last executing test programs: 18.419688835s ago: executing program 2 (id=402): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 18.077878351s ago: executing program 2 (id=404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 15.715693671s ago: executing program 2 (id=418): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286199000000000000000000ba00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x6) read$char_usb(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x24000010) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x5, 0x0, 0x1, 0xe}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(r7) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) 13.466424848s ago: executing program 3 (id=424): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8c8c6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000d80)={0x3fffffff, 0x100, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4", 0x0, 0xffffffff, 0x40000, 0x1, 0x19c}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610003000014000280080002400000000208000340000000160900020073790000140000001100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x400000008000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x114, 0xe) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x201, 0x40000032, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}}, 0x0) 13.240902522s ago: executing program 0 (id=427): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82001) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000), &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 13.127569943s ago: executing program 2 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) 11.008706158s ago: executing program 4 (id=429): ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002c) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 10.510635756s ago: executing program 0 (id=432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x3) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x2ac}, &(0x7f0000000140)=0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0x4, 0xf, 0x0, 0xac, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x0, 0x1, 0x1, 0x4, 0x7, 0x1, 0x1, '\x00', 0x0, 0x8000000000000001}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000340)='.)%*\x00', 0x5, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xac3}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2bc, 0xec, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x1f4, 0x202, 0x225, 0x1f4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0xc}}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0x8c0b6f020239d642], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x4, 0xfc, 0x3}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x40, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0xa, {0x1ff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) 10.454182507s ago: executing program 3 (id=433): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 10.237988211s ago: executing program 0 (id=434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 8.074652687s ago: executing program 1 (id=436): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 8.009026287s ago: executing program 4 (id=437): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 7.87151498s ago: executing program 3 (id=438): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286199000000000000000000ba00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x6) read$char_usb(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x24000010) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x5, 0x0, 0x1, 0xe}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(r7) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) 7.87113511s ago: executing program 4 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r6, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.83075339s ago: executing program 1 (id=440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x603, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',sgq']) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r3) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000200800034000000005140000001100"], 0x8c}}, 0x0) 5.086180026s ago: executing program 4 (id=441): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) timer_create(0x1, &(0x7f0000001440)={0x0, 0x3b, 0x4, @thr={0x0, &(0x7f0000001340)="6717e943ce943307ca65bb5476d77cf72a736b72fc0f477128b7a937a26cd8cf61ab0e8e708062f8392bfc"}}, &(0x7f0000001480)) r4 = socket$inet6(0xa, 0x1, 0x9) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) 4.860632309s ago: executing program 0 (id=442): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000888}, 0x14004000) 3.304554365s ago: executing program 2 (id=443): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82001) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000), &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 3.235480456s ago: executing program 3 (id=444): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8c8c6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000d80)={0x3fffffff, 0x100, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4", 0x0, 0xffffffff, 0x40000, 0x1, 0x19c}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610003000014000280080002400000000208000340000000160900020073790000140000001100010000000000000000000100000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x114, 0xe) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x201, 0x40000032, r9, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}}, 0x0) 3.098762308s ago: executing program 1 (id=445): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x3) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x2ac}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000340)='.)%*\x00', 0x5, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xac3}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2bc, 0xec, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x1f4, 0x202, 0x225, 0x1f4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0xc}}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0x8c0b6f020239d642], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x4, 0xfc, 0x3}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x40, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0xa, {0x1ff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) 3.087485119s ago: executing program 0 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0xfd}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r2}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004780)=@newtfilter={0xb94, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x7}, {0x0, 0xffff}, {0x0, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xb60, 0x2, [@TCA_MATCHALL_ACT={0xb54, 0x2, [@m_sample={0xaf4, 0x1c, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x4, 0x8, 0x4, 0x400}}, @TCA_SAMPLE_RATE={0x8}]}, {0xaa8, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0xb94}, 0x1, 0xf0ffffffffffff}, 0x0) 2.521981538s ago: executing program 1 (id=447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x603, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',sgq']) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, r3) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000200800034000000005140000001100"], 0x8c}}, 0x0) 2.359891031s ago: executing program 4 (id=448): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 563.06444ms ago: executing program 0 (id=449): ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002c) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 467.522982ms ago: executing program 3 (id=450): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 383.725093ms ago: executing program 1 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 360.675334ms ago: executing program 4 (id=452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r6, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 344.973904ms ago: executing program 2 (id=453): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 162.872307ms ago: executing program 1 (id=454): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286199000000000000000000ba00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x6) read$char_usb(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x24000010) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x5, 0x0, 0x1, 0xe}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsync(r7) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) 0s ago: executing program 3 (id=455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 66.092729][ T4255] cgroup: Unknown subsys name 'net' [ 66.230838][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.692005][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.360519][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.388083][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.396834][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.404669][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.405439][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.412536][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.420977][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.426867][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.433608][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.441428][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.447840][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.455268][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.461797][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.468368][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.482758][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.482958][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.491259][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.498473][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.504493][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.511628][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.518266][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.525492][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.532541][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.539526][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.546185][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.553327][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.559767][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.567392][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.574910][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.588079][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.071815][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.194709][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 70.229944][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 70.286013][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.295425][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.303937][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.312529][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 70.339185][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.346863][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.355131][ T4272] device bridge_slave_1 entered promiscuous mode [ 70.409260][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 70.439566][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.477534][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.501995][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509290][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.517882][ T4273] device bridge_slave_0 entered promiscuous mode [ 70.529682][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.537139][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.545359][ T4273] device bridge_slave_1 entered promiscuous mode [ 70.575859][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.583177][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.591147][ T4271] device bridge_slave_0 entered promiscuous mode [ 70.633577][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.640688][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.649727][ T4271] device bridge_slave_1 entered promiscuous mode [ 70.669234][ T4272] team0: Port device team_slave_0 added [ 70.700584][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.711087][ T4272] team0: Port device team_slave_1 added [ 70.732409][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.739729][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.748599][ T4269] device bridge_slave_0 entered promiscuous mode [ 70.767058][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.777903][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.795311][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.802436][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.810457][ T4266] device bridge_slave_0 entered promiscuous mode [ 70.818646][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.826549][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.834725][ T4269] device bridge_slave_1 entered promiscuous mode [ 70.851566][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.861505][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.868678][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.894830][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.907011][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.914332][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.922228][ T4266] device bridge_slave_1 entered promiscuous mode [ 70.962917][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.970125][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.996382][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.026802][ T4273] team0: Port device team_slave_0 added [ 71.035636][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.065081][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.075959][ T4273] team0: Port device team_slave_1 added [ 71.083866][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.094814][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.106116][ T4271] team0: Port device team_slave_0 added [ 71.146324][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.152748][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.163302][ T4271] team0: Port device team_slave_1 added [ 71.188528][ T4269] team0: Port device team_slave_0 added [ 71.214573][ T4266] team0: Port device team_slave_0 added [ 71.241952][ T4269] team0: Port device team_slave_1 added [ 71.248649][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.256036][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.282164][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.294155][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.301136][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.327138][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.339387][ T4266] team0: Port device team_slave_1 added [ 71.348817][ T4272] device hsr_slave_0 entered promiscuous mode [ 71.357403][ T4272] device hsr_slave_1 entered promiscuous mode [ 