T5182] netlink: 124 bytes leftover after parsing attributes in process `syz.3.216'. [ 164.820269][ T5196] 9pnet_virtio: no channels available for device syz [ 164.953916][ T5203] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 164.974997][ T5198] overlayfs: failed to resolve './file1': -2 [ 165.176540][ T5213] device syzkaller0 entered promiscuous mode [ 166.372159][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055237000: rx timeout, send abort [ 166.380689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055235800: rx timeout, send abort [ 166.389004][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055235800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.880440][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055237000: abort rx timeout. Force session deactivation [ 167.772949][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 167.791535][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 167.801449][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 170.586302][ T5238] overlayfs: failed to resolve './file1': -2 [ 170.609126][ T26] audit: type=1326 audit(1765179786.730:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5240 comm="syz.4.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 170.718956][ T5242] netlink: 124 bytes leftover after parsing attributes in process `syz.4.234'. [ 171.046400][ T5249] overlayfs: failed to resolve './file1': -2 [ 171.177603][ T5256] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 172.305548][ T5265] tipc: Started in network mode [ 172.312944][ T5265] tipc: Node identity f61862db467c, cluster identity 4711 [ 172.325786][ T5265] tipc: Enabled bearer , priority 0 [ 172.335384][ T5265] device syzkaller0 entered promiscuous mode [ 172.367931][ T5265] tipc: Resetting bearer [ 172.375358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024ce2400: rx timeout, send abort [ 172.384038][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880586e0c00: rx timeout, send abort [ 172.400244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880586e0c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.430084][ T5264] tipc: Resetting bearer [ 172.483859][ T5264] tipc: Disabling bearer [ 172.883633][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024ce2400: abort rx timeout. Force session deactivation [ 173.121300][ T5270] device syzkaller0 entered promiscuous mode [ 173.489455][ T5262] sched: RT throttling activated [ 173.881881][ T5273] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.986436][ T5273] overlayfs: failed to look up (tracing) for ino (-66) [ 174.940719][ T5283] random: crng reseeded on system resumption [ 175.914872][ T5289] overlayfs: failed to resolve './file1': -2 [ 178.017351][ T5312] tipc: Started in network mode [ 178.022771][ T5312] tipc: Node identity f6146b182bd, cluster identity 4711 [ 178.038608][ T5312] tipc: Enabled bearer , priority 0 [ 178.050707][ T5312] device syzkaller0 entered promiscuous mode [ 178.124285][ T5316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.194715][ T5316] overlayfs: failed to look up (tracing) for ino (-66) [ 178.907365][ T5319] tipc: Resetting bearer [ 178.954887][ T5311] tipc: Resetting bearer [ 179.160870][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e658800: rx timeout, send abort [ 179.169664][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e65b000: rx timeout, send abort [ 179.179648][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e65b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.499227][ T5311] tipc: Disabling bearer [ 179.530896][ T126] tipc: Node number set to 3720637208 [ 179.593597][ T5324] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 179.669965][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e658800: abort rx timeout. Force session deactivation [ 182.703745][ T5363] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.756838][ T5363] overlayfs: failed to look up (tracing) for ino (-66) [ 184.033215][ T5376] tipc: Enabled bearer , priority 0 [ 184.851836][ T5381] device syzkaller0 entered promiscuous mode [ 184.927924][ T5376] tipc: Resetting bearer [ 184.990725][ T5372] tipc: Resetting bearer [ 185.041770][ T5372] tipc: Disabling bearer [ 185.889925][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 185.889959][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 185.896062][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 185.896090][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 186.441845][ T5385] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.519080][ T5385] overlayfs: failed to look up (tracing) for ino (-66) [ 186.546968][ T5385] overlayfs: failed to resolve './file1': -2 [ 186.768254][ T5405] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 188.820059][ T5428] team0: No ports can be present during mode change [ 188.832234][ T5425] device vlan0 entered promiscuous mode [ 188.919210][ T5425] team0: Port device vlan0 added [ 190.896212][ T5452] tipc: Enabled bearer , priority 0 [ 190.927820][ T5452] device syzkaller0 entered promiscuous mode [ 190.967797][ T5452] tipc: Resetting bearer [ 191.001586][ T5451] tipc: Resetting bearer [ 191.714584][ T5451] tipc: Disabling bearer [ 192.218719][ T5464] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 192.292931][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 192.304535][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 192.314332][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 194.070856][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.077452][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.361545][ T5495] overlayfs: failed to resolve './file1': -2 [ 198.411267][ T5507] tipc: Enabled bearer , priority 0 [ 198.418936][ T5507] device syzkaller0 entered promiscuous mode [ 198.436728][ T5507] tipc: Resetting bearer [ 198.452565][ T5504] tipc: Resetting bearer [ 198.495565][ T5504] tipc: Disabling bearer [ 198.568585][ T26] audit: type=1326 audit(1765179814.690:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.2.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faad438f749 code=0x0 [ 198.666523][ T5514] netlink: 124 bytes leftover after parsing attributes in process `syz.2.306'. [ 198.683860][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.731902][ T5517] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 205.008941][ T5552] binder: BINDER_SET_CONTEXT_MGR already set [ 205.009340][ T5552] binder: 5545:5552 ioctl 4018620d 2000000002c0 returned -16 [ 205.194735][ T5544] overlayfs: failed to resolve './file1': -2 [ 205.433706][ T5558] tipc: Enabled bearer , priority 0 [ 205.550995][ T5560] device syzkaller0 entered promiscuous mode [ 205.604279][ T5558] tipc: Resetting bearer [ 206.638931][ T5557] tipc: Resetting bearer [ 206.720670][ T5557] tipc: Disabling bearer [ 206.764555][ T4409] tipc: Node number set to 3732986084 [ 207.632165][ T5570] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 207.718620][ T26] audit: type=1326 audit(1765179823.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5575 comm="syz.0.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96418f749 code=0x0 [ 207.824123][ T5581] binder: BINDER_SET_CONTEXT_MGR already set [ 207.843824][ T5581] binder: 5575:5581 ioctl 4018620d 2000000002c0 returned -16 [ 207.853787][ T5582] binder: BINDER_SET_CONTEXT_MGR already set [ 207.863889][ T5582] binder: 5580:5582 ioctl 4018620d 2000000000c0 returned -16 [ 207.874283][ T5581] netlink: 124 bytes leftover after parsing attributes in process `syz.0.325'. [ 207.907895][ T5583] binder: BINDER_SET_CONTEXT_MGR already set [ 207.919770][ T5581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.937056][ T5583] binder: 5580:5583 ioctl 4018620d 200000000040 returned -16 [ 208.166101][ T5587] netlink: 224 bytes leftover after parsing attributes in process `syz.1.327'. [ 208.428289][ T5590] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 208.982376][ T5600] binder: BINDER_SET_CONTEXT_MGR already set [ 208.988553][ T5600] binder: 5599:5600 ioctl 4018620d 200000000100 returned -16 [ 209.004975][ T5600] binder: BINDER_SET_CONTEXT_MGR already set [ 209.012393][ T5600] binder: 5599:5600 ioctl 4018620d 2000000002c0 returned -16 [ 211.718260][ T5608] overlayfs: failed to resolve './file1': -2 [ 211.773431][ T5616] tipc: Enabled bearer , priority 0 [ 212.621097][ T5616] device syzkaller0 entered promiscuous mode [ 212.641184][ T5616] tipc: Resetting bearer [ 212.773679][ T5615] tipc: Resetting bearer [ 212.835455][ T5615] tipc: Disabling bearer [ 212.880219][ T5624] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 213.181428][ T5632] binder: BINDER_SET_CONTEXT_MGR already set [ 213.187824][ T5632] binder: 5631:5632 ioctl 4018620d 200000000100 returned -16 [ 213.220233][ T5632] binder: BINDER_SET_CONTEXT_MGR already set [ 213.232434][ T26] audit: type=1326 audit(1765179829.360:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 213.255779][ T5632] binder: 5631:5632 ioctl 4018620d 2000000002c0 returned -16 [ 213.321700][ T5636] netlink: 124 bytes leftover after parsing attributes in process `syz.4.341'. [ 213.344182][ T5636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.217023][ T5671] tipc: Enabling of bearer rejected, failed to enable media [ 216.251500][ T5659] overlayfs: failed to resolve './file1': -2 [ 216.633336][ T5685] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 216.766838][ T5694] binder: BINDER_SET_CONTEXT_MGR already set [ 216.831366][ T5694] binder: 5692:5694 ioctl 4018620d 200000000100 returned -16 [ 219.352325][ T5715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.407356][ T5715] overlayfs: failed to look up (tracing) for ino (-66) [ 219.419109][ T5716] overlayfs: failed to resolve './file1': -2 [ 220.581942][ T26] audit: type=1326 audit(1765179836.710:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.4.362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 220.703373][ T5723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.759493][ T5725] overlayfs: failed to resolve './file1': -2 [ 220.779845][ T5728] capability: warning: `syz.1.364' uses 32-bit capabilities (legacy support in use) [ 221.037905][ T5739] binder: BINDER_SET_CONTEXT_MGR already set [ 221.044067][ T5739] binder: 5738:5739 ioctl 4018620d 200000000100 returned -16 [ 222.216346][ T5751] block device autoloading is deprecated and will be removed. [ 222.363635][ T5748] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 222.813511][ T5758] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 223.879408][ T5768] overlayfs: failed to resolve './file1': -2 [ 224.649692][ T4338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 225.139275][ T26] audit: type=1326 audit(1765179841.260:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96418f749 code=0x0 [ 225.161609][ T4338] usb 4-1: Using ep0 maxpacket: 32 [ 225.172145][ T4338] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 225.197582][ T4338] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.211541][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.220909][ T4338] usb 4-1: Product: syz [ 225.229361][ T4338] usb 4-1: Manufacturer: syz [ 225.239709][ T4338] usb 4-1: SerialNumber: syz [ 225.250836][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 225.259446][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 225.268281][ T4278] Bluetooth: hci4: hardware error 0x00 [ 225.277612][ T4338] usb 4-1: config 0 descriptor?? [ 225.278551][ T5792] binder: BINDER_SET_CONTEXT_MGR already set [ 225.293602][ T5774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.305568][ T5792] binder: 5786:5792 ioctl 4018620d 2000000002c0 returned -16 [ 225.357728][ T4338] hub 4-1:0.0: bad descriptor, ignoring hub [ 226.051909][ T4338] hub: probe of 4-1:0.0 failed with error -5 [ 226.077143][ T5797] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 226.090898][ T5795] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 226.140554][ T5792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.159326][ T5794] overlayfs: failed to look up (tracing) for ino (-66) [ 226.254298][ T5799] netlink: 180 bytes leftover after parsing attributes in process `syz.1.389'. [ 226.269754][ T93] block nbd1: Attempted send on invalid socket [ 226.276520][ T93] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 226.287243][ T5799] EXT4-fs (nbd1): unable to read superblock [ 226.589907][ T4322] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 226.782006][ T4322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.797867][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.826588][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.870686][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.329861][ T4278] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 227.711271][ T4322] usb 2-1: usb_control_msg returned -32 [ 227.717026][ T4322] usbtmc 2-1:16.0: can't read capabilities [ 227.881882][ T5817] overlayfs: failed to resolve './file1': -2 [ 228.656584][ T5813] overlayfs: failed to resolve './file1': -2 [ 228.741462][ T5825] binder_alloc: 5824: binder_alloc_buf, no vma [ 229.054768][ T5836] netlink: 92 bytes leftover after parsing attributes in process `syz.2.398'. [ 229.087324][ T5838] netlink: 108 bytes leftover after parsing attributes in process `syz.0.399'. [ 229.113034][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 229.280874][ T4623] usb 2-1: USB disconnect, device number 2 [ 229.370353][ T5841] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.446457][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.468000][ T5840] overlayfs: failed to look up (tracing) for ino (-66) [ 229.533423][ T5846] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 229.547586][ T5836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.705124][ T5850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.763537][ T5850] overlayfs: failed to look up (tracing) for ino (-66) [ 229.792134][ T5851] overlayfs: failed to resolve './file1': -2 [ 230.799012][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 230.810885][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 230.821636][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 232.035041][ T4409] usb 4-1: USB disconnect, device number 2 [ 232.893208][ T5864] overlayfs: failed to resolve './file1': -2 [ 233.953483][ T5874] overlayfs: failed to resolve './file1': -2 [ 234.987922][ T5890] process 'syz.3.414' launched './file0' with NULL argv: empty string added [ 236.132387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075ee7000: rx timeout, send abort [ 236.327156][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075ee6000: rx timeout, send abort [ 236.336575][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888075ee6000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.640772][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075ee7000: abort rx timeout. Force session deactivation [ 236.734112][ T5902] netlink: 'syz.3.414': attribute type 3 has an invalid length. [ 236.806907][ T5905] afs: Unknown parameter '#7dyn' [ 237.669482][ T5908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.417'. [ 237.795850][ T5910] netlink: 92 bytes leftover after parsing attributes in process `syz.1.415'. [ 237.859447][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 238.038960][ T5910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.083162][ T5916] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 238.100134][ T5910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.648309][ T5927] binder: 5907:5927 ioctl 0 200000000040 returned -22 [ 240.360677][ T5941] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 241.189702][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 241.399710][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 242.258670][ T5962] overlayfs: failed to resolve './file1': -2 [ 243.293485][ T6000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.310691][ T6000] overlayfs: failed to look up (tracing) for ino (-66) [ 244.547493][ T6014] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 244.556840][ T6014] overlayfs: overlapping lowerdir path [ 244.910626][ T6010] overlayfs: failed to resolve './file1': -2 [ 245.027006][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.434'. [ 245.287248][ T6029] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.346857][ T6029] overlayfs: failed to look up (tracing) for ino (-66) [ 245.467635][ T6030] overlayfs: failed to resolve './file1': -2 [ 246.161559][ T6033] tipc: Enabled bearer , priority 0 [ 246.234331][ T6033] device syzkaller0 entered promiscuous mode [ 246.288241][ T6033] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 246.333916][ T6033] tipc: Resetting bearer [ 246.371366][ T6032] tipc: Resetting bearer [ 246.609945][ T129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.771724][ T129] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 246.779381][ T129] usb 1-1: chopping to 0 config(s) [ 246.791870][ T129] usb 1-1: can't read configurations, error -32 [ 246.822787][ T6032] tipc: Disabling bearer [ 246.959785][ T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 248.506964][ T26] audit: type=1326 audit(1765179864.630:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.4.