last executing test programs: 6.587683196s ago: executing program 2 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000100001002cbd70002000000000000000", @ANYRES32=0x0], 0x70}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0xbd, "a7a157f309dc52c51e42ea955a2637d260cc803c99f782cdf9ff9ba063c2bd6ef07d26ec0833a0c892e7d965e01a1013f3afb1fe4537e9fe55f97af76d0e035e2d428eec3ae05b2927a499a3253325d5e8430dece06b6f7a13060e7cbf7405f47129f255b28bc7894ddb6ed2c0674ad5872b4b5f384208a403cfd55d156c84fd994b51bff47417a5b91528473a7c1cbb9bff3d70634bb2883dae738b3f96b0de5774987d20933bbe2a4f701ebbf6ba8f2fd8d717bb9607704b4b8e7b44"}}) close(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.548504279s ago: executing program 3 (id=389): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, 0x0, 0x20020000) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 6.331792478s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 5.447901016s ago: executing program 3 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="66baf80cb8044fdc87ed660f388059e0b805000000b91e4200000f05e5060620c035000000200f22c0f20fa20f01cb64660f3a0c890b00000000660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x54}], 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[], 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.10131767s ago: executing program 2 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xb, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2405c0e1}, 0x4008000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbe9b55400040000ea0756", 0xe, 0x20005040, &(0x7f00000001c0)={0x11, 0x2, r2, 0x1, 0x98}, 0x14) 5.090140961s ago: executing program 1 (id=396): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "91"}, @main=@item_4={0x3, 0x0, 0x8, "4a054e1e"}]}}, 0x0}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) 5.047013273s ago: executing program 3 (id=398): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000050) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1", 0x11, 0x0, &(0x7f0000000140), 0x14) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x0, 0x45833af92e4b39ff, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x33455aed6cbf4c1b) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) chdir(&(0x7f00000002c0)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r5 = open(&(0x7f0000000000)='./file0\x00', 0x607240, 0x40) futex(&(0x7f0000000900)=0x1, 0x1, 0x0, &(0x7f0000000940), &(0x7f0000000980)=0x1, 0x1) fcntl$notify(r5, 0x402, 0x8000003d) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x7, "8c740a1b"}, @global=@item_012={0x1, 0x1, 0x7, "d6"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000009c0)={0x20, 0x21, 0xd8, {0xd8, 0xd, "188feb2a46009c6ce98b4b19d0b14b6a38df1aee7ae7694d6231f3eb366f63f0ab89437fee3293bad2f41973eacb11c998779afa5cd64b06173233e9883e156feefa1132b2e14dc1146d314680809ffdc5d8987a03846e40af14f8a747baf4800b618889eb54b2f4931a95627b702e060d8666189977bed66122018c41ef393a3b792677fc9cae049e94a4d39249ae24abb2d0b1e2dfa6ee86195a0c928530c68135a682c6cf92adbc48741b79dad03cacf9d0cb1abe24268a088ffcd29aad296aea664dca2d99b4a90fd338de2f6ed1003cc491e564"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x2, 0x6, 0x0, 0x4255, 0x800}}}, &(0x7f0000000840)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xa0, 0x4}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xaa8b}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000600)={0x40, 0xb, 0x2, "44d5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="5b978d7034c2"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xd}}) open(&(0x7f0000000280)='./cgroup\x00', 0x40, 0xa0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 4.801886973s ago: executing program 2 (id=399): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000440)=[{0x1, 0xb210, 0x0, 0x0}, {0x9, 0xb801, 0x0, 0x0}, {0x400, 0x1200, 0x3, &(0x7f0000000240)="e9ab82"}, {0xfffb, 0x200, 0x42, &(0x7f0000000380)="f72c2644d6e9771b6a364752cf1a15387bb39a69c25eed0b44dfa807bd7accb9eee6adb14ff2b315edafa72a72c77efa40797d020236ab2961cb147fd9b40835b7c1"}, {0x5, 0x3800, 0x0, 0x0}], 0x5}) 4.096587374s ago: executing program 4 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000100001002cbd70002000000000000000", @ANYRES32=0x0], 0x70}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macvlan0\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0xbd, "a7a157f309dc52c51e42ea955a2637d260cc803c99f782cdf9ff9ba063c2bd6ef07d26ec0833a0c892e7d965e01a1013f3afb1fe4537e9fe55f97af76d0e035e2d428eec3ae05b2927a499a3253325d5e8430dece06b6f7a13060e7cbf7405f47129f255b28bc7894ddb6ed2c0674ad5872b4b5f384208a403cfd55d156c84fd994b51bff47417a5b91528473a7c1cbb9bff3d70634bb2883dae738b3f96b0de5774987d20933bbe2a4f701ebbf6ba8f2fd8d717bb9607704b4b8e7b44"}}) close(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.881784434s ago: executing program 4 (id=401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close_range(0xffffffffffffffff, r0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.787914157s ago: executing program 0 (id=402): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55, r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 3.26773176s ago: executing program 4 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0xc) 2.830356669s ago: executing program 0 (id=404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x3}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) keyctl$revoke(0x3, r2) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010004b0400000000000000007a000000", @ANYRES32=0x0], 0x5c}}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x3}, 0x2f) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f0000001e40)={0x2020}, 0x2020) preadv(r7, &(0x7f0000005500)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1, 0x8, 0xb553) 2.765291691s ago: executing program 1 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2.57399634s ago: executing program 0 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.378961868s ago: executing program 0 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000300)={{0x2, 0x0, 0x5151, 0x1, 0x26}, 0x8001, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x7d, 0x6, 0x9, 0x7f8000}) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.273925733s ago: executing program 4 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x8, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x81, 0x7, 0x5c, 0x7, 0x1, 0x81, 0xd}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.176625417s ago: executing program 4 (id=409): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xb, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2405c0e1}, 0x4008000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbe9b55400040000ea0756", 0xe, 0x20005040, &(0x7f00000001c0)={0x11, 0x2, r2, 0x1, 0x98}, 0x14) 2.10056637s ago: executing program 3 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @loopback, 0x10000}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r5, 0x40099d}}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) 1.989851405s ago: executing program 2 (id=411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000340)=0x6) 1.826940472s ago: executing program 0 (id=412): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x20020600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') getdents64(r5, 0xffffffffffffffff, 0x43) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) 1.825380412s ago: executing program 1 (id=413): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) 1.097836553s ago: executing program 1 (id=414): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55, r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 1.088093274s ago: executing program 3 (id=415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 