71.374738][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.381734][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.408063][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.419902][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.426918][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.452865][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.505977][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.512962][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.539043][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.550588][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.558005][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.584225][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.623425][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.630413][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.656575][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.668279][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.675349][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.701313][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.704249][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 71.718319][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 71.718348][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 71.718580][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 71.724911][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 71.747494][ T4273] device hsr_slave_0 entered promiscuous mode [ 71.754406][ T4273] device hsr_slave_1 entered promiscuous mode [ 71.760962][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.769304][ T4273] Cannot create hsr debugfs directory [ 71.798295][ T4271] device hsr_slave_0 entered promiscuous mode [ 71.805344][ T4271] device hsr_slave_1 entered promiscuous mode [ 71.811902][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.819648][ T4271] Cannot create hsr debugfs directory [ 71.898844][ T4266] device hsr_slave_0 entered promiscuous mode [ 71.906061][ T4266] device hsr_slave_1 entered promiscuous mode [ 71.912720][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.920437][ T4266] Cannot create hsr debugfs directory [ 72.019139][ T4269] device hsr_slave_0 entered promiscuous mode [ 72.026379][ T4269] device hsr_slave_1 entered promiscuous mode [ 72.034028][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.041624][ T4269] Cannot create hsr debugfs directory [ 72.284891][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.298036][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.311884][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.331570][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.378957][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.392756][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.413966][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.424494][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.470946][ T4269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.481387][ T4269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.519247][ T4269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.530041][ T4269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.622394][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.631491][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.642105][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.669534][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.689228][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.729076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.739469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.753931][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.777510][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.789247][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.803882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.814509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.824925][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.832236][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.846170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.862783][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.872358][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.896269][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.916278][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.925952][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.935815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.945288][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.952444][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.960254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.970775][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.989207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.997362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.026133][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.038362][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.048692][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.060419][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.097120][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.106891][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.117372][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.126676][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.137402][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.144574][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.152815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.162008][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.170642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.179705][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.188629][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.195799][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.204232][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.212716][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.221566][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.231498][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.240286][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.247713][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.255924][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.265508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.274480][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.281592][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.289604][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.298759][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.307074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.323626][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.337837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.349633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.358408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.372946][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.394316][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.406774][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.422832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.432537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.451970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.465987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.480584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.490387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.527054][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.537334][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.547666][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.558688][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.568029][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.577886][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.587372][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.598004][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.611661][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.621665][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.637604][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.648375][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.657148][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.671507][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.680097][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.691326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.702414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.722867][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.738566][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.749159][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.756360][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.774635][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.788498][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 73.796206][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 73.796224][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 73.802241][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 73.808666][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 73.835927][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.854285][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.875527][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.885695][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.892854][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.904485][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.004084][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.015424][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.035122][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.048886][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.082476][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.106264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.123720][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.131264][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.151426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.160715][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.173162][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.188837][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.198139][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.211042][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.226604][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.269339][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.290671][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.339840][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.391900][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.407361][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.427451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.445483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.463684][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.470843][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.494373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.521048][ T4273] device veth0_vlan entered promiscuous mode [ 74.558757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.574504][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.590483][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.600066][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.609061][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.616225][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.624556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.632047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.639703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.648100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.667200][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.676600][ T4273] device veth1_vlan entered promiscuous mode [ 74.695640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.710010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.741424][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.774763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.783799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.791409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.799892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.809864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.821741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.831991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.842854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.855052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.887749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.897617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.906727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.917441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.926439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.934961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.943749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.951723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.967003][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.976453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.986368][ T4272] device veth0_vlan entered promiscuous mode [ 75.000449][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.026032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.037661][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.047537][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.056616][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.071022][ T4272] device veth1_vlan entered promiscuous mode [ 75.079470][ T4273] device veth0_macvtap entered promiscuous mode [ 75.130536][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.143758][ T4273] device veth1_macvtap entered promiscuous mode [ 75.161012][ T4269] device veth0_vlan entered promiscuous mode [ 75.198694][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.213918][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.222206][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.231814][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.244819][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.252417][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.265488][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.276164][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.328809][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.343624][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.352239][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.363454][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.372313][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.400066][ T4269] device veth1_vlan entered promiscuous mode [ 75.414378][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.437053][ T4272] device veth0_macvtap entered promiscuous mode [ 75.450489][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.460188][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.487671][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.501321][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.510637][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.555918][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566960][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.576255][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585704][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.597979][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.646317][ T4272] device veth1_macvtap entered promiscuous mode [ 