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 248.692212][ T6052] netlink: 124 bytes leftover after parsing attributes in process `syz.4.442'. [ 248.704018][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.701268][ T6059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.717757][ T6059] overlayfs: failed to look up (tracing) for ino (-66) [ 249.762682][ T6054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.825788][ T6054] overlayfs: failed to look up (tracing) for ino (-66) [ 249.842422][ T6057] overlayfs: failed to resolve './file1': -2 [ 249.870601][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 249.883602][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 249.892640][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 250.103000][ T6067] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 250.111531][ T6067] overlayfs: overlapping lowerdir path [ 250.794495][ T6074] tipc: Enabled bearer , priority 0 [ 250.844526][ T6074] device syzkaller0 entered promiscuous mode [ 250.876416][ T6074] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 250.917750][ T6074] tipc: Resetting bearer [ 250.928649][ T6073] tipc: Resetting bearer [ 250.984669][ T6073] tipc: Disabling bearer [ 252.016706][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c62800: rx timeout, send abort [ 252.033026][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805529b000: rx timeout, send abort [ 252.042214][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805529b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.600105][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055c62800: abort rx timeout. Force session deactivation [ 252.798661][ T6088] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 252.850274][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.453'. [ 255.492221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.498569][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.192606][ T6138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.246488][ T6138] overlayfs: failed to look up (tracing) for ino (-66) [ 257.260072][ T6138] overlayfs: failed to resolve './file1': -2 [ 258.026718][ T6134] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.348801][ T6145] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 258.357627][ T6145] overlayfs: overlapping lowerdir path [ 259.150241][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 259.164417][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 259.173495][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 260.567656][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880268af800: rx timeout, send abort [ 260.647635][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805618b000: rx timeout, send abort [ 260.656206][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805618b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 261.075987][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880268af800: abort rx timeout. Force session deactivation [ 262.034736][ T6166] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 263.834927][ T6179] afs: Unknown parameter '#7dyn' [ 263.883591][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.471'. [ 265.264421][ T6184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.387432][ T6193] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.441429][ T6193] overlayfs: failed to look up (tracing) for ino (-66) [ 265.941830][ T26] audit: type=1326 audit(1765179882.070:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96418f749 code=0x0 [ 266.044756][ T6202] binder: BINDER_SET_CONTEXT_MGR already set [ 266.063414][ T6202] binder: 6197:6202 ioctl 4018620d 2000000002c0 returned -16 [ 266.081162][ T6202] netlink: 124 bytes leftover after parsing attributes in process `syz.0.475'. [ 266.102250][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.259764][ T6210] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.315549][ T6210] overlayfs: failed to look up (tracing) for ino (-66) [ 267.305188][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd8400: rx timeout, send abort [ 267.314020][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805497f400: rx timeout, send abort [ 267.322780][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805497f400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.867794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bd8400: abort rx timeout. Force session deactivation [ 267.975974][ T6229] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 268.055994][ T6230] overlayfs: failed to resolve './file1': -2 [ 270.614807][ T6265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 270.636033][ T6265] overlayfs: failed to look up (tracing) for ino (-66) [ 270.643726][ T6265] overlayfs: failed to resolve './file1': -2 [ 270.722744][ T6271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 270.786630][ T6271] overlayfs: failed to look up (tracing) for ino (-66) [ 271.872084][ T6279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 271.960430][ T6281] overlayfs: failed to resolve './file1': -2 [ 272.077414][ T6279] overlayfs: failed to look up (tracing) for ino (-66) [ 272.503618][ T6288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.660998][ T6288] overlayfs: failed to look up (tracing) for ino (-66) [ 273.305751][ T6292] afs: Unknown parameter '#7dyn' [ 273.314125][ T6292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.494'. [ 273.622956][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d695400: rx timeout, send abort [ 273.631471][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d697c00: rx timeout, send abort [ 273.640727][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d697c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 274.131263][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d695400: abort rx timeout. Force session deactivation [ 276.528835][ T6320] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 276.543351][ T6320] overlayfs: failed to look up (tracing) for ino (-66) [ 276.645497][ T6325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 276.674195][ T6325] overlayfs: failed to look up (tracing) for ino (-66) [ 276.723021][ T6325] overlayfs: failed to resolve './file1': -2 [ 276.784458][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 276.937867][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.092660][ T6336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.151707][ T6336] overlayfs: failed to look up (tracing) for ino (-66) [ 277.785097][ T6329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.113676][ T6344] afs: Unknown parameter '#7dyn' [ 278.121673][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 280.020801][ T6354] overlayfs: failed to resolve './file1': -2 [ 281.685948][ T6370] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 281.701070][ T6370] overlayfs: failed to look up (tracing) for ino (-66) [ 281.998377][ T6379] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 282.015800][ T6379] overlayfs: failed to look up (tracing) for ino (-66) [ 282.023960][ T6379] overlayfs: failed to resolve './file1': -2 [ 283.497045][ T6400] afs: Unknown parameter '#7dyn' [ 283.504578][ T6400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.523'. [ 285.905758][ T6421] overlayfs: failed to resolve './file1': -2 [ 286.136890][ T6424] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.150884][ T6424] overlayfs: failed to look up (tracing) for ino (-66) [ 286.373699][ T6429] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.389717][ T6429] overlayfs: failed to look up (tracing) for ino (-66) [ 286.397672][ T6429] overlayfs: failed to resolve './file1': -2 [ 286.536303][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 286.649447][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.479743][ T6431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.480207][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 288.822121][ T6447] afs: Unknown parameter '#7dyn' [ 288.824189][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 292.278859][ T6467] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.294358][ T6467] overlayfs: failed to look up (tracing) for ino (-66) [ 292.486896][ T6471] overlayfs: failed to resolve './file1': -2 [ 292.581707][ T6476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.595920][ T6476] overlayfs: failed to look up (tracing) for ino (-66) [ 292.607769][ T6476] overlayfs: failed to resolve './file1': -2 [ 292.616143][ T6482] tipc: Enabled bearer , priority 0 [ 292.650809][ T6482] device syzkaller0 entered promiscuous mode [ 292.673086][ T6482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.767538][ T6482] tipc: Resetting bearer [ 292.831967][ T6481] tipc: Resetting bearer [ 292.872645][ T6490] afs: Unknown parameter '#7dyn' [ 293.095599][ T6481] tipc: Disabling bearer [ 293.286170][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.549'. [ 293.645881][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 293.661222][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 293.670303][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 295.291148][ T6510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.305040][ T6510] overlayfs: failed to look up (tracing) for ino (-66) [ 295.483972][ T6522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.543660][ T6522] overlayfs: failed to look up (tracing) for ino (-66) [ 295.559855][ T6523] overlayfs: failed to resolve './file1': -2 [ 296.613709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bd9c00: rx timeout, send abort [ 296.622172][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058bd9c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 296.736624][ T6531] overlayfs: failed to resolve './file1': -2 [ 297.707637][ T6534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 297.722821][ T6534] overlayfs: failed to look up (tracing) for ino (-66) [ 297.735131][ T6534] overlayfs: failed to resolve './file1': -2 [ 297.825026][ T6547] tipc: Enabled bearer , priority 0 [ 297.844556][ T6547] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 299.339838][ T6542] tipc: Resetting bearer [ 299.494421][ T6553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 299.654985][ T6553] overlayfs: failed to look up (tracing) for ino (-66) [ 300.111618][ T6541] tipc: Disabling bearer [ 301.336424][ T6560] afs: Unknown parameter '#7dyn' [ 301.343834][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.566'. [ 302.532063][ T6568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 302.584508][ T6568] overlayfs: failed to look up (tracing) for ino (-66) [ 302.598583][ T6568] overlayfs: failed to resolve './file1': -2 [ 304.611160][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880586e1000: rx timeout, send abort [ 304.619521][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880586e1000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.739712][ T6590] overlayfs: failed to resolve './file1': -2 [ 305.655616][ T6588] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 305.728110][ T6595] overlayfs: failed to resolve './file1': -2 [ 305.728812][ T6588] overlayfs: failed to look up (tracing) for ino (-66) [ 306.692401][ T6604] tipc: Started in network mode [ 306.720785][ T6604] tipc: Node identity 8602de992d31, cluster identity 4711 [ 306.736514][ T6604] tipc: Enabled bearer , priority 0 [ 306.745446][ T6609] device syzkaller0 entered promiscuous mode [ 306.765769][ T6604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 308.160412][ T4312] tipc: Node number set to 2872303257 [ 308.198827][ T6599] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 309.445376][ T6599] overlayfs: failed to look up (tracing) for ino (-66) [ 309.488162][ T6604] tipc: Resetting bearer [ 309.803324][ T6604] tipc: Resetting bearer [ 309.904788][ T6604] tipc: Disabling bearer [ 310.030212][ T26] audit: type=1326 audit(1765179926.160:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b078f749 code=0x0 [ 310.051965][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.135905][ T6629] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 310.192614][ T6629] overlayfs: failed to look up (tracing) for ino (-66) [ 310.207871][ T6630] overlayfs: failed to resolve './file1': -2 [ 310.950469][ T6633] binder: BINDER_SET_CONTEXT_MGR already set [ 310.956587][ T6633] binder: 6623:6633 ioctl 4018620d 2000000002c0 returned -16 [ 311.787886][ T6640] netlink: 124 bytes leftover after parsing attributes in process `syz.3.587'. [ 311.928469][ T6643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.198183][ T6652] overlayfs: failed to resolve './file1': -2 [ 313.002525][ T6646] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 313.977666][ T6649] overlayfs: failed to resolve './file1': -2 [ 314.583005][ T6677] tipc: Enabled bearer , priority 0 [ 314.902753][ T6682] device syzkaller0 entered promiscuous mode [ 314.952246][ T6677] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 316.555403][ T6689] tipc: Resetting bearer [ 316.600054][ T6676] tipc: Resetting bearer [ 316.739439][ T6676] tipc: Disabling bearer [ 316.932135][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.938519][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.087451][ T26] audit: type=1326 audit(1765179933.210:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b078f749 code=0x0 [ 317.187322][ T6701] binder: BINDER_SET_CONTEXT_MGR already set [ 317.206199][ T6701] binder: 6697:6701 ioctl 4018620d 2000000002c0 returned -16 [ 318.101682][ T6704] netlink: 124 bytes leftover after parsing attributes in process `syz.3.602'. [ 318.257369][ T6700] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 318.330033][ T6711] overlayfs: failed to resolve './file1': -2 [ 318.490980][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.651206][ T6713] overlayfs: failed to resolve './file1': -2 [ 319.575777][ T6717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 319.666520][ T6717] overlayfs: failed to resolve './file1': -2 [ 320.612986][ T6742] afs: Unknown parameter '#7dyn' [ 320.621401][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.610'. [ 322.894188][ T6746] tipc: Enabled bearer , priority 0 [ 322.910814][ T6746] device syzkaller0 entered promiscuous mode [ 322.923736][ T6746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 323.103105][ T6749] tipc: Resetting bearer [ 323.174193][ T6745] tipc: Resetting bearer [ 323.297012][ T6745] tipc: Disabling bearer [ 323.337237][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 323.448097][ T6759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.506505][ T6759] overlayfs: failed to look up (tracing) for ino (-66) [ 323.522259][ T6760] overlayfs: failed to resolve './file1': -2 [ 324.545655][ T6770] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.561260][ T6770] overlayfs: failed to look up (tracing) for ino (-66) [ 324.673268][ T6775] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 325.975936][ T6771] overlayfs: failed to resolve './file1': -2 [ 326.053069][ T6775] overlayfs: failed to look up (tracing) for ino (-66) [ 329.349701][ T6805] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 329.412334][ T6805] overlayfs: failed to look up (tracing) for ino (-66) [ 329.426176][ T6806] overlayfs: failed to resolve './file1': -2 [ 330.346082][ T6808] afs: Unknown parameter '#7dyn' [ 330.353744][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.628'. [ 330.791692][ T6812] tipc: Enabled bearer , priority 0 [ 330.837447][ T6812] device syzkaller0 entered promiscuous mode [ 330.853256][ T6812] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 331.000472][ T6812] tipc: Resetting bearer [ 331.707356][ T6821] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 331.725499][ T6811] tipc: Resetting bearer [ 331.745668][ T6821] overlayfs: failed to look up (tracing) for ino (-66) [ 331.870305][ T6811] tipc: Disabling bearer [ 332.048535][ T6836] overlayfs: failed to resolve './file1': -2 [ 333.381586][ T6835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 333.413822][ T6835] overlayfs: failed to look up (tracing) for ino (-66) [ 334.999028][ T26] audit: type=1326 audit(1765179951.120:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.3.