985.420678ms ago: executing program 3 (id=416): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10081, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x2, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x1ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0xffff, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) 856.299124ms ago: executing program 4 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 393.606234ms ago: executing program 0 (id=418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x800) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xb}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x30, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xa4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x20}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x26044078}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$media(0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x8004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) 188.486352ms ago: executing program 1 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x8, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x81, 0x7, 0x5c, 0x7, 0x1, 0x81, 0xd}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.028061ms ago: executing program 2 (id=420): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x1}, {0x4, 0x2, 0x2}, {0x1, 0x0, 0x3a}, {0x2, 0x5b69, 0x8000}, {0x5, 0x40, 0x6}, {0x1, 0x0, 0xf328}, {0x5, 0x0, 0x2}], "dc"}]}}, 0x0, 0x7e, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 0s ago: executing program 1 (id=421): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x12, 0xc, 0x4, 0x4747}, 0x50) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x9, 0x200100) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r2, 0x1ff, 0xffffffffffffffff, 0x8b}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r5, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 27.974958][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.995067][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. syzkaller login: [ 48.761839][ T4170] cgroup: Unknown subsys name 'net' [ 48.919877][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.130809][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.951157][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.001749][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.072435][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.121843][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.137746][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.145015][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.152871][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.184011][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.191198][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.198906][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.217734][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.258185][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.267484][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.274985][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.282647][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.303185][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.312763][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.320132][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.328624][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.381968][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.389230][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.397607][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.419884][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.427658][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.436030][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.449543][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.456830][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.464960][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.473899][ T4186] team0: Port device team_slave_0 added [ 52.482105][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.491549][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.498771][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.507576][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.543479][ T4186] team0: Port device team_slave_1 added [ 52.559129][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.573985][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.582362][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.590665][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.599686][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.628618][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.636934][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.644811][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.653292][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.663334][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.670348][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.696432][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.718213][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.743992][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.751035][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.777814][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.791635][ T4188] team0: Port device team_slave_0 added [ 52.799164][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.834581][ T4188] team0: Port device team_slave_1 added [ 52.850423][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.861882][ T4193] team0: Port device team_slave_0 added [ 52.879092][ T4182] team0: Port device team_slave_0 added [ 52.887027][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.905348][ T4193] team0: Port device team_slave_1 added [ 52.926323][ T4182] team0: Port device team_slave_1 added [ 52.932858][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.939916][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.965975][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.996177][ T4181] team0: Port device team_slave_0 added [ 53.016108][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.023085][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.049661][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.070590][ T4181] team0: Port device team_slave_1 added [ 53.081817][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.089121][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.115032][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.138400][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.145614][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.159126][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.166360][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.192825][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.204808][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.211763][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.237867][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.250398][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.257413][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.283318][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.323907][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.330978][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.356997][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.369315][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.376405][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.402485][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.448886][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.455779][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.462346][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.470991][ T4193] Cannot create hsr debugfs directory [ 53.479280][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.486402][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.493185][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.500874][ T4188] Cannot create hsr debugfs directory [ 53.550715][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.558311][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.564896][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.572475][ T4182] Cannot create hsr debugfs directory [ 53.603035][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.609992][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.617078][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.625134][ T4181] Cannot create hsr debugfs directory [ 53.635550][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.644722][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.645237][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.714711][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.722944][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.902734][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.914042][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.925700][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.939159][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.981852][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.993514][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.009851][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.032430][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.100523][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.118317][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.130528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.140172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.149483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.158340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.170152][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.177396][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.189813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.199905][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.210184][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.219791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.230213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.239634][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.246741][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.265159][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.287483][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.299402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.324391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.349430][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.362411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.372184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.386183][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.395388][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.404003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.441900][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.449573][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.465858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.478492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.487244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.496809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.508632][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.530517][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.537998][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.548629][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.561039][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.571493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.580330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.588339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.597335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.615740][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.625687][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.638795][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.648397][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.657924][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.665037][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.705909][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.714021][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.728570][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.737549][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.744665][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.752725][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.762155][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.772126][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.781938][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.790655][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.818353][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.827257][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.836839][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.844346][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.854425][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.863165][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.876758][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.894002][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.905365][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.926402][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.963579][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.982328][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.992402][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.046951][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.057158][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.067501][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.076707][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.087712][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.100685][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.108862][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.117476][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.126674][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.136978][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.144037][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.151947][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.171007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.179492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.197404][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.206048][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.216519][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.225614][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.232666][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.243409][ T4186] device veth0_vlan entered promiscuous mode [ 55.259687][ T4186] device veth1_vlan entered promiscuous mode [ 