75.681576][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.691369][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.714938][ T4269] device veth0_macvtap entered promiscuous mode [ 75.739495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.754152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.768334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.803789][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.815168][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.828852][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.860195][ T4269] device veth1_macvtap entered promiscuous mode [ 75.866735][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 75.872811][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 75.879080][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 75.879240][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 75.885181][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 75.918484][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.928898][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.938894][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.956017][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.967822][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.982704][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.021003][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.036625][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.045322][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.057509][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.066785][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.075873][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.084742][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109430][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.120675][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.131503][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.142290][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.154584][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.170807][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.181436][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.192609][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.203353][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.217207][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.244343][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.253295][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.262070][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.271836][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.291686][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.301022][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.315849][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.318774][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.330487][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338801][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.350031][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.359940][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.386859][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.411967][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.422955][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.471557][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.480347][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.490129][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.499806][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.525969][ T4271] device veth0_vlan entered promiscuous mode [ 76.553641][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.558069][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.570862][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.575363][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.601971][ T4271] device veth1_vlan entered promiscuous mode [ 76.617822][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.626575][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.662569][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.685425][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.694550][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.705083][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.715526][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.726991][ T4266] device veth0_vlan entered promiscuous mode [ 76.741832][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.759895][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.780153][ T4271] device veth0_macvtap entered promiscuous mode [ 76.807202][ T4266] device veth1_vlan entered promiscuous mode [ 76.821413][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.831273][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.848435][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.857552][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.874435][ T4271] device veth1_macvtap entered promiscuous mode [ 76.931296][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.941243][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.949177][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.968232][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.981819][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.999309][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.011240][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.030071][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.042395][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.065550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.078185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.089556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.106255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.120897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.132504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.143717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.169326][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.174486][ T4266] device veth0_macvtap entered promiscuous mode [ 77.185916][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.204817][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.222127][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.232629][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.243942][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.254165][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.265167][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.292692][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.301782][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.312309][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.320965][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.331095][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.360732][ T4266] device veth1_macvtap entered promiscuous mode [ 77.385317][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.403763][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.433146][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.442022][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.450344][ T4384] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 77.587093][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.620738][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.675904][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.691236][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.713125][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.723489][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.735304][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.745590][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.761207][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.773635][ T26] audit: type=1326 audit(1753632579.315:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4380 comm="syz.2.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4c538e9a9 code=0x0 [ 77.781135][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.809096][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.819054][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.866514][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.877532][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887945][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.898763][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.909176][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.923852][ T4346] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.934741][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.944162][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 77.947118][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.950577][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 77.961542][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.973261][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 77.977955][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 77.983332][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 77.998125][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.021743][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.040243][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.052878][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.062686][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072288][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.081891][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.123389][ T4346] usb 2-1: Using ep0 maxpacket: 16 [ 78.157694][ T4346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.177945][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.216445][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.248498][ T4346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 78.267346][ T4346] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.315279][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.318840][ T4346] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 78.332489][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.353799][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.361999][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.374399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.419449][ T4346] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.439378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.443119][ T4346] usb 2-1: Manufacturer: syz [ 78.467224][ T4346] usb 2-1: config 0 descriptor?? [ 78.491044][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.522410][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.522949][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.539192][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.571049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.591987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.942117][ T4407] netlink: 2936 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.984132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.053293][ T4346] rc_core: IR keymap rc-hauppauge not found [ 79.059522][ T4346] Registered IR keymap rc-empty [ 79.068497][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.095794][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.144673][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.237297][ T4346] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 79.268241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.284444][ T4346] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 79.399801][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.407465][ C0] mceusb 2-1:0.0: long-range (0x20) receiver active [ 79.440388][ T4407] device bridge_slave_1 left promiscuous mode [ 79.473947][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.523220][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.573486][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.602225][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880264d1400: rx timeout, send abort [ 79.623277][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.653153][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.723906][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.837454][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.894384][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.943349][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 79.993340][ T4346] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 80.037773][ T4346] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 80.072768][ T4346] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x20 active) [ 80.111293][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880264d1400: abort rx timeout. Force session deactivation [ 80.129950][ T4346] usb 2-1: USB disconnect, device number 2 [ 80.757217][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.873323][ T4346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.083351][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 81.211565][ T4346] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 81.224943][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 81.253431][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.276417][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 81.406447][ T4346] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.526417][ T4346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 81.559540][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.613467][ T4346] usb 1-1: Product: syz [ 81.620836][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.632725][ T4346] usb 1-1: Manufacturer: syz [ 81.703945][ T4346] usb 1-1: SerialNumber: syz [ 81.852707][ T4346] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 81.972454][ T4346] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 82.024704][ T4346] usbtest: probe of 1-1:1.0 failed with error -22 [ 82.408701][ T4427] loop2: detected capacity change from 0 to 7 [ 82.506358][ T4339] usb 1-1: USB disconnect, device number 2 [ 82.786817][ T4446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.833629][ T4446] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.854930][ T4446] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 82.872859][ T4446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.878357][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.921807][ T4446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.932097][ T4446] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 82.933599][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.003480][ T4446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.025920][ T4446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.051301][ T4446] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 83.138888][ T4446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.151836][ T4446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.176036][ T4446] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 83.189585][ T4446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.211509][ T4446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.218654][ T4446] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 83.953554][ T4332] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.163354][ T4332] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 84.184376][ T4332] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.221217][ T4332] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.252754][ T4332] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.282771][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.341355][ T4332] usb 4-1: invalid MIDI out EP 0 [ 84.571756][ T4332] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 84.615422][ T4450] udevd[4450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.823654][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.903213][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.063240][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.073505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.143232][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.224277][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.551285][ T27] usb 4-1: USB disconnect, device number 2 [ 86.516921][ T7] cfg80211: failed to load regulatory.db [ 86.903141][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 86.983216][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 87.145638][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 87.223207][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 87.263156][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.303293][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 87.514954][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.548295][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.559775][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.573357][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.602910][ T4486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.024095][ T4486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.080316][ T4486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.442657][ T27] usb 3-1: USB disconnect, device number 2 [ 88.533568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.996722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.007124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.103537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.453419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.083347][ T4332] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.179834][ T4546] loop9: detected capacity change from 0 to 7 [ 92.197705][ T4450] Dev loop9: unable to read RDB block 7 [ 92.219233][ T4450] loop9: unable to read partition table [ 92.233195][ T4339] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.249242][ T4545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 92.259119][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 92.274058][ T4450] loop9: partition table beyond EOD, truncated [ 92.290377][ T4546] Dev loop9: unable to read RDB block 7 [ 92.304338][ T4332] usb 1-1: config 0 has no interfaces? [ 92.310542][ T4332] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.333199][ T4546] loop9: unable to read partition table [ 92.339006][ T4546] loop9: partition table beyond EOD, truncated [ 92.346770][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.376239][ T4546] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 92.399002][ T4332] usb 1-1: config 0 descriptor?? [ 92.443214][ T4339] usb 3-1: Using ep0 maxpacket: 16 [ 92.454810][ T4339] usb 3-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 92.473297][ T4339] usb 3-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 92.500490][ T4339] usb 3-1: config 252 has no interface number 0 [ 92.518336][ T4339] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.542045][ T4339] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 92.553085][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.560612][ T22] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 92.573413][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.582262][ T4339] usb 3-1: Product: syz [ 92.591045][ T4339] usb 3-1: Manufacturer: syz [ 92.624108][ T4339] usb 3-1: SerialNumber: syz [ 92.630624][ T4545] Zero length message leads to an empty skb [ 92.690866][ T4339] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 92.708285][ T4539] netlink: 'syz.0.32': attribute type 6 has an invalid length. [ 92.755262][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.764636][ T22] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 92.788867][ T22] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 92.799053][ T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.828355][ T22] usb 5-1: config 0 has no interface number 0 [ 92.854993][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.881504][ T22] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 92.893128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.930571][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 92.956664][ T22] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.015610][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.039807][ T22] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 93.080259][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.093501][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.127510][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.159244][ T22] usb 5-1: config 0 descriptor?? [ 93.173348][ T27] usb 4-1: Product: syz [ 93.191319][ T27] usb 4-1: Manufacturer: syz [ 93.196888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.246314][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 93.258994][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 93.294338][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 93.328137][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 93.669075][ T4257] usb 4-1: USB disconnect, device number 3 [ 93.703453][ T4360] usb 3-1: Failed to submit usb control message: -110 [ 93.722084][ T4360] usb 3-1: unable to send the bmi data to the device: -110 [ 93.791225][ T4547] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 93.814774][ T4360] usb 3-1: unable to get target info from device [ 93.830623][ T4360] usb 3-1: could not get target info (-110) [ 93.851159][ T4360] usb 3-1: could not probe fw (-110) [ 94.019729][ T22] usb 5-1: USB disconnect, device number 2 [ 95.565722][ T4257] usb 1-1: USB disconnect, device number 3 [ 95.643134][ T4346] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.905916][ T4346] usb 5-1: config 0 has no interfaces? [ 95.911492][ T4346] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.946601][ T4346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.990377][ T4346] usb 5-1: config 0 descriptor?? [ 96.430635][ T4583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.507252][ T4393] usb 3-1: USB disconnect, device number 3 [ 96.522193][ T4583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.124032][ T4393] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.325899][ T4393] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.333829][ T4346] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 97.356654][ T4393] usb 1-1: config 5 has an invalid interface number: 27 but max is 0 [ 97.381170][ T4393] usb 1-1: config 5 has no interface number 0 [ 97.404891][ T4393] usb 1-1: config 5 interface 27 has no altsetting 0 [ 97.432664][ T4393] usb 1-1: New USB device found, idVendor=07ca, idProduct=1867, bcdDevice=a9.e7 [ 97.452248][ T4393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.479791][ T4393] usb 1-1: Product: syz [ 97.489204][ T4393] usb 1-1: Manufacturer: syz [ 97.504249][ T4393] usb 1-1: SerialNumber: syz [ 97.526178][ T4346] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 97.554267][ T4346] usb 3-1: config 5 has no interface number 0 [ 97.572634][ T4346] usb 3-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 97.594224][ T4346] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 97.621080][ T4346] usb 3-1: config 5 interface 123 has no altsetting 0 [ 97.647963][ T4346] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 97.680109][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.704664][ T4346] usb 3-1: Product: syz [ 97.718876][ T4346] usb 3-1: Manufacturer: syz [ 97.729817][ T4346] usb 3-1: SerialNumber: syz [ 97.928427][ T4393] usb 1-1: USB disconnect, device number 4 [ 98.238955][ T4604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.339027][ T4604] netlink: 'syz.1.47': attribute type 10 has an invalid length. [ 98.694922][ T4604] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.756618][ T4615] loop9: detected capacity change from 0 to 7 [ 98.778916][ T4450] Dev loop9: unable to read RDB block 7 [ 98.794976][ T4450] loop9: unable to read partition table [ 98.800861][ T4450] loop9: partition table beyond EOD, truncated [ 98.969410][ T4615] Dev loop9: unable to read RDB block 7 [ 98.981162][ T4615] loop9: unable to read partition table [ 99.006004][ T4615] loop9: partition table beyond EOD, truncated [ 99.053283][ T4615] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 99.073234][ T4393] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.187175][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 99.270185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 99.295174][ T4393] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.333371][ T4393] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.417010][ T4339] usb 5-1: USB disconnect, device number 3 [ 99.491512][ T4393] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.537405][ T4393] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 99.590467][ T4393] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 99.655784][ T4393] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.690845][ T4393] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.730255][ T4393] usb 1-1: Product: syz [ 99.757040][ T4393] usb 1-1: Manufacturer: syz [ 99.803885][ T4393] cdc_wdm 1-1:1.0: skipping garbage [ 99.858021][ T4393] cdc_wdm 1-1:1.0: skipping garbage [ 99.925042][ T4393] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 99.948889][ T4393] cdc_wdm 1-1:1.0: Unknown control protocol [ 100.207498][ T4332] usb 1-1: USB disconnect, device number 5 [ 100.511573][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 100.768948][ T4635] netlink: 240 bytes leftover after parsing attributes in process `syz.4.52'. [ 101.333179][ T4339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.515251][ T4346] comedi comedi5: Wrong number of endpoints [ 101.564930][ T4339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.577277][ T4346] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 101.612509][ T4339] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.651573][ T4339] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 101.674923][ T4346] usb 3-1: USB disconnect, device number 4 [ 101.701558][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.752601][ T4339] usb 1-1: Product: syz [ 101.766354][ T4339] usb 1-1: Manufacturer: syz [ 101.775155][ T4339] usb 1-1: SerialNumber: syz [ 101.792176][ T4339] usb 1-1: config 0 descriptor?? [ 101.811835][ T4339] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 101.862521][ T4339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.884375][ T4339] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 101.909183][ T4339] usb 1-1: media controller created [ 101.972589][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.003760][ T4638] loop9: detected capacity change from 0 to 7 [ 102.041133][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.050482][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.125301][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.134539][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.167071][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.176539][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.194342][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.203604][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.211919][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.221182][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.259848][ T4661] device syzkaller0 entered promiscuous mode [ 102.286876][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.296080][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.309980][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.319204][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.327434][ T4499] ldm_validate_partition_table(): Disk read failed. [ 102.383082][ T4339] DVB: Unable to find symbol tda10046_attach() [ 102.389931][ T4339] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 102.402329][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.411542][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.437198][ T4339] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 102.447467][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.447506][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.471723][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.480929][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.491083][ T4499] Dev loop9: unable to read RDB block 0 [ 102.512173][ T4499] loop9: unable to read partition table [ 102.558297][ T4499] loop9: partition table beyond EOD, truncated [ 102.581003][ T4638] ldm_validate_partition_table(): Disk read failed. [ 102.650039][ T4638] Dev loop9: unable to read RDB block 0 [ 102.670710][ T4638] loop9: unable to read partition table [ 102.687891][ T4638] loop9: partition table beyond EOD, truncated [ 102.708374][ T4638] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 102.708374][ T4638] ) failed (rc=-5) [ 102.926452][ T4656] usb usb8: usbfs: process 4656 (syz.0.54) did not claim interface 0 before use [ 102.993653][ T4339] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 103.026060][ T4339] usb 1-1: USB disconnect, device number 6 [ 104.230483][ T4670] loop9: detected capacity change from 0 to 7 [ 104.266570][ T4670] Dev loop9: unable to read RDB block 7 [ 104.294184][ T4670] loop9: unable to read partition table [ 104.327518][ T4670] loop9: partition table beyond EOD, truncated [ 104.356970][ T4670] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 104.607849][ T4346] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.815057][ T4346] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.844940][ T4346] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.863335][ T4346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.947055][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.968177][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.010640][ T4346] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.030779][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.039104][ T4346] usb 1-1: Product: syz [ 105.048813][ T4346] usb 1-1: Manufacturer: syz [ 105.089590][ T4346] cdc_wdm 1-1:1.0: skipping garbage [ 105.095009][ T4346] cdc_wdm 1-1:1.0: skipping garbage [ 105.105684][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.120661][ T4346] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 105.127303][ T4346] cdc_wdm 1-1:1.0: Unknown control protocol [ 105.303151][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 105.312325][ T22] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.340512][ T22] usb 2-1: config 0 has no interface number 0 [ 105.352523][ T22] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.369890][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.378974][ T22] usb 2-1: Product: syz [ 105.390246][ T22] usb 2-1: Manufacturer: syz [ 105.410995][ T22] usb 2-1: SerialNumber: syz [ 105.430364][ T22] usb 2-1: config 0 descriptor?? [ 105.452576][ T4346] usb 1-1: USB disconnect, device number 7 [ 105.452741][ T22] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.645042][ T4686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.663832][ T4686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.717496][ T22] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.778620][ T22] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.908873][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 106.256187][ T4393] usb 2-1: USB disconnect, device number 3 [ 106.257906][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.335885][ T4393] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.392963][ T4393] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.415127][ T4393] quatech2 2-1:0.51: device disconnected [ 106.794584][ T4714] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 108.922577][ T4738] fuse: Bad value for 'group_id' [ 109.021976][ T4740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 109.861328][ T4746] netlink: 2936 bytes leftover after parsing attributes in process `syz.4.84'. [ 109.948792][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.258847][ T4746] device bridge_slave_1 left promiscuous mode [ 110.296674][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.185802][ T4775] process 'syz.4.91' launched './file0' with NULL argv: empty string added [ 112.004165][ T4735] capability: warning: `syz.1.79' uses 32-bit capabilities (legacy support in use) [ 112.161447][ T4780] fuse: Bad value for 'group_id' [ 112.353087][ T4332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.827108][ T4332] usb 2-1: config 66 has an invalid interface number: 195 but max is 0 [ 112.846540][ T4332] usb 2-1: config 66 has no interface number 0 [ 112.852894][ T4332] usb 2-1: config 66 interface 195 has no altsetting 0 [ 112.863450][ T4332] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 112.872803][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.881453][ T4332] usb 2-1: Product: syz [ 112.889883][ T4332] usb 2-1: Manufacturer: syz [ 112.895652][ T4332] usb 2-1: SerialNumber: syz [ 113.195249][ T4332] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 113.201675][ T4332] usb 2-1: Forcing UVC version to 1.0a [ 113.245774][ T4332] usb 2-1: No valid video chain found. [ 113.309971][ T4332] usb 2-1: USB disconnect, device number 4 [ 113.315190][ T4787] comedi comedi0: dt2801: I/O port conflict (0x1,2) [ 116.217516][ T4392] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.426753][ T4392] usb 4-1: Using ep0 maxpacket: 16 [ 116.971492][ T4808] loop9: detected capacity change from 0 to 7 [ 116.978298][ T4392] usb 4-1: unable to read config index 0 descriptor/all [ 116.996565][ T4808] Dev loop9: unable to read RDB block 7 [ 117.012598][ T4392] usb 4-1: can't read configurations, error -71 [ 117.068181][ T4808] loop9: unable to read partition table [ 117.075684][ T4808] loop9: partition table beyond EOD, truncated [ 117.131174][ T4808] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 117.210032][ T4817] fuse: Bad value for 'group_id' [ 117.423159][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.637905][ T22] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.649931][ T22] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 117.690656][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.717180][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 117.761948][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 117.810512][ T22] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.862834][ T22] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.899479][ T22] usb 2-1: Product: syz [ 117.927592][ T22] usb 2-1: Manufacturer: syz [ 117.968387][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 118.003143][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 118.075719][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 118.108178][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 118.310476][ T4339] usb 2-1: USB disconnect, device number 5 [ 119.281656][ T4848] "syz.1.113" (4848) uses obsolete ecb(arc4) skcipher [ 119.464193][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 119.473824][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 122.036861][ T4878] 9pnet_fd: Insufficient options for proto=fd [ 122.569698][ T4884] loop9: detected capacity change from 0 to 7 [ 122.613922][ T4884] Dev loop9: unable to read RDB block 7 [ 122.619727][ T4884] loop9: unable to read partition table [ 122.680702][ T4884] loop9: partition table beyond EOD, truncated [ 122.717707][ T4884] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 123.752012][ T4346] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.964775][ T4346] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.981565][ T4346] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.012382][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.041714][ T4346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 124.079667][ T4346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 124.139085][ T4346] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.196861][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.296739][ T4346] usb 4-1: Product: syz [ 124.310452][ T4346] usb 4-1: Manufacturer: syz [ 124.376032][ T4346] cdc_wdm 4-1:1.0: skipping garbage [ 124.391265][ T4346] cdc_wdm 4-1:1.0: skipping garbage [ 124.436575][ T4346] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 124.455646][ T4346] cdc_wdm 4-1:1.0: Unknown control protocol [ 124.688006][ T22] usb 4-1: USB disconnect, device number 6 [ 124.883241][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.092878][ T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 125.109041][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.120618][ T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.139293][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.154518][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.197901][ T27] usb 1-1: invalid MIDI out EP 0 [ 125.411470][ T27] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 125.484996][ T4497] udevd[4497]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.106211][ T4923] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.125297][ T4923] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.153877][ T4923] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 126.193194][ T4923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.203297][ T7] usb 1-1: USB disconnect, device number 8 [ 126.229966][ T4923] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.257839][ T4923] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 126.277237][ T4923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.294014][ T4923] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.300112][ T4923] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 126.307820][ T4923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.316533][ T4923] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.322695][ T4923] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 126.337090][ T4923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.349179][ T4923] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.390018][ T4923] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 126.633822][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 126.691482][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.005776][ T4926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.949697][ T4939] device syzkaller0 entered promiscuous mode [ 128.183346][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.263148][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.301964][ T4950] loop9: detected capacity change from 0 to 7 [ 128.326645][ T4450] Dev loop9: unable to read RDB block 7 [ 128.338198][ T4450] loop9: unable to read partition table [ 128.344074][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.344126][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.344158][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.404631][ T4450] loop9: partition table beyond EOD, truncated [ 128.424767][ T4950] Dev loop9: unable to read RDB block 7 [ 128.433265][ T4950] loop9: unable to read partition table [ 128.440371][ T4950] loop9: partition table beyond EOD, truncated [ 128.454895][ T4950] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 128.678451][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.895261][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.912631][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.934150][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.954768][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.973338][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.002493][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.021725][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.041447][ T27] usb 2-1: Product: syz [ 129.051693][ T27] usb 2-1: Manufacturer: syz [ 129.126623][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 129.153120][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 129.193251][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 129.234281][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 129.416305][ T27] usb 2-1: USB disconnect, device number 6 [ 130.263869][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 130.300659][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 130.345460][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 130.426928][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 130.427072][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 130.433187][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 132.586299][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.592718][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.091538][ T4972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.113194][ T4972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.119204][ T4972] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 134.172476][ T4972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.204112][ T4972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.233234][ T4972] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 134.241619][ T4972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.248023][ T4972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.254326][ T4972] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 134.262971][ T4972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.272343][ T4972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.285072][ T4972] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 134.295461][ T4972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.318311][ T4972] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.334392][ T4972] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 134.478720][ T4993] loop9: detected capacity change from 0 to 7 [ 134.528727][ T4993] Dev loop9: unable to read RDB block 7 [ 134.552795][ T4993] loop9: unable to read partition table [ 134.577929][ T4993] loop9: partition table beyond EOD, truncated [ 134.600791][ T4993] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 134.823183][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.943358][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.025199][ T22] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.041830][ T22] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.127035][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.167550][ T4318] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 135.180620][ T4318] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.196007][ T4318] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.210979][ T4318] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.226357][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.256525][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 135.258851][ T4318] usb 3-1: invalid MIDI out EP 0 [ 135.307925][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 135.342310][ T22] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.366303][ T22] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.437024][ T22] usb 4-1: Product: syz [ 135.460643][ T22] usb 4-1: Manufacturer: syz [ 135.481622][ T4318] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 135.505667][ T22] cdc_wdm 4-1:1.0: skipping garbage [ 136.103190][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.183109][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.263121][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.343184][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.351074][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.491027][ T22] cdc_wdm 4-1:1.0: skipping garbage [ 136.514777][ T22] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 136.520756][ T22] cdc_wdm 4-1:1.0: Unknown control protocol [ 136.546516][ T4450] udevd[4450]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.730917][ T7] usb 4-1: USB disconnect, device number 7 [ 137.074826][ T7] usb 3-1: USB disconnect, device number 5 [ 137.541897][ T5028] netlink: 196 bytes leftover after parsing attributes in process `syz.3.167'. [ 137.583852][ T5028] random: crng reseeded on system resumption [ 138.183125][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 138.273363][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 138.349932][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 138.423252][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 138.430512][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 139.016553][ T5042] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.061127][ T5042] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 139.634178][ T1150] block nbd3: Attempted send on invalid socket [ 139.742321][ T1150] blk_print_req_error: 23 callbacks suppressed [ 139.742342][ T1150] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 139.783110][ T1150] gfs2: error 10 reading superblock [ 140.188760][ T5059] binder: 5055:5059 unknown command 1074553619 [ 140.195175][ T5059] binder: 5055:5059 ioctl c0306201 200000000040 returned -22 [ 141.178500][ T5061] loop9: detected capacity change from 0 to 7 [ 141.187454][ T4450] Dev loop9: unable to read RDB block 7 [ 141.197019][ T4450] loop9: unable to read partition table [ 141.202813][ T4450] loop9: partition table beyond EOD, truncated [ 141.211163][ T5061] Dev loop9: unable to read RDB block 7 [ 141.228568][ T5061] loop9: unable to read partition table [ 141.281282][ T5061] loop9: partition table beyond EOD, truncated [ 141.336490][ T5061] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 141.543723][ T4311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.758623][ T4311] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.776898][ T4311] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.797626][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.827742][ T4311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.862367][ T4311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.896934][ T4311] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.921970][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.953350][ T4311] usb 5-1: Product: syz [ 141.961014][ T4311] usb 5-1: Manufacturer: syz [ 