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b078f749 code=0x0 [ 335.152800][ T6857] binder: BINDER_SET_CONTEXT_MGR already set [ 335.159009][ T6857] binder: 6855:6857 ioctl 4018620d 2000000002c0 returned -16 [ 335.264373][ T6857] netlink: 124 bytes leftover after parsing attributes in process `syz.3.643'. [ 335.311152][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.457145][ T6865] afs: Unknown parameter '#7dyn' [ 335.464795][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.646'. [ 336.420717][ T6873] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 336.434929][ T6873] overlayfs: failed to look up (tracing) for ino (-66) [ 336.667444][ T6881] overlayfs: failed to resolve './file1': -2 [ 337.542910][ T6884] tipc: Enabled bearer , priority 0 [ 337.566523][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880583d5c00: rx timeout, send abort [ 337.575069][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583d5c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 337.600595][ T6884] device syzkaller0 entered promiscuous mode [ 337.629163][ T6884] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 337.730214][ T6889] tipc: Resetting bearer [ 337.745496][ T6883] tipc: Resetting bearer [ 337.787587][ T6883] tipc: Disabling bearer [ 340.014433][ T6909] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.051257][ T6909] overlayfs: failed to look up (tracing) for ino (-66) [ 340.385256][ T6916] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.400327][ T6916] overlayfs: failed to look up (tracing) for ino (-66) [ 340.492730][ T26] audit: type=1326 audit(1765179956.620:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.2.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faad438f749 code=0x0 [ 340.589372][ T6925] netlink: 124 bytes leftover after parsing attributes in process `syz.2.665'. [ 340.635809][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.851824][ T6932] overlayfs: failed to resolve './file1': -2 [ 341.778202][ T6939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 341.853920][ T6940] overlayfs: failed to resolve './file1': -2 [ 341.941636][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553d9800: rx timeout, send abort [ 341.946127][ T6939] overlayfs: failed to look up (tracing) for ino (-66) [ 341.950174][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880553d9800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 342.720926][ T6938] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 343.278369][ T6938] overlayfs: failed to look up (tracing) for ino (-66) [ 345.466136][ T26] audit: type=1326 audit(1765179961.590:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x0 [ 345.488381][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.590382][ T6992] binder: BINDER_SET_CONTEXT_MGR already set [ 345.606388][ T6987] overlayfs: failed to resolve './file1': -2 [ 345.684895][ T6992] binder: 6982:6992 ioctl 4018620d 2000000002c0 returned -16 [ 346.426855][ T6996] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 346.590746][ T7000] overlayfs: failed to resolve './file1': -2 [ 346.609844][ T6996] overlayfs: failed to look up (tracing) for ino (-66) [ 346.733717][ T6994] binder: 6982:6994 ioctl c0306201 2000000004c0 returned -14 [ 346.758895][ T6992] netlink: 124 bytes leftover after parsing attributes in process `syz.1.683'. [ 346.776305][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.816121][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880553c1c00: rx timeout, send abort [ 346.824859][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880553c1c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.447513][ T7011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 347.473309][ T7011] overlayfs: failed to look up (tracing) for ino (-66) [ 349.649236][ T7037] tipc: Enabled bearer , priority 0 [ 349.678308][ T7037] device syzkaller0 entered promiscuous mode [ 349.721732][ T7037] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 350.009045][ T7037] tipc: Resetting bearer [ 350.069116][ T7036] tipc: Resetting bearer [ 350.141154][ T7046] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 350.211481][ T7049] overlayfs: failed to resolve './file1': -2 [ 350.326473][ T7046] overlayfs: failed to look up (tracing) for ino (-66) [ 350.810206][ T7036] tipc: Disabling bearer [ 351.325724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053c3f000: rx timeout, send abort [ 351.334076][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053c3f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 351.858972][ T7057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 353.587648][ T26] audit: type=1326 audit(1765179969.710:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.1.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1722b8f749 code=0x0 [ 353.686759][ T7085] binder: BINDER_SET_CONTEXT_MGR already set [ 353.731009][ T7085] binder: 7076:7085 ioctl 4018620d 2000000002c0 returned -16 [ 353.774445][ T7086] netlink: 124 bytes leftover after parsing attributes in process `syz.1.706'. [ 353.862455][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.009446][ T7095] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 354.072004][ T7095] overlayfs: failed to look up (tracing) for ino (-66) [ 354.080577][ T7098] overlayfs: failed to resolve './file1': -2 [ 355.228898][ T7107] device syzkaller0 entered promiscuous mode [ 356.920184][ T26] audit: type=1326 audit(1765179973.040:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 357.115070][ T7118] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 358.888324][ T26] audit: type=1326 audit(1765179973.040:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 358.911148][ T26] audit: type=1326 audit(1765179973.040:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 358.935983][ T26] audit: type=1326 audit(1765179973.040:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 358.962012][ T26] audit: type=1326 audit(1765179973.040:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 358.984597][ T26] audit: type=1326 audit(1765179973.050:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 359.007170][ T26] audit: type=1326 audit(1765179973.050:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 359.029984][ T26] audit: type=1326 audit(1765179973.050:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 360.189685][ T26] audit: type=1326 audit(1765179973.070:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 360.244839][ T26] audit: type=1326 audit(1765179973.070:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 360.267742][ T26] audit: type=1326 audit(1765179973.070:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x7ffc0000 [ 361.727299][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055b3ec00: rx timeout, send abort [ 361.735765][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055b3ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.729774][ T4312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 362.929658][ T4312] usb 2-1: Using ep0 maxpacket: 32 [ 363.164721][ T7169] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.250885][ T7169] overlayfs: failed to look up (tracing) for ino (-66) [ 366.457631][ T7197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 366.472440][ T7197] overlayfs: failed to look up (tracing) for ino (-66) [ 366.860904][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 366.860921][ T26] audit: type=1326 audit(1765179982.990:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.4.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 366.889129][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.117517][ T7208] netlink: 124 bytes leftover after parsing attributes in process `syz.4.741'. [ 367.246100][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.618688][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077563800: rx timeout, send abort [ 367.627106][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077563800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 367.970185][ T4312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.021535][ T4312] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 368.071871][ T4312] usb 2-1: chopping to 0 config(s) [ 368.105420][ T4312] usb 2-1: can't read configurations, error -32 [ 368.299681][ T4312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 368.470283][ T4312] usb 2-1: device descriptor read/64, error -32 [ 368.600380][ T4312] usb usb2-port1: attempt power cycle [ 369.020113][ T4312] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 369.114833][ T4312] usb 2-1: device descriptor read/8, error -32 [ 369.679848][ T4312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 369.753689][ T4312] usb 2-1: device descriptor read/8, error -32 [ 369.896012][ T4312] usb usb2-port1: unable to enumerate USB device [ 370.036984][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 372.029650][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a09c00: rx timeout, send abort [ 372.037915][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a09c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.554021][ T26] audit: type=1326 audit(1765179988.680:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.0.753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96418f749 code=0x0 [ 372.660354][ T7249] binder: BINDER_SET_CONTEXT_MGR already set [ 372.695331][ T7249] binder: 7245:7249 ioctl 4018620d 2000000002c0 returned -16 [ 372.755327][ T7255] netlink: 124 bytes leftover after parsing attributes in process `syz.0.753'. [ 372.822052][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.096531][ T7260] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 373.151917][ T7260] overlayfs: failed to look up (tracing) for ino (-66) [ 373.245363][ T7262] overlayfs: failed to resolve './file1': -2 [ 374.499766][ T4409] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 374.739952][ T4409] usb 4-1: Using ep0 maxpacket: 32 [ 375.922855][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055b4ec00: rx timeout, send abort [ 375.931244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055b4ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.154270][ T7305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.371612][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.377955][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.498550][ T7301] overlayfs: failed to look up (tracing) for ino (-66) [ 379.656731][ T7311] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 379.721455][ T7311] overlayfs: failed to look up (tracing) for ino (-66) [ 379.735621][ T7312] overlayfs: failed to resolve './file1': -2 [ 379.809925][ T4409] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.442699][ T4409] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 380.459027][ T4409] usb 4-1: chopping to 0 config(s) [ 380.466251][ T4409] usb 4-1: can't read configurations, error -32 [ 380.649760][ T4409] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 380.839648][ T4409] usb 4-1: device descriptor read/64, error -32 [ 380.959873][ T4409] usb usb4-port1: attempt power cycle [ 380.996692][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 381.369597][ T4409] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 381.423226][ T4409] usb 4-1: device descriptor read/8, error -32 [ 381.719611][ T4409] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 381.789876][ T4409] usb 4-1: device descriptor read/8, error -32 [ 381.909836][ T4409] usb usb4-port1: unable to enumerate USB device [ 384.816019][ T7348] tipc: Enabled bearer , priority 0 [ 384.836290][ T7348] device syzkaller0 entered promiscuous mode [ 384.962022][ T7348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.053932][ T7356] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 385.110318][ T7356] overlayfs: failed to look up (tracing) for ino (-66) [ 385.124370][ T7356] overlayfs: failed to resolve './file1': -2 [ 385.709954][ T7354] netlink: 92 bytes leftover after parsing attributes in process `syz.4.776'. [ 385.722936][ T7348] tipc: Resetting bearer [ 385.785408][ T7346] tipc: Resetting bearer [ 386.026450][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056141400: rx timeout, send abort [ 386.035248][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056141400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 386.757016][ T7346] tipc: Disabling bearer [ 387.607883][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 387.624407][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 387.668818][ T7354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.847309][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 389.162959][ T7395] binder: BINDER_SET_CONTEXT_MGR already set [ 389.169227][ T7395] binder: 7394:7395 ioctl 4018620d 2000000000c0 returned -16 [ 389.339777][ T4321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 390.321205][ T7401] binder: BINDER_SET_CONTEXT_MGR already set [ 390.327298][ T7401] binder: 7394:7401 ioctl 4018620d 200000000040 returned -16 [ 390.489686][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 390.892932][ T7414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.795'. [ 392.997524][ T7427] tipc: Enabled bearer , priority 0 [ 393.005101][ T7427] device syzkaller0 entered promiscuous mode [ 393.014121][ T7427] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 393.039337][ T7427] tipc: Resetting bearer [ 393.047186][ T7425] tipc: Resetting bearer [ 393.063108][ T7425] tipc: Disabling bearer [ 393.492307][ T7431] netlink: 92 bytes leftover after parsing attributes in process `syz.3.800'. [ 393.516506][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 393.560925][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056d83c00: rx timeout, send abort [ 393.571775][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056d83c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 393.644289][ T7435] overlayfs: failed to resolve './file1': -2 [ 394.402498][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.474055][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.537814][ T7440] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 394.546528][ T7440] overlayfs: overlapping lowerdir path [ 395.464220][ T7431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.650109][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.142081][ T4321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 397.222484][ T4321] usb 2-1: can't read configurations, error -71 [ 398.600435][ T7470] tipc: Enabled bearer , priority 0 [ 398.608204][ T7470] device syzkaller0 entered promiscuous mode [ 398.623173][ T7470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 398.671237][ T7470] tipc: Resetting bearer [ 398.702582][ T7469] tipc: Resetting bearer [ 398.781268][ T7469] tipc: Disabling bearer [ 399.164742][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 399.262284][ T7485] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 399.270889][ T7485] overlayfs: overlapping lowerdir path [ 400.040184][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.050475][ T7480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 400.063736][ T7480] overlayfs: failed to look up (tracing) for ino (-66) [ 400.118563][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.130633][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d119000: rx timeout, send abort [ 400.139102][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d119000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 400.159917][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.181842][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.217517][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.248427][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.347815][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.367314][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.382412][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.391128][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.399427][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.407912][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.415945][ T7490] netlink: 92 bytes leftover after parsing attributes in process `syz.2.817'. [ 400.425188][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.433229][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.442053][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 400.495717][ T14] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 400.495717][ T14] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 400.578082][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 400.684286][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.779082][ T7490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.806537][ T7491] fido_id[7491]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0001/report_descriptor': No such device [ 401.079587][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 401.349576][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 402.982840][ T7536] misc userio: The device must be registered before sending interrupts [ 403.183676][ T7539] tipc: Enabled bearer , priority 0 [ 403.219219][ T7539] device syzkaller0 entered promiscuous mode [ 403.280846][ T7539] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 403.361405][ T7538] tipc: Resetting bearer [ 403.495858][ T7538] tipc: Disabling bearer [ 404.156777][ T7556] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 404.165583][ T7556] overlayfs: overlapping lowerdir path [ 404.915133][ T7554] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.938624][ T7554] overlayfs: failed to look up (tracing) for ino (-66) [ 405.198823][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.257895][ T14] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 405.315440][ T14] usb 4-1: can't read configurations, error -71 [ 405.377693][ T7564] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 405.567528][ T7571] overlayfs: failed to resolve './file1': -2 [ 406.506515][ T7564] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.388536][ T7598] tipc: Enabled bearer , priority 0 [ 407.432745][ T7598] device syzkaller0 entered promiscuous mode [ 407.466402][ T7598] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 407.641510][ T7597] tipc: Resetting bearer [ 407.797220][ T7597] tipc: Disabling bearer [ 408.094989][ T7609] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 408.103603][ T7609] overlayfs: overlapping lowerdir path [ 409.743773][ T7628] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 409.849721][ T4623] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 410.679677][ T4623] usb 4-1: Using ep0 maxpacket: 32 [ 412.776659][ T7665] tipc: Enabling of bearer rejected, failed to enable media [ 413.346632][ T4623] usb 4-1: unable to get BOS descriptor or descriptor too short [ 413.370780][ T4623] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 413.431309][ T4623] usb 4-1: can't read configurations, error -71 [ 413.805358][ T26] audit: type=1326 audit(1765180029.900:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 413.887617][ T7691] netlink: 124 bytes leftover after parsing attributes in process `syz.4.853'. [ 414.069034][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.208634][ T7692] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.240060][ T7692] overlayfs: failed to look up (tracing) for ino (-66) [ 414.249265][ T7692] overlayfs: failed to resolve './file1': -2 [ 414.898345][ T7699] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 416.102778][ T7718] netlink: 165 bytes leftover after parsing attributes in process `syz.1.860'. [ 416.424371][ T5034] kernel write not supported for file /sg0 (pid: 5034 comm: kworker/1:9) [ 416.609683][ T129] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 416.919577][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 417.203266][ T7735] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 417.263192][ T7735] overlayfs: failed to look up (tracing) for ino (-66) [ 417.279884][ T7740] overlayfs: failed to resolve './file1': -2 [ 418.002854][ T7745] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 418.077269][ T7746] overlayfs: failed to resolve './file1': -2 [ 418.101716][ T7745] overlayfs: failed to look up (tracing) for ino (-66) [ 420.159880][ T26] audit: type=1326 audit(1765180036.280:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f118f749 code=0x0 [ 420.250292][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 420.272954][ T7766] netlink: 124 bytes leftover after parsing attributes in process `syz.4.874'. [ 420.385193][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.092552][ T129] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.179338][ T7783] afs: Unknown parameter '#7dyn' [ 421.186978][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.879'. [ 422.590219][ T129] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 422.598130][ T129] usb 4-1: can't read configurations, error -71 [ 422.944433][ T7760] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 422.973535][ T7760] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 423.140553][ T7794] overlayfs: failed to resolve './file1': -2 [ 423.964639][ T7800] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.019161][ T7800] overlayfs: failed to look up (tracing) for ino (-66) [ 424.109415][ T7802] overlayfs: failed to resolve './file1': -2 [ 424.669030][ T7809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.724397][ T7809] overlayfs: failed to look up (tracing) for ino (-66) [ 424.740575][ T7810] overlayfs: failed to resolve './file1': -2 [ 427.036196][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 429.049228][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 429.381153][ T7838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.893'. [ 430.117194][ T7838] binder: 7837:7838 ioctl 0 200000000040 returned -22 [ 433.872790][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 433.882307][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 433.937093][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 433.977262][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 434.165602][ T7875] overlayfs: failed to resolve './file1': -2 [ 435.119524][ T7877] misc userio: The device must be registered before sending interrupts [ 435.629745][ T5034] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 436.619946][ T5034] usb 2-1: Using ep0 maxpacket: 32 [ 438.965809][ T7910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.912'. [ 439.378877][ T5034] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.396614][ T5034] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 439.438859][ T5034] usb 2-1: can't read configurations, error -71 [ 439.586855][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 439.822146][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.829031][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.823695][ T7910] binder: 7908:7910 ioctl 0 200000000040 returned -22 [ 441.455134][ T7924] overlayfs: failed to resolve './file1': -2 [ 442.917020][ T7943] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 443.577378][ T7943] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 444.359233][ T7956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 444.422979][ T7956] overlayfs: failed to look up (tracing) for ino (-66) [ 446.368568][ T7971] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 446.429991][ T7971] overlayfs: failed to look up (tracing) for ino (-66) [ 446.443994][ T7972] overlayfs: failed to resolve './file1': -2 [ 447.507321][ T7980] Bluetooth: MGMT ver 1.22 [ 447.539782][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.929'. [ 447.776076][ T7975] netlink: 92 bytes leftover after parsing attributes in process `syz.4.928'. [ 447.789294][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 447.800303][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.818889][ T7975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.331329][ T7984] binder: 7978:7984 ioctl 0 200000000040 returned -22 [ 448.692850][ T8000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 448.848338][ T8000] overlayfs: failed to look up (tracing) for ino (-66) [ 449.433803][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054888800: rx timeout, send abort [ 449.442363][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054888800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 449.607600][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 449.751658][ T8012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 449.811440][ T8012] overlayfs: failed to look up (tracing) for ino (-66) [ 449.908186][ T8013] overlayfs: failed to resolve './file1': -2 [ 450.838518][ T8025] afs: Unknown parameter '#7dyn' [ 450.846237][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.941'. [ 451.897149][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 452.455402][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.949'. [ 452.509285][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 453.458274][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880268ad400: rx timeout, send abort [ 453.466784][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880268ad400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 453.492411][ T8057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 453.544115][ T8057] overlayfs: failed to look up (tracing) for ino (-66) [ 453.556990][ T8057] overlayfs: failed to resolve './file1': -2 [ 454.243188][ T8044] binder: 8043:8044 ioctl 0 200000000040 returned -22 [ 454.846165][ T8067] netlink: 92 bytes leftover after parsing attributes in process `syz.4.956'. [ 454.862431][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 454.873157][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.888409][ T8067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.029183][ T8071] afs: Unknown parameter '#7dyn' [ 455.037022][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 455.842369][ T8073] 9pnet_virtio: no channels available for device syz [ 455.960686][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 456.207147][ T8086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 456.265671][ T8086] overlayfs: failed to look up (tracing) for ino (-66) [ 458.295723][ T8101] binder: BINDER_SET_CONTEXT_MGR already set [ 458.333628][ T8101] binder: 8099:8101 ioctl 4018620d 200000000100 returned -16 [ 458.382151][ T8101] binder: BINDER_SET_CONTEXT_MGR already set [ 458.389912][ T8105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.969'. [ 458.425732][ T8101] binder: 8099:8101 ioctl 4018620d 2000000002c0 returned -16 [ 458.503211][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055058000: rx timeout, send abort [ 458.511763][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055058000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 458.920738][ T8112] netlink: 92 bytes leftover after parsing attributes in process `syz.4.971'. [ 458.933399][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 458.944250][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 458.965359][ T8112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.357373][ T8118] afs: Unknown parameter '#7dyn' [ 459.366720][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.973'. [ 460.428571][ T8123] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 461.066672][ T8124] binder: 8104:8124 ioctl 0 200000000040 returned -22 [ 462.528745][ T8144] binder: BINDER_SET_CONTEXT_MGR already set [ 462.546429][ T8144] binder: 8143:8144 ioctl 4018620d 200000000100 returned -16 [ 462.563926][ T8144] binder: BINDER_SET_CONTEXT_MGR already set [ 462.577353][ T8144] binder: 8143:8144 ioctl 4018620d 2000000002c0 returned -16 [ 462.720489][ T8139] mmap: syz.1.979 (8139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 462.735842][ T8139] [ 462.738225][ T8139] ====================================================== [ 462.745271][ T8139] WARNING: possible circular locking dependency detected [ 462.752402][ T8139] syzkaller #0 Not tainted [ 462.756844][ T8139] ------------------------------------------------------ [ 462.763893][ T8139] syz.1.979/8139 is trying to acquire lock: [ 462.769903][ T8139] ffff888054bbc1b0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 462.780674][ T8139] [ 462.780674][ T8139] but task is already holding lock: [ 462.788064][ T8139] ffff88801cfd08d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 462.798129][ T8139] [ 462.798129][ T8139] which lock already depends on the new lock. [ 462.798129][ T8139] [ 462.808584][ T8139] [ 462.808584][ T8139] the existing dependency chain (in reverse order) is: [ 462.817709][ T8139] [ 462.817709][ T8139] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 462.825308][ T8139] down_read_killable+0x4c/0x340 [ 462.830829][ T8139] mmap_read_lock_killable+0x1d/0x60 [ 462.836732][ T8139] lock_mm_and_find_vma+0x2b1/0x2f0 [ 462.842637][ T8139] do_user_addr_fault+0x2db/0xb10 [ 462.848372][ T8139] exc_page_fault+0x60/0x100 [ 462.853488][ T8139] asm_exc_page_fault+0x22/0x30 [ 462.858953][ T8139] fault_in_readable+0x13e/0x1f0 [ 462.864424][ T8139] fault_in_iov_iter_readable+0xbb/0x2e0 [ 462.870672][ T8139] generic_perform_write+0x1ee/0x5a0 [ 462.876675][ T8139] __generic_file_write_iter+0x148/0x2a0 [ 462.883012][ T8139] generic_file_write_iter+0xab/0x2e0 [ 462.889107][ T8139] vfs_write+0x44c/0x960 [ 462.893898][ T8139] ksys_write+0x143/0x240 [ 462.898796][ T8139] do_syscall_64+0x4c/0xa0 [ 462.903848][ T8139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.910374][ T8139] [ 462.910374][ T8139] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 462.919106][ T8139] __lock_acquire+0x2cf8/0x7c50 [ 462.924673][ T8139] lock_acquire+0x1b4/0x490 [ 462.929704][ T8139] down_write+0x36/0x60 [ 462.934604][ T8139] process_measurement+0x33c/0x1a10 [ 462.940426][ T8139] ima_file_mmap+0x104/0x150 [ 462.945646][ T8139] __se_sys_remap_file_pages+0x53e/0x770 [ 462.951994][ T8139] do_syscall_64+0x4c/0xa0 [ 462.956941][ T8139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.963366][ T8139] [ 462.963366][ T8139] other info that might help us debug this: [ 462.963366][ T8139] [ 462.973598][ T8139] Possible unsafe locking scenario: [ 462.973598][ T8139] [ 462.981044][ T8139] CPU0 CPU1 [ 462.986406][ T8139] ---- ---- [ 462.991778][ T8139] lock(&mm->mmap_lock); [ 462.996117][ T8139] lock(&sb->s_type->i_mutex_key#13); [ 463.004191][ T8139] lock(&mm->mmap_lock); [ 463.011133][ T8139] lock(&sb->s_type->i_mutex_key#13); [ 463.016647][ T8139] [ 463.016647][ T8139] *** DEADLOCK *** [ 463.016647][ T8139] [ 463.025147][ T8139] 1 lock held by syz.1.979/8139: [ 463.030085][ T8139] #0: ffff88801cfd08d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 463.040539][ T8139] [ 463.040539][ T8139] stack backtrace: [ 463.046424][ T8139] CPU: 1 PID: 8139 Comm: syz.1.979 Not tainted syzkaller #0 [ 463.053708][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.063850][ T8139] Call Trace: [ 463.067137][ T8139] [ 463.070076][ T8139] dump_stack_lvl+0x168/0x22e [ 463.074818][ T8139] ? load_image+0x3b0/0x3b0 [ 463.079357][ T8139] ? show_regs_print_info+0x12/0x12 [ 463.084584][ T8139] ? print_circular_bug+0x12b/0x1a0 [ 463.089888][ T8139] check_noncircular+0x274/0x310 [ 463.095009][ T8139] ? add_chain_block+0x940/0x940 [ 463.099955][ T8139] ? lockdep_lock+0xdc/0x1e0 [ 463.104556][ T8139] ? _find_first_zero_bit+0xcf/0x100 [ 463.109950][ T8139] __lock_acquire+0x2cf8/0x7c50 [ 463.114839][ T8139] ? ima_match_policy+0x104/0x2100 [ 463.119964][ T8139] ? verify_lock_unused+0x140/0x140 [ 463.125266][ T8139] ? ima_match_policy+0x207a/0x2100 [ 463.130472][ T8139] lock_acquire+0x1b4/0x490 [ 463.134987][ T8139] ? process_measurement+0x33c/0x1a10 [ 463.140376][ T8139] ? __might_sleep+0xd0/0xd0 [ 463.145069][ T8139] ? read_lock_is_recursive+0x10/0x10 [ 463.150536][ T8139] ? ima_get_action+0x71/0xa0 [ 463.155222][ T8139] down_write+0x36/0x60 [ 463.159385][ T8139] ? process_measurement+0x33c/0x1a10 [ 463.164767][ T8139] process_measurement+0x33c/0x1a10 [ 463.169988][ T8139] ? ima_file_mmap+0x150/0x150 [ 463.174762][ T8139] ? aa_file_perm+0x117/0xec0 [ 463.179640][ T8139] ? mtree_load+0xeb/0xa40 [ 463.184174][ T8139] ? mtree_load+0x90a/0xa40 [ 463.188736][ T8139] ? aa_get_current_label+0x110/0x1d0 [ 463.194144][ T8139] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 463.205044][ T8139] ima_file_mmap+0x104/0x150 [ 463.209751][ T8139] ? ima_file_free+0x3e0/0x3e0 [ 463.214597][ T8139] ? common_file_perm+0x171/0x1c0 [ 463.219642][ T8139] ? bpf_lsm_mmap_file+0x5/0x10 [ 463.224503][ T8139] ? security_mmap_file+0x11b/0x180 [ 463.229719][ T8139] __se_sys_remap_file_pages+0x53e/0x770 [ 463.235598][ T8139] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 463.241326][ T8139] ? lock_chain_count+0x20/0x20 [ 463.246198][ T8139] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 463.251927][ T8139] do_syscall_64+0x4c/0xa0 [ 463.256350][ T8139] ? clear_bhb_loop+0x60/0xb0 [ 463.261030][ T8139] ? clear_bhb_loop+0x60/0xb0 [ 463.265736][ T8139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.271808][ T8139] RIP: 0033:0x7f1722b8f749 [ 463.276228][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.296011][ T8139] RSP: 002b:00007f1720df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 463.304434][ T8139] RAX: ffffffffffffffda RBX: 00007f1722de5fa0 RCX: 00007f1722b8f749 [ 463.312586][ T8139] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000157000 [ 463.320686][ T8139] RBP: 00007f1722c13f91 R08: 0000000000008000 R09: 0000000000000000 [ 463.328668][ T8139] R10: 0000000000000157 R11: 0000000000000246 R12: 0000000000000000 [ 463.337003][ T8139] R13: 00007f1722de6038 R14: 00007f1722de5fa0 R15: 00007fffd61a24a8 [ 463.344982][ T8139] [ 463.678308][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d643400: rx timeout, send abort [ 463.687041][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d643400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.