55.271266][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.283258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.296815][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.311271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.329729][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.338437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.347288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.355781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.363647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.385901][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.398721][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.407821][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.416819][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.425885][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.434165][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.442520][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.451926][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.463025][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.489202][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.497975][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.507107][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.515878][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.522929][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.530932][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.562621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.571641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.581073][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.588271][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.596969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.606181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.615569][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.622642][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.630364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.639821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.648275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.656986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.667093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.675713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.683983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.692833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.701965][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.709055][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.719080][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 55.722788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.729392][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 55.734041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.739040][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 55.751603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.764964][ T4193] device veth0_vlan entered promiscuous mode [ 55.778094][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.790778][ T4186] device veth0_macvtap entered promiscuous mode [ 55.798857][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 55.809508][ T4193] device veth1_vlan entered promiscuous mode [ 55.815930][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 55.822742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.832224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.843249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.852946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.862423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.871788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.880637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.890929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.899274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.910714][ T4186] device veth1_macvtap entered promiscuous mode [ 55.922363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.930765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.941465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.986097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.002371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.011282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.020610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.029519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.038699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.047151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.055796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.064168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.076118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.094163][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.106011][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.140515][ T4193] device veth0_macvtap entered promiscuous mode [ 56.155544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.175174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.184430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.210441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.222059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.236995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.258317][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.279308][ T4193] device veth1_macvtap entered promiscuous mode [ 56.295021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.303275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.328410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.349016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.364471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.388349][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.400473][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.410111][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.421680][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.430690][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.447716][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.455356][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.462767][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.471921][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.483237][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.505719][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.517008][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.530552][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.546637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.554136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.562335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.571163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.579926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.587871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.598857][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.614878][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.637987][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.648862][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.661198][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.679955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.695677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.704431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.713298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.738714][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.748038][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.757200][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.767767][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.780980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.791149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.810903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.819721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.836505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.855068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.868534][ T4188] device veth0_vlan entered promiscuous mode [ 56.959223][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.977893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.988279][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.001525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.019576][ T4188] device veth1_vlan entered promiscuous mode [ 57.037771][ T4181] device veth0_vlan entered promiscuous mode [ 57.051458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.056174][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.060560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.072390][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.076298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.093575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.101964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.130662][ T4181] device veth1_vlan entered promiscuous mode [ 57.150864][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.164843][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.193002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.214949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.231628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.263723][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.274471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.282934][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.297152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.326945][ T4181] device veth0_macvtap entered promiscuous mode [ 57.349400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.358898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.368216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.382227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.403928][ T4182] device veth0_vlan entered promiscuous mode [ 57.417229][ T4188] device veth0_macvtap entered promiscuous mode [ 57.437948][ T4182] device veth1_vlan entered promiscuous mode [ 57.448671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.458263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.467208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.477494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.486552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.494431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.510803][ T4181] device veth1_macvtap entered promiscuous mode [ 57.565268][ T4188] device veth1_macvtap entered promiscuous mode [ 57.587912][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.601891][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.612737][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.623996][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.636757][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.667067][ T4182] device veth0_macvtap entered promiscuous mode [ 57.677052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.687559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.696070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.704225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.722525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.734252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.747904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.762585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.784284][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.801244][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.806073][ T4172] Bluetooth: hci2: command 0x040f tx timeout [ 57.811804][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.829022][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.839306][ T4172] Bluetooth: hci0: command 0x040f tx timeout [ 57.839711][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.850576][ T4172] Bluetooth: hci1: command 0x040f tx timeout [ 57.856427][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.901438][ T4172] Bluetooth: hci4: command 0x040f tx timeout [ 57.948534][ T4172] Bluetooth: hci3: command 0x040f tx timeout [ 57.988676][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.092430][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.199450][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.303724][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.416963][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.436047][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.464183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.489215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.541179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.557180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.569302][ T4182] device veth1_macvtap entered promiscuous mode [ 58.587030][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.599308][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.614178][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.625042][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.635281][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.659682][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.692992][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.712378][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.730094][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.740386][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.752742][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.800516][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.815598][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.868986][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.879340][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.888129][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.897374][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.930132][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.941595][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.952385][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.964332][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.979901][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.990450][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.012033][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.142773][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.222270][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.307794][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.373411][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.430786][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.491639][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.501583][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.512040][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.522102][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.532782][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.544031][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.679249][ T4318] loop2: detected capacity change from 0 to 1024 [ 59.692508][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.703912][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.713172][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.722497][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.733545][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.742984][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.754692][ T26] audit: type=1326 audit(1764200775.145:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.0.10" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc754499749 code=0x0 [ 59.762020][ T4318] EXT4-fs (loop2): Ignoring removed orlov option [ 59.785136][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793981][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.869124][ T4318] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 59.895689][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.912749][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 59.944682][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 