141.964407][ T5071] fuse: Unknown parameter 'grou00000000000000000000' [ 141.979029][ T4311] cdc_wdm 5-1:1.0: skipping garbage [ 141.993114][ T4311] cdc_wdm 5-1:1.0: skipping garbage [ 142.016282][ T4311] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 142.044969][ T4311] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.792756][ T27] usb 5-1: USB disconnect, device number 4 [ 153.615125][ T4339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.930297][ T5090] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 154.071959][ T5098] netlink: 192 bytes leftover after parsing attributes in process `syz.2.188'. [ 154.360270][ T5103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 154.367271][ T5103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.722892][ T5103] vhci_hcd vhci_hcd.0: Device attached [ 155.173159][ T5104] vhci_hcd: connection closed [ 155.202776][ T4311] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 155.209382][ T4807] vhci_hcd: stop threads [ 155.261313][ T4807] vhci_hcd: release socket [ 155.295446][ T4807] vhci_hcd: disconnect device [ 155.343459][ T5111] fuse: Unknown parameter 'grou00000000000000000000' [ 155.615109][ T5115] binder: 5114:5115 ioctl c0306201 200000000240 returned -11 [ 157.083653][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 158.752505][ T5147] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 159.077360][ T5154] fuse: Unknown parameter 'grou00000000000000000000' [ 159.143698][ T4332] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.323224][ T4332] usb 1-1: device descriptor read/64, error -71 [ 159.744653][ T5159] Process accounting resumed [ 159.813111][ T4332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.837348][ T5161] binder: 5160:5161 ioctl c0306201 200000000240 returned -11 [ 159.984159][ T4332] usb 1-1: device descriptor read/64, error -71 [ 160.113235][ T4332] usb usb1-port1: attempt power cycle [ 160.336560][ T5178] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 160.573765][ T4311] vhci_hcd: vhci_device speed not set [ 160.580346][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.893285][ T4332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.943292][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 161.195047][ T4332] usb 1-1: device descriptor read/8, error -71 [ 161.286992][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 161.295889][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.305839][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.325855][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.346471][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.367933][ T5185] fuse: Unknown parameter 'group_i00000000000000000000' [ 161.375183][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.395531][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.483251][ T4332] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.523720][ T4332] usb 1-1: device descriptor read/8, error -71 [ 161.654408][ T4332] usb usb1-port1: unable to enumerate USB device [ 161.670326][ T27] usb 5-1: usb_control_msg returned -32 [ 161.676560][ T27] usbtmc 5-1:16.0: can't read capabilities [ 162.236534][ T5193] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 162.251095][ T27] usb 5-1: USB disconnect, device number 5 [ 162.711130][ T5199] device veth0_to_team entered promiscuous mode [ 162.815072][ T5202] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.221'. [ 163.540236][ T5205] binder: 5204:5205 ioctl c0306201 200000000240 returned -11 [ 163.616914][ T5203] netlink: 2936 bytes leftover after parsing attributes in process `syz.2.222'. [ 163.704657][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.923594][ T5203] device bridge_slave_1 left promiscuous mode [ 163.948284][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.083912][ T5215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.123231][ T5215] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.130853][ T5215] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 164.167472][ T5215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.174113][ T5215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.180345][ T5215] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 164.180443][ T5219] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 164.198666][ T5215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.205406][ T5215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.211680][ T5215] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 164.220988][ T5221] fuse: Bad value for 'fd' [ 164.226888][ T5215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.233554][ T5215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.243291][ T5215] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 164.251169][ T5215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.258870][ T5215] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.266414][ T5215] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 164.488761][ T5225] netlink: 196 bytes leftover after parsing attributes in process `syz.0.231'. [ 164.705088][ T5236] lo speed is unknown, defaulting to 1000 [ 164.716917][ T5236] lo speed is unknown, defaulting to 1000 [ 164.751625][ T5236] lo speed is unknown, defaulting to 1000 [ 164.964978][ T4311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.067238][ T5236] infiniband syz0: set active [ 166.073141][ T5236] infiniband syz0: added lo [ 166.079972][ T27] lo speed is unknown, defaulting to 1000 [ 166.088898][ T5236] rdma_rxe: unable to create cq [ 166.095253][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 166.103767][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.877348][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.883519][ T5236] infiniband syz0: Couldn't create ib_mad CQ [ 166.889566][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.889613][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.897309][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.909915][ T5236] infiniband syz0: Couldn't open port 1 [ 166.942016][ T5236] RDS/IB: syz0: added [ 166.946868][ T5236] smc: adding ib device syz0 with port count 1 [ 166.953726][ T5236] smc: ib device syz0 port 1 has pnetid [ 166.988527][ T7] lo speed is unknown, defaulting to 1000 [ 167.004038][ T4311] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 167.010444][ T5236] lo speed is unknown, defaulting to 1000 [ 167.012277][ T4311] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.066745][ T4311] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.067344][ T5251] device veth0_to_team entered promiscuous mode [ 167.093405][ T5254] netlink: 2936 bytes leftover after parsing attributes in process `syz.1.239'. [ 167.102928][ T4311] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.115090][ T5255] fuse: Unknown parameter 'group_i00000000000000000000' [ 167.130973][ T4311] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.177614][ T4311] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.196919][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.248299][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.430271][ T4311] usb 3-1: usb_control_msg returned -32 [ 167.446735][ T4311] usbtmc 3-1:16.0: can't read capabilities [ 167.527822][ T5254] device bridge_slave_1 left promiscuous mode [ 167.542035][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.557662][ T5256] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.235'. [ 167.568847][ T5236] lo speed is unknown, defaulting to 1000 [ 167.633197][ T5260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.660537][ T5260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.708144][ T5260] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 167.738549][ T5260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.768682][ T5260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.782351][ T5260] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 167.800771][ T5236] lo speed is unknown, defaulting to 1000 [ 167.806787][ T5260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.829718][ T5260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.858457][ T5260] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 167.858521][ T5264] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 167.876227][ T5260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.884911][ T5260] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.897830][ T27] usb 3-1: USB disconnect, device number 6 [ 167.920154][ T5260] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 167.945466][ T5260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.965822][ T5260] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.984637][ T5260] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 168.239564][ T5236] lo speed is unknown, defaulting to 1000 [ 169.703068][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.783091][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.863083][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.953166][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.023197][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.767009][ T5236] lo speed is unknown, defaulting to 1000 [ 171.043270][ T5291] loop9: detected capacity change from 0 to 7 [ 171.756062][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.765310][ C0] buffer_io_error: 23 callbacks suppressed [ 171.765319][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.841474][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.850742][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.859251][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 171.866296][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 171.866560][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.881566][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.889762][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.899360][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.933603][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.942840][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.960192][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 171.972481][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 171.978951][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 171.988220][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.996614][ T5291] ldm_validate_partition_table(): Disk read failed. [ 172.005010][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.014223][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.022360][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.031676][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.041194][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.050517][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.063282][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.072509][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.080726][ T5291] Dev loop9: unable to read RDB block 0 [ 172.091215][ T5291] loop9: unable to read partition table [ 172.097080][ T5291] loop9: partition table beyond EOD, truncated [ 172.103489][ T5291] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.103489][ T5291] ) failed (rc=-5) [ 173.149962][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 173.156179][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 174.380233][ T5312] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 174.563190][ T5310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.573728][ T5310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 174.579767][ T5310] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 174.588819][ T5310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.595197][ T5310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.601266][ T5310] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 174.609847][ T5310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.204306][ T5310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.210357][ T5310] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 176.217751][ T5310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.224697][ T5310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.230835][ T5310] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 176.263386][ T5310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.310695][ T5310] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.324423][ T5310] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 176.471874][ T5321] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 176.478425][ T5321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.486294][ T5321] vhci_hcd vhci_hcd.0: Device attached [ 176.494435][ T5327] vhci_hcd: connection closed [ 176.499442][ T4805] vhci_hcd: stop threads [ 176.513018][ T4805] vhci_hcd: release socket [ 177.286318][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.292458][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.298731][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.353742][ T4805] vhci_hcd: disconnect device [ 177.373099][ T4393] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 177.423206][ T4332] vhci_hcd: vhci_device speed not set [ 178.650169][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.656421][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.726147][ T5344] rdma_rxe: rxe_register_device failed with error -23 [ 178.826779][ T5344] rdma_rxe: failed to add lo [ 178.860658][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.010977][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.067946][ T5347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.383355][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 179.383406][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 179.396064][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 180.073471][ T5364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.083342][ T5364] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.103695][ T5364] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 180.140424][ T5364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.160441][ T5364] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.174957][ T5364] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 180.184059][ T5364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.190063][ T5364] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.196490][ T5364] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 180.203885][ T5364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.210069][ T5364] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.216154][ T5364] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 180.223656][ T5364] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.229669][ T5364] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.239527][ T5364] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 181.306149][ T5378] 9pnet_fd: Insufficient options for proto=fd [ 182.163131][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.183082][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.016786][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.024410][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.030566][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.462996][ C0] sched: RT throttling activated [ 183.917847][ T5400] netlink: 96 bytes leftover after parsing attributes in process `syz.1.280'. [ 184.183196][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 184.263261][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 185.734598][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 185.736949][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 185.740699][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 189.536751][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 190.256637][ T5453] netlink: 96 bytes leftover after parsing attributes in process `syz.2.297'. [ 191.173625][ T5459] 9pnet_fd: Insufficient options for proto=fd [ 192.473092][ T4346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.391991][ T5475] 9pnet_fd: Insufficient options for proto=fd [ 193.535133][ T4346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.555282][ T4346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.719060][ T4346] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 193.728647][ T4346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.739468][ T4346] usb 5-1: config 0 descriptor?? [ 194.483641][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.490082][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.797392][ T4346] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 195.070375][ T4339] usb 5-1: USB disconnect, device number 6 [ 195.205992][ T5496] fido_id[5496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 196.103294][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 196.437852][ T5504] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.507767][ T5505] comedi comedi0: Minor 1 could not be opened [ 196.583312][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 196.589427][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 196.595579][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 196.601624][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 197.773277][ T5509] 9pnet_fd: Insufficient options for proto=fd [ 198.658435][ T5514] binder: 5513:5514 ioctl c0306201 200000000240 returned -11 [ 198.805176][ T5520] tipc: Started in network mode [ 198.831087][ T5520] tipc: Node identity 1641a6cfa80f, cluster identity 4711 [ 198.887441][ T5520] tipc: Enabled bearer , priority 0 [ 198.888116][ T5523] device syzkaller0 entered promiscuous mode [ 199.212051][ T5520] tipc: Resetting bearer [ 202.240484][ T4318] tipc: Node number set to 3192825551 [ 202.307816][ T5519] tipc: Resetting bearer [ 202.387151][ T5519] tipc: Disabling bearer [ 202.444208][ T5533] loop9: detected capacity change from 0 to 7 [ 202.489888][ T5531] Dev loop9: unable to read RDB block 7 [ 202.495826][ T5531] loop9: unable to read partition table [ 202.533248][ T5531] loop9: partition table beyond EOD, truncated [ 202.766817][ T5533] Dev loop9: unable to read RDB block 7 [ 202.773209][ T5533] loop9: unable to read partition table [ 202.805331][ T5533] loop9: partition table beyond EOD, truncated [ 202.879426][ T5543] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 202.879426][ T5543] [ 203.449477][ T5533] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 204.463058][ T4339] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 204.622373][ T26] audit: type=1804 audit(1753632706.135:3): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.319" name="/newroot/75/file1" dev="fuse" ino=1 res=1 errno=0 [ 204.763298][ T4339] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.771981][ T4339] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 204.782731][ T4339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.865329][ T4339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 204.929430][ T26] audit: type=1800 audit(1753632706.135:4): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 204.943021][ T4339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.019947][ T4339] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.107140][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.122523][ T4339] usb 5-1: Product: syz [ 205.129561][ T4339] usb 5-1: Manufacturer: syz [ 205.204613][ T4339] cdc_wdm 5-1:1.0: skipping garbage [ 205.210709][ T4339] cdc_wdm 5-1:1.0: skipping garbage [ 205.278349][ T4339] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 205.285189][ T4339] cdc_wdm 5-1:1.0: Unknown control protocol [ 205.587664][ T26] audit: type=1804 audit(1753632706.135:5): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.319" name="/newroot/75/file1" dev="fuse" ino=1 res=1 errno=0 [ 205.649830][ T4339] usb 5-1: USB disconnect, device number 7 [ 205.662154][ T26] audit: type=1800 audit(1753632706.135:6): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.319" name="/" dev="fuse" ino=1 res=0 errno=0 [ 205.877224][ T5562] binder: 5561:5562 ioctl c0306201 200000000240 returned -11 [ 206.014413][ T5570] 9pnet_fd: Insufficient options for proto=fd [ 208.641299][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 208.925875][ T5584] tipc: Enabling of bearer rejected, failed to enable media [ 209.983728][ T5595] device veth0_to_team entered promiscuous mode [ 210.530616][ T5616] loop9: detected capacity change from 0 to 7 [ 210.548660][ T5616] Dev loop9: unable to read RDB block 7 [ 210.654681][ T5616] loop9: unable to read partition table [ 210.688323][ T5616] loop9: partition table beyond EOD, truncated [ 210.833186][ T5616] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 210.910234][ T5619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.105586][ T4393] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.121767][ T5622] binder: 5620:5622 ioctl c0306201 200000000240 returned -11 [ 211.353866][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.381222][ T5615] device bridge_slave_0 left promiscuous mode [ 211.388235][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.405508][ T4393] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.463286][ T4393] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.483337][ T4393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.525143][ T4393] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.575418][ T4393] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.748997][ T4393] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.743062][ T4393] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.753241][ T4393] usb 3-1: Product: syz [ 212.761480][ T4393] usb 3-1: Manufacturer: syz [ 215.252068][ T4393] cdc_wdm 3-1:1.0: skipping garbage [ 215.464921][ T4393] cdc_wdm 3-1:1.0: skipping garbage [ 215.503344][ T4393] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 215.516642][ T4393] cdc_wdm 3-1:1.0: Unknown control protocol [ 216.323064][ T26] audit: type=1804 audit(1753632717.145:7): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.343" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 216.582231][ T26] audit: type=1800 audit(1753632717.145:8): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.004282][ T26] audit: type=1804 audit(1753632717.145:9): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.343" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.091882][ T4311] usb 3-1: USB disconnect, device number 8 [ 217.122154][ T26] audit: type=1800 audit(1753632717.145:10): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.192165][ T26] audit: type=1804 audit(1753632718.465:11): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.344" name="/newroot/80/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.213434][ T26] audit: type=1800 audit(1753632718.465:12): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.344" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.604641][ T26] audit: type=1804 audit(1753632718.465:13): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.344" name="/newroot/80/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.629336][ T26] audit: type=1800 audit(1753632718.465:14): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.344" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.710809][ T5654] capability: warning: `syz.2.346' uses deprecated v2 capabilities in a way that may be insecure [ 220.327777][ T5682] 9pnet_fd: Insufficient options for proto=fd [ 225.123215][ T5703] program syz.1.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.696184][ T5706] Process accounting resumed [ 228.680770][ T5740] 9pnet_fd: Insufficient options for proto=fd [ 229.500902][ T5745] syz.0.368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.210171][ T5758] Bluetooth: MGMT ver 1.22 [ 231.586134][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 232.996183][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.744985][ T5765] device bridge_slave_1 left promiscuous mode [ 233.751293][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.512042][ T5769] Process accounting resumed [ 237.334337][ T5797] 9pnet_fd: Insufficient options for proto=fd [ 237.571701][ T5792] device veth0_to_team entered promiscuous mode [ 240.916259][ T26] audit: type=1804 audit(1753632741.465:15): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.381" name="/newroot/75/file1" dev="fuse" ino=1 res=1 errno=0 [ 241.109195][ T26] audit: type=1800 audit(1753632741.475:16): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.381" name="/" dev="fuse" ino=1 res=0 errno=0 [ 241.214716][ T5819] netlink: 168 bytes leftover after parsing attributes in process `syz.1.385'. [ 241.255662][ T5821] loop9: detected capacity change from 0 to 7 [ 241.273146][ T5821] Dev loop9: unable to read RDB block 7 [ 241.278797][ T5821] loop9: unable to read partition table [ 241.408698][ T5821] loop9: partition table beyond EOD, truncated [ 241.430354][ T5821] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 241.538027][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 241.593187][ T4311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.794832][ T4311] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.808345][ T4311] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.819081][ T4311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.828501][ T4311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.842378][ T4311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.857687][ T4311] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.869832][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.882453][ T4311] usb 4-1: Product: syz [ 241.893346][ T4311] usb 4-1: Manufacturer: syz [ 241.941759][ T4311] cdc_wdm 4-1:1.0: skipping garbage [ 241.960355][ T4311] cdc_wdm 4-1:1.0: skipping garbage [ 242.013290][ T4311] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 242.039130][ T4311] cdc_wdm 4-1:1.0: Unknown control protocol [ 244.815748][ T5798] usb 4-1: USB disconnect, device number 9 [ 245.139283][ T5856] binder_alloc: 5852: binder_alloc_buf, no vma [ 245.438929][ T5858] 9pnet_fd: Insufficient options for proto=fd [ 245.530675][ T5862] 9pnet_fd: Insufficient options for proto=fd [ 245.869849][ T5856] binder: 5852:5856 ioctl c0306201 200000000240 returned -11 [ 248.174385][ T5882] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.400'. [ 248.514609][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 249.514429][ T5874] Process accounting resumed [ 249.639970][ T5906] fuse: Unknown parameter 'use00000000000000000000' [ 250.051776][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 250.345134][ T5921] netlink: 240 bytes leftover after parsing attributes in process `syz.3.411'. [ 251.268077][ T5937] loop9: detected capacity change from 0 to 7 [ 251.281459][ T5937] Dev loop9: unable to read RDB block 7 [ 251.298134][ T5937] loop9: unable to read partition table [ 251.310641][ T5937] loop9: partition table beyond EOD, truncated [ 251.332629][ T5937] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 251.919482][ T5930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.931499][ T5930] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.947506][ T5930] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 251.956079][ T5930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.962580][ T5930] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.969626][ T5930] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 251.977259][ T5930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.983796][ T5930] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.989938][ T5930] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 251.997841][ T5930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.004316][ T5930] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 252.010487][ T5930] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 252.019246][ T5930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.025787][ T5930] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.031884][ T5930] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 252.212862][ T5942] netlink: 2932 bytes leftover after parsing attributes in process `syz.1.419'. [ 252.323335][ T4339] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 252.330946][ T5798] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.533381][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 252.540238][ T4339] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.549843][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.560300][ T4339] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.571678][ T4339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.587517][ T4339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.603475][ T5798] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 252.621073][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.634774][ T4339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.646197][ T5798] usb 4-1: Product: syz [ 252.650474][ T5798] usb 4-1: Manufacturer: syz [ 252.655355][ T5798] usb 4-1: SerialNumber: syz [ 252.662448][ T5948] fuse: Unknown parameter 'use00000000000000000000' [ 252.662552][ T4339] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.680657][ T5798] usb 4-1: config 0 descriptor?? [ 252.685927][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.696871][ T5798] smsusb:smsusb_probe: board id=2, interface number 0 [ 252.704061][ T4339] usb 3-1: Product: syz [ 252.708535][ T4339] usb 3-1: Manufacturer: syz [ 252.714965][ T5798] smsusb:smsusb_probe: Device initialized with return code -19 [ 252.746638][ T4339] cdc_wdm 3-1:1.0: skipping garbage [ 252.756303][ T4339] cdc_wdm 3-1:1.0: skipping garbage [ 252.767097][ T4339] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 252.782267][ T4339] cdc_wdm 3-1:1.0: Unknown control protocol [ 253.128483][ T4339] usb 3-1: USB disconnect, device number 9 [ 253.175422][ T5798] usb 4-1: USB disconnect, device number 10 [ 253.223219][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.774117][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 255.893996][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.900324][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.915422][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 255.921505][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.930017][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.933472][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.936477][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 256.203387][ T5978] netlink: 240 bytes leftover after parsing attributes in process `syz.3.424'. [ 256.395883][ T5988] netlink: 2932 bytes leftover after parsing attributes in process `syz.1.431'. [ 256.604119][ T5994] fuse: Bad value for 'fd' [ 257.042655][ T5981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.066273][ T5981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 257.074206][ T5981] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 257.083351][ T5981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.089458][ T5981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.143675][ T5981] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 258.023189][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 258.213267][ T6004] 9pnet_fd: Insufficient options for proto=fd [ 258.273057][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.650040][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 258.656446][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 258.688739][ T5981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.705499][ T5981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.716866][ T5981] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 258.728523][ T5981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.738876][ T5981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.749117][ T5981] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 258.833920][ T5981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.868111][ T5981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.877693][ T5981] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 259.136086][ T6013] loop9: detected capacity change from 0 to 7 [ 259.143411][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.162748][ T5537] Dev loop9: unable to read RDB block 7 [ 259.173184][ T5537] loop9: unable to read partition table [ 259.180276][ T5537] loop9: partition table beyond EOD, truncated [ 259.316587][ T6013] Dev loop9: unable to read RDB block 7 [ 259.322248][ T6013] loop9: unable to read partition table [ 259.353262][ T6013] loop9: partition table beyond EOD, truncated [ 261.804644][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.804670][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 261.810703][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 261.816751][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.816786][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.833930][ T6013] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 263.143297][ T6025] 9pnet_fd: Insufficient options for proto=fd [ 263.863378][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 263.865984][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 263.869431][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 263.949259][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 263.976422][ T6043] netlink: 240 bytes leftover after parsing attributes in process `syz.3.444'. [ 264.071994][ T6048] netlink: 2932 bytes leftover after parsing attributes in process `syz.0.446'. [ 265.833327][ T6055] 9pnet_fd: Insufficient options for proto=fd [ 266.370645][ T6059] fuse: Unknown parameter 'user_i00000000000000000000' [ 266.951337][ T6076] loop9: detected capacity change from 0 to 7 [ 266.959486][ T5537] Dev loop9: unable to read RDB block 7 [ 371.982947][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 371.989978][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6077/1:b..l P4346/1:b..l P46/1:b..l [ 372.000580][ C1] (detected by 1, t=10502 jiffies, g=23749, q=16 ncpus=2) [ 372.007808][ C1] task:kworker/u4:3 state:R running task stack:24456 pid:46 ppid:2 flags:0x00004000 [ 372.019791][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 372.027684][ C1] Call Trace: [ 372.030992][ C1] [ 372.033974][ C1] __schedule+0x10ec/0x40b0 [ 372.038547][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 372.044482][ C1] ? lock_chain_count+0x20/0x20 [ 372.049395][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 372.054718][ C1] preempt_schedule_irq+0xb1/0x150 [ 372.059867][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 372.065644][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 372.071507][ C1] irqentry_exit+0x63/0x70 [ 372.075975][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.081987][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 372.087315][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 372.106983][ C1] RSP: 0018:ffffc90000b77920 EFLAGS: 00000206 [ 372.113095][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 9ecbfc50fbb56c00 [ 372.121204][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320 [ 372.129217][ C1] RBP: ffffc90000b77a28 R08: dffffc0000000000 R09: fffffbfff215ba49 [ 372.137237][ C1] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: 0000000000000000 [ 372.147099][ C1] R13: 1ffff9200016ef30 R14: 0000000000000246 R15: dffffc0000000000 [ 372.155140][ C1] ? read_lock_is_recursive+0x10/0x10 [ 372.160640][ C1] ? batadv_primary_if_get_selected+0x77/0x400 [ 372.166848][ C1] ? batadv_iv_ogm_queue_add+0xcf0/0xcf0 [ 372.172719][ C1] batadv_iv_ogm_schedule+0x413/0xe90 [ 372.178224][ C1] ? batadv_iv_ogm_schedule+0x3ef/0xe90 [ 372.183851][ C1] ? batadv_iv_ogm_schedule+0x3ef/0xe90 [ 372.189578][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 372.196837][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 372.203928][ C1] ? process_one_work+0x7a1/0x1160 [ 372.209094][ C1] process_one_work+0x898/0x1160 [ 372.214101][ C1] ? worker_detach_from_pool+0x240/0x240 [ 372.219798][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 372.224869][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 372.230293][ C1] ? kthread_data+0x4b/0xc0 [ 372.234946][ C1] worker_thread+0xaa2/0x1250 [ 372.239701][ C1] kthread+0x29d/0x330 [ 372.243816][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 372.248975][ C1] ? kthread_blkcg+0xd0/0xd0 [ 372.253614][ C1] ret_from_fork+0x1f/0x30 [ 372.258094][ C1] [ 372.261142][ C1] task:kworker/0:5 state:R running task stack:21248 pid:4346 ppid:2 flags:0x00004000 [ 372.271969][ C1] Workqueue: events_power_efficient gc_worker [ 372.278082][ C1] Call Trace: [ 372.281388][ C1] [ 372.284466][ C1] __schedule+0x10ec/0x40b0 [ 372.289048][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 372.294981][ C1] ? lock_chain_count+0x20/0x20 [ 372.300057][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x830/0xc00 [ 372.306775][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 372.312105][ C1] preempt_schedule_irq+0xb1/0x150 [ 372.317344][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 372.323109][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 372.328959][ C1] irqentry_exit+0x63/0x70 [ 372.333417][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 372.338910][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17b/0x1c0 [ 372.345799][ C1] Code: f9 4d 85 e4 75 16 e8 f4 34 20 f9 eb 15 e8 ed 34 20 f9 e8 08 90 b5 01 4d 85 e4 74 ea e8 de 34 20 f9 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 372.365536][ C1] RSP: 0018:ffffc90004687a20 EFLAGS: 00000293 [ 372.371652][ C1] RAX: ffffffff88609202 RBX: 0000000000000000 RCX: ffff888027730000 [ 372.379670][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.387680][ C1] RBP: ffffc90004687ad0 R08: dffffc0000000000 R09: fffffbfff215ba5b [ 372.395692][ C1] R10: fffffbfff215ba5b R11: 1ffffffff215ba5a R12: 0000000000000200 [ 372.403746][ C1] R13: ffff888027d09548 R14: 1ffff920008d0f44 R15: dffffc0000000000 [ 372.411762][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 372.418058][ C1] ? nf_conntrack_hash_check_insert+0x9c0/0x9c0 [ 372.424363][ C1] gc_worker+0x30c/0x13d0 [ 372.428749][ C1] ? gc_worker+0x261/0x13d0 [ 372.433298][ C1] ? init_conntrack+0x1140/0x1140 [ 372.438369][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 372.443615][ C1] ? process_one_work+0x7a1/0x1160 [ 372.448770][ C1] process_one_work+0x898/0x1160 [ 372.453761][ C1] ? worker_detach_from_pool+0x240/0x240 [ 372.459448][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 372.464548][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 372.470048][ C1] ? kthread_data+0x4b/0xc0 [ 372.474602][ C1] worker_thread+0xaa2/0x1250 [ 372.479337][ C1] ? __kthread_parkme+0x162/0x1c0 [ 372.484412][ C1] kthread+0x29d/0x330 [ 372.488523][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 372.493583][ C1] ? kthread_blkcg+0xd0/0xd0 [ 372.498243][ C1] ret_from_fork+0x1f/0x30 [ 372.502714][ C1] [ 372.505802][ C1] task:syz.3.455 state:R running task stack:27584 pid:6077 ppid:4269 flags:0x00004000 [ 372.516626][ C1] Call Trace: [ 372.519946][ C1] [ 372.522905][ C1] __schedule+0x10ec/0x40b0 [ 372.527459][ C1] ? kmem_cache_free+0xf7/0x290 [ 372.532376][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 372.538318][ C1] ? lock_chain_count+0x20/0x20 [ 372.543225][ C1] ? mark_lock+0x94/0x320 [ 372.547611][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 372.553044][ C1] preempt_schedule_irq+0xb1/0x150 [ 372.558195][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 372.563959][ C1] ? rcu_is_watching+0x11/0xa0 [ 372.568779][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 372.574646][ C1] irqentry_exit+0x63/0x70 [ 372.579107][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.585301][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 372.591402][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 87 9e 0c 48 89 de 5b e9 87 53 4f 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 54 a8 81 7e 65 8b 15 55 a8 81 7e 81 e2 00 [ 372.611059][ C1] RSP: 0018:ffffc900030c75b8 EFLAGS: 00000293 [ 372.617353][ C1] RAX: ffffffff8a03e3a8 RBX: ffff88807c7b6808 RCX: 0000000000000000 [ 372.625359][ C1] RDX: ffff88802c44d940 RSI: 0000000000000001 RDI: 0000000000000003 [ 372.633363][ C1] RBP: ffffc900030c7790 R08: ffff88802c44d940 R09: 0000000000000004 [ 372.641470][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 000000110c22ffff [ 372.649475][ C1] R13: ffff88807c7b6800 R14: 0000000000000001 R15: 0000000000000000 [ 372.657495][ C1] ? mt_validate+0x2b18/0x4c90 [ 372.662330][ C1] mt_validate+0x2b68/0x4c90 [ 372.666986][ C1] ? mt_validate+0xf2/0x4c90 [ 372.671634][ C1] ? mt_cache_shrink+0x20/0x20 [ 372.676470][ C1] validate_mm_mt+0xcd/0x420 [ 372.681104][ C1] ? __split_vma+0x500/0x500 [ 372.685745][ C1] ? uprobe_mmap+0x17a/0x10b0 [ 372.690471][ C1] validate_mm+0xcc/0x2b0 [ 372.694840][ C1] ? vma_expand+0x880/0x880 [ 372.699406][ C1] ? preempt_count_add+0x8d/0x190 [ 372.704466][ C1] ? up_write+0x1bb/0x420 [ 372.708842][ C1] vma_expand+0x826/0x880 [ 372.713236][ C1] mmap_region+0xd5d/0x1d30 [ 372.717798][ C1] ? file_mmap_ok+0x170/0x170 [ 372.722523][ C1] ? validate_mm+0x22a/0x2b0 [ 372.727152][ C1] ? cap_mmap_addr+0x165/0x2e0 [ 372.731971][ C1] ? file_mmap_ok+0x11c/0x170 [ 372.736697][ C1] do_mmap+0x894/0xf30 [ 372.740829][ C1] ? mlock_future_check+0x100/0x100 [ 372.746077][ C1] ? ima_file_mmap+0x8e/0x150 [ 372.750798][ C1] ? ima_file_free+0x3e0/0x3e0 [ 372.755617][ C1] ? common_file_perm+0x171/0x1c0 [ 372.760697][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 372.765431][ C1] ? account_locked_vm+0xe0/0xe0 [ 372.770431][ C1] ksys_mmap_pgoff+0x516/0x6f0 [ 372.775237][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 372.780480][ C1] do_syscall_64+0x4c/0xa0 [ 372.784945][ C1] ? clear_bhb_loop+0x60/0xb0 [ 372.789667][ C1] ? clear_bhb_loop+0x60/0xb0 [ 372.794380][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.800322][ C1] RIP: 0033:0x7f9b3bb8e9e3 [ 372.804792][ C1] RSP: 002b:00007ffce70b7e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 372.813259][ C1] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007f9b3bb8e9e3 [ 372.821265][ C1] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2e460000 [ 372.829357][ C1] RBP: 0000001b2e460000 R08: 0000000000000004 R09: 0000000000040000 [ 372.837365][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000064 [ 372.845367][ C1] R13: 00000000000927c0 R14: 00000000000411a6 R15: 00007ffce70b8170 [ 372.853391][ C1] [ 372.856439][ C1] rcu: rcu_preempt kthread starved for 10588 jiffies! g23749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 372.867669][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 372.877667][ C1] rcu: RCU grace-period kthread stack dump: [ 372.883663][ C1] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 372.894566][ C1] Call Trace: [ 372.897890][ C1] [ 372.900861][ C1] __schedule+0x10ec/0x40b0 [ 372.905445][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 372.911411][ C1] schedule+0xb9/0x180 [ 372.915535][ C1] schedule_timeout+0x15c/0x280 [ 372.920439][ C1] ? console_conditional_schedule+0x40/0x40 [ 372.926373][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 372.932410][ C1] ? update_process_times+0x1b0/0x1b0 [ 372.937839][ C1] ? prepare_to_swait_event+0x335/0x350 [ 372.943440][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 372.948343][ C1] ? rcu_gp_kthread+0x380/0x380 [ 372.953240][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 372.959275][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 372.964072][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 372.968962][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 372.974207][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 372.979451][ C1] rcu_gp_kthread+0x95/0x380 [ 372.984081][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 372.989227][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 372.995814][ C1] ? __kthread_parkme+0x162/0x1c0 [ 373.000926][ C1] kthread+0x29d/0x330 [ 373.005053][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 373.010203][ C1] ? kthread_blkcg+0xd0/0xd0 [ 373.014855][ C1] ret_from_fork+0x1f/0x30 [ 373.019339][ C1] [ 373.022392][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 373.028757][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.147-syzkaller #0 [ 373.036604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.046707][ C1] RIP: 0010:default_idle+0xb/0x10 [ 373.051795][ C1] Code: 48 89 df e8 c7 c9 b0 f7 e9 4c ff ff ff e8 ed 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 67 85 66 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 373.071546][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 373.077657][ C1] RAX: 813511a1c8f14100 RBX: ffffffff8a201e87 RCX: 813511a1c8f14100 [ 373.085662][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0460 RDI: ffffffff8adef320 [ 373.093753][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6 [ 373.101759][ C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001 [ 373.109765][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffffffff1c3e9b6 [ 373.117956][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 373.126920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.133541][ C1] CR2: 00007f9b3ba5efb0 CR3: 000000002fb36000 CR4: 00000000003506e0 [ 373.141606][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.149638][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.157661][ C1] Call Trace: [ 373.160970][ C1] [ 373.163929][ C1] default_idle_call+0x84/0xc0 [ 373.168743][ C1] do_idle+0x1fc/0x570 [ 373.172869][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 373.178107][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 373.184315][ C1] ? schedule_idle+0x57/0x90 [ 373.188943][ C1] cpu_startup_entry+0x3f/0x60 [ 373.193749][ C1] start_secondary+0xe4/0xf0 [ 373.198392][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 373.204345][ C1]