59.950962][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 59.971251][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 60.035432][ T4324] Bluetooth: hci3: command 0x0419 tx timeout [ 60.067746][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.107203][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.140806][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.159953][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.162555][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.169558][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.179254][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.201300][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.211783][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.225778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.239471][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.260611][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.285500][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.296559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.323017][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.328978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.337325][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.355983][ T4327] loop2: detected capacity change from 0 to 2048 [ 60.366305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.439355][ T4327] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 60.472387][ T4327] UDF-fs: Scanning with blocksize 512 failed [ 60.481831][ T4329] loop1: detected capacity change from 0 to 512 [ 60.504171][ T4327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.742375][ T4329] ======================================================= [ 60.742375][ T4329] WARNING: The mand mount option has been deprecated and [ 60.742375][ T4329] and is ignored by this kernel. Remove the mand [ 60.742375][ T4329] option from the mount to silence this warning. [ 60.742375][ T4329] ======================================================= [ 61.197372][ T4329] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.625053][ T4343] loop0: detected capacity change from 0 to 40427 [ 63.564509][ C0] sched: RT throttling activated [ 63.604176][ T4329] EXT4-fs: error -4 creating inode table initialization thread [ 63.612808][ T4329] EXT4-fs (loop1): mount failed [ 63.649760][ T4343] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 63.682117][ T4343] F2FS-fs (loop0): invalid crc value [ 64.232540][ T4343] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 64.532671][ T4356] syz.2.17 (4356): /proc/4352/oom_adj is deprecated, please use /proc/4352/oom_score_adj instead. [ 64.898768][ T4361] loop1: detected capacity change from 0 to 1024 [ 64.943041][ T4361] EXT4-fs (loop1): Ignoring removed orlov option [ 64.970797][ T4361] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 65.039061][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,auto_da_alloc,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 65.063336][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.788923][ T4350] loop3: detected capacity change from 0 to 32768 [ 65.961518][ T4349] loop4: detected capacity change from 0 to 32768 [ 66.008299][ T4376] tipc: Started in network mode [ 66.013877][ T4376] tipc: Node identity ea3a4166a537, cluster identity 4711 [ 66.023854][ T4376] tipc: Enabled bearer , priority 0 [ 66.024275][ T4350] XFS (loop3): Mounting V5 Filesystem [ 66.033526][ T4376] device syzkaller0 entered promiscuous mode [ 66.052753][ T4349] XFS (loop4): Mounting V5 Filesystem [ 66.109817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 66.124875][ T4376] tipc: Resetting bearer [ 66.260461][ T4349] XFS (loop4): Ending clean mount [ 66.268231][ T4375] tipc: Resetting bearer [ 66.314892][ T4375] tipc: Disabling bearer [ 66.335295][ T4350] XFS (loop3): Ending clean mount [ 66.360122][ T4378] nvme_fabrics: missing parameter 'transport=%s' [ 66.366753][ T4378] nvme_fabrics: missing parameter 'nqn=%s' [ 66.395133][ T4349] XFS (loop4): Quotacheck needed: Please wait. [ 66.443824][ T4349] XFS (loop4): Quotacheck: Done. [ 66.454523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 66.490636][ T4188] XFS (loop3): Unmounting Filesystem [ 66.555558][ T4182] XFS (loop4): Unmounting Filesystem [ 66.696491][ T4403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.511596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.527092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.715466][ T4433] use of bytesused == 0 is deprecated and will be removed in the future, [ 68.724724][ T4433] use the actual size instead. [ 68.820060][ T4196] Bluetooth: unknown link type 130 [ 68.839779][ T4444] hub 6-0:1.0: USB hub found [ 68.846753][ T4444] hub 6-0:1.0: 1 port detected [ 68.984696][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c2!!! [ 69.085030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.434531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.443525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.452427][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.461374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.914715][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 71.353017][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359686][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.954059][ T4487] hub 6-0:1.0: USB hub found [ 71.961198][ T4487] hub 6-0:1.0: 1 port detected [ 73.337605][ T4491] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 73.408427][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 74.572436][ T4515] xt_socket: unknown flags 0x4c [ 75.268322][ T4517] device syzkaller0 entered promiscuous mode [ 75.327556][ T26] audit: type=1326 audit(1764200790.715:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f513ec78749 code=0x0 [ 75.804638][ T4223] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.334617][ T4223] usb 2-1: Using ep0 maxpacket: 8 [ 76.437441][ T1323] cfg80211: failed to load regulatory.db [ 76.464913][ T4223] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.500194][ T4223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.557011][ T4223] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 76.642398][ T4223] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.662669][ T4223] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.738640][ T4223] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.785272][ T4223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.852675][ T4548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.100298][ T4223] usb 2-1: GET_CAPABILITIES returned 0 [ 77.106253][ T4223] usbtmc 2-1:16.0: can't read capabilities [ 77.295807][ T4555] device syzkaller0 entered promiscuous mode [ 77.318209][ T4223] usb 2-1: USB disconnect, device number 2 [ 77.553860][ T4557] hub 6-0:1.0: USB hub found [ 77.594806][ T4557] hub 6-0:1.0: 1 port detected [ 78.852506][ T4580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.417304][ T4592] device syzkaller0 entered promiscuous mode [ 81.523755][ T4621] loop1: detected capacity change from 0 to 64 [ 81.608734][ T4614] hub 6-0:1.0: USB hub found [ 81.613538][ T4614] hub 6-0:1.0: 1 port detected [ 82.722513][ T4622] process 'syz.2.96' launched './file2' with NULL argv: empty string added [ 83.680484][ T4650] loop0: detected capacity change from 0 to 64 [ 84.763945][ T4680] hub 6-0:1.0: USB hub found [ 84.778162][ T4680] hub 6-0:1.0: 1 port detected [ 85.913180][ T4695] tipc: Started in network mode [ 85.924012][ T4695] tipc: Node identity 52e5a1d422ea, cluster identity 4711 [ 85.939590][ T4695] tipc: Enabled bearer , priority 0 [ 86.000444][ T4699] device syzkaller0 entered promiscuous mode [ 86.027677][ T4695] tipc: Resetting bearer [ 86.088400][ T4693] tipc: Resetting bearer [ 86.121423][ T4693] tipc: Disabling bearer [ 86.502529][ T4719] loop3: detected capacity change from 0 to 64 [ 86.680304][ T4723] netlink: 80 bytes leftover after parsing attributes in process `syz.0.123'. [ 88.774578][ T4223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.044645][ T4223] usb 5-1: Using ep0 maxpacket: 16 [ 89.204801][ T4223] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 89.216371][ T4767] tipc: Enabled bearer , priority 0 [ 89.225195][ T4767] device syzkaller0 entered promiscuous mode [ 89.250652][ T4767] tipc: Resetting bearer [ 89.258814][ T4766] tipc: Resetting bearer [ 89.321000][ T4766] tipc: Disabling bearer [ 89.364662][ T4357] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.449688][ T4223] usb 5-1: New USB device found, idVendor=2040, idProduct=2264, bcdDevice=4e.d1 [ 89.469119][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=198 [ 89.478149][ T4223] usb 5-1: Product: syz [ 89.484903][ T4223] usb 5-1: Manufacturer: syz [ 89.514585][ T4223] usb 5-1: SerialNumber: syz [ 89.530037][ T4223] usb 5-1: config 0 descriptor?? [ 89.744786][ T4357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.766910][ T4196] Bluetooth: unknown link type 130 [ 89.914837][ T4357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.945983][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.953997][ T4357] usb 3-1: Product: syz [ 89.965434][ T4357] usb 3-1: Manufacturer: syz [ 89.970303][ T4357] usb 3-1: SerialNumber: syz [ 90.535574][ T4785] vivid-008: ================= START STATUS ================= [ 90.569391][ T4785] vivid-008: Enable Output Cropping: true [ 90.576867][ T4785] vivid-008: Enable Output Composing: true [ 90.582805][ T4785] vivid-008: Enable Output Scaler: true [ 90.592029][ T4785] vivid-008: Tx RGB Quantization Range: Automatic [ 90.599318][ T4785] vivid-008: Transmit Mode: HDMI [ 90.606525][ T4785] vivid-008: Display Present: true inactive [ 90.612745][ T4785] vivid-008: Hotplug Present: 0x00000001 [ 90.619091][ T4785] vivid-008: RxSense Present: 0x00000001 [ 90.625430][ T4785] vivid-008: EDID Present: 0x00000001 [ 90.631050][ T4785] vivid-008: ================== END STATUS ================== [ 90.764286][ T4785] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.606360][ T4810] xt_socket: unknown flags 0x4c [ 91.848725][ T4812] tipc: Started in network mode [ 91.853853][ T4812] tipc: Node identity 6aa75e0f231, cluster identity 4711 [ 91.861484][ T4812] tipc: Enabled bearer , priority 0 [ 91.874439][ T4812] device syzkaller0 entered promiscuous mode [ 91.891996][ T1323] usb 5-1: USB disconnect, device number 2 [ 91.938135][ T4812] tipc: Resetting bearer [ 91.977905][ T4811] tipc: Resetting bearer [ 92.000704][ T4811] tipc: Disabling bearer [ 92.195854][ T4357] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 92.202337][ T4357] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 92.305140][ T4818] xt_bpf: check failed: parse error [ 92.312881][ T4357] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 93.138256][ T4357] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 93.216700][ T4357] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 93.409968][ T4357] usb 3-1: USB disconnect, device number 2 [ 93.805240][ T4357] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 93.833911][ T4240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 93.867392][ T4240] Bluetooth: hci0: Injecting HCI hardware error event [ 93.881542][ T4196] Bluetooth: hci0: hardware error 0x00 [ 94.375397][ T4855] xt_socket: unknown flags 0x4c [ 94.959063][ T4859] tipc: Enabled bearer , priority 0 [ 95.030159][ T4859] device syzkaller0 entered promiscuous mode [ 95.157078][ T4859] tipc: Resetting bearer [ 95.202586][ T4858] tipc: Resetting bearer [ 95.717219][ T4858] tipc: Disabling bearer [ 96.304558][ T4357] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.364622][ T4357] usb 4-1: Using ep0 maxpacket: 8 [ 98.581450][ T4357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.596615][ T4357] usb 4-1: config 0 has no interfaces? [ 98.803492][ T4903] xt_socket: unknown flags 0x4c [ 99.555433][ T4357] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 99.591042][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.620894][ T4357] usb 4-1: Product: syz [ 99.695545][ T4357] usb 4-1: config 0 descriptor?? [ 99.748654][ T4357] usb 4-1: can't set config #0, error -71 [ 99.761877][ T4918] loop4: detected capacity change from 0 to 64 [ 99.785518][ T4357] usb 4-1: USB disconnect, device number 2 [ 101.833698][ T4940] xt_socket: unknown flags 0x4c [ 101.974630][ T4240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.591873][ T4240] usb 4-1: Using ep0 maxpacket: 8 [ 102.646264][ T26] audit: type=1326 audit(1764200818.035:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.703881][ T26] audit: type=1326 audit(1764200818.035:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.731893][ T26] audit: type=1326 audit(1764200818.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.754537][ T4240] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 102.767231][ T4240] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 102.767305][ T26] audit: type=1326 audit(1764200818.035:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.797130][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.814740][ T4240] usb 4-1: config 0 has no interface number 0 [ 102.821541][ T4240] usb 4-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 102.844070][ T26] audit: type=1326 audit(1764200818.035:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.880657][ T26] audit: type=1326 audit(1764200818.035:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.915248][ T26] audit: type=1326 audit(1764200818.035:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.944747][ T4240] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 102.959273][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 102.970591][ T26] audit: type=1326 audit(1764200818.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 102.994431][ T4240] usb 4-1: Product: syz [ 103.100014][ T4240] usb 4-1: config 0 descriptor?? [ 103.115730][ T26] audit: type=1326 audit(1764200818.035:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 103.138170][ T4936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.138543][ T26] audit: type=1326 audit(1764200818.035:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e71c84749 code=0x50000 [ 104.626780][ T4973] loop1: detected capacity change from 0 to 64 [ 104.829912][ T4975] tipc: Can't bind to reserved service type 2 [ 105.527324][ T4172] usb 4-1: USB disconnect, device number 3 [ 105.609031][ T4982] xt_socket: unknown flags 0x4c [ 106.874548][ T5022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.213'. [ 107.619537][ T4172] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.049210][ T5030] loop3: detected capacity change from 0 to 64 [ 108.401852][ T5037] tipc: Started in network mode [ 108.417677][ T5037] tipc: Node identity , cluster identity 4711 [ 108.437894][ T4172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.471368][ T5037] tipc: Failed to obtain node identity [ 108.482206][ T4172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.496055][ T5037] tipc: Enabling of bearer rejected, failed to enable media [ 108.611104][ T5039] device syzkaller0 entered promiscuous mode [ 108.652737][ T4172] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 108.662238][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.672830][ T5041] xt_socket: unknown flags 0x4c [ 108.689947][ T4172] usb 2-1: config 0 descriptor?? [ 109.210684][ T4172] logitech 0003:046D:C294.0001: unknown main item tag 0x7 [ 109.223606][ T4172] logitech 0003:046D:C294.0001: item fetching failed at offset 6/7 [ 109.234205][ T4172] logitech 0003:046D:C294.0001: parse failed [ 109.255707][ T4172] logitech: probe of 0003:046D:C294.0001 failed with error -22 [ 109.326261][ T1323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.372872][ T5022] loop5: detected capacity change from 0 to 7 [ 109.453105][ T5022] Dev loop5: unable to read RDB block 7 [ 109.459210][ T5022] loop5: unable to read partition table [ 109.465697][ T5022] loop5: partition table beyond EOD, truncated [ 109.472681][ T5022] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 109.513601][ T4357] usb 2-1: USB disconnect, device number 3 [ 109.694784][ T1323] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 109.711353][ T1323] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.723165][ T1323] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.733332][ T1323] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 109.747145][ T1323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.766746][ T1323] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 109.775949][ T1323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.786478][ T1323] usb 5-1: config 0 descriptor?? [ 110.089205][ T5070] loop1: detected capacity change from 0 to 64 [ 110.765168][ T1323] usb 5-1: string descriptor 0 read error: -71 [ 110.794799][ T1323] uclogic 0003:5543:004D.0002: failed retrieving string descriptor #200: -71 [ 110.818680][ T1323] uclogic 0003:5543:004D.0002: failed retrieving pen parameters: -71 [ 110.826896][ T1323] uclogic 0003:5543:004D.0002: failed probing pen v2 parameters: -71 [ 110.835504][ T1323] uclogic 0003:5543:004D.0002: failed probing parameters: -71 [ 110.842993][ T1323] uclogic: probe of 0003:5543:004D.0002 failed with error -71 [ 110.859708][ T1323] usb 5-1: USB disconnect, device number 3 [ 111.019535][ T5083] xt_socket: unknown flags 0x4c [ 113.215480][ T5112] capability: warning: `syz.2.236' uses deprecated v2 capabilities in a way that may be insecure [ 114.102457][ T5121] loop1: detected capacity change from 0 to 64 [ 114.782285][ T5127] xt_socket: unknown flags 0x4c [ 115.473383][ T5130] xt_socket: unknown flags 0x4c [ 115.678605][ T5132] netlink: 80 bytes leftover after parsing attributes in process `syz.3.242'. [ 115.990774][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 116.145485][ T5144] device bond_slave_0 entered promiscuous mode [ 116.152181][ T5144] device bond_slave_1 entered promiscuous mode [ 116.407473][ T5144] device macvtap1 entered promiscuous mode [ 116.496861][ T5144] device bond0 entered promiscuous mode [ 116.665556][ T5144] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.807993][ T5148] device bond0 left promiscuous mode [ 116.815056][ T5148] device bond_slave_0 left promiscuous mode [ 116.821068][ T5148] device bond_slave_1 left promiscuous mode [ 117.201626][ T5169] xt_socket: unknown flags 0x4c [ 118.590797][ T5197] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.452050][ T5212] xt_socket: unknown flags 0x4c [ 120.741677][ T5216] bridge0: port 3(gretap0) entered blocking state [ 120.748774][ T5216] bridge0: port 3(gretap0) entered disabled state [ 120.765007][ T5216] device gretap0 entered promiscuous mode [ 120.774424][ T5216] bridge0: port 3(gretap0) entered blocking state [ 120.781204][ T5216] bridge0: port 3(gretap0) entered forwarding state [ 123.117038][ T5233] kvm [5232]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x800 [ 123.148310][ T5233] kvm [5232]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x800 [ 123.176251][ T5233] kvm [5232]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x800 [ 123.226776][ T5233] kvm [5232]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x800 [ 123.232574][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 123.278904][ T26] kauditd_printk_skb: 2299 callbacks suppressed [ 123.278919][ T26] audit: type=1326 audit(1764200838.665:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 123.449261][ T26] audit: type=1326 audit(1764200838.665:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 123.538290][ T26] audit: type=1326 audit(1764200838.665:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 124.355845][ T26] audit: type=1326 audit(1764200838.665:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 124.478811][ T26] audit: type=1326 audit(1764200838.665:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 124.694251][ T26] audit: type=1326 audit(1764200838.665:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 124.805055][ T26] audit: type=1326 audit(1764200838.665:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5226 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bae7e2749 code=0x7fc00000 [ 124.974574][ T4237] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 125.374830][ T4237] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.389400][ T4237] usb 5-1: config 0 has no interface number 0 [ 125.429982][ T4237] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 125.487571][ T4237] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 125.548417][ T4237] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 125.658049][ T4237] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.913485][ T4237] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.052410][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.079040][ T4237] usb 5-1: config 0 descriptor?? [ 126.129292][ T5261] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.451324][ T5261] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.933161][ T4237] ldusb 5-1:0.55: Interrupt in endpoint not found [ 127.174521][ T4238] usb 5-1: USB disconnect, device number 4 [ 128.013506][ T5301] Zero length message leads to an empty skb [ 128.221142][ T5308] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 128.541817][ T5318] overlayfs: missing 'lowerdir' [ 129.309381][ T5325] loop0: detected capacity change from 0 to 64 [ 130.806281][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 131.382091][ T5361] overlayfs: missing 'lowerdir' [ 131.565301][ T4357] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.864524][ T4357] usb 2-1: Using ep0 maxpacket: 8 [ 132.205790][ T4357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.334746][ T4357] usb 2-1: config 4 interface 0 has no altsetting 0 [ 132.624630][ T4357] usb 2-1: string descriptor 0 read error: -22 [ 132.682919][ T4357] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 132.712946][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.774646][ T5368] xt_socket: unknown flags 0x4c [ 132.825358][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833833][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.447253][ T4357] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 133.459438][ T4357] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.504898][ T4357] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 133.544654][ T4357] usb 2-1: media controller created [ 133.746729][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.805577][ T4357] zl10353_read_register: readreg error (reg=127, ret==0) [ 133.862019][ T4357] usb 2-1: USB disconnect, device number 4 [ 135.038905][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 135.048095][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 135.062128][ T5389] device ip6gretap0 entered promiscuous mode [ 135.070501][ T5389] device syz_tun entered promiscuous mode [ 135.168502][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 135.647307][ T5401] xt_socket: unknown flags 0x4c [ 135.944640][ T4256] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.253372][ T5394] loop0: detected capacity change from 0 to 32768 [ 136.321517][ T5405] netlink: 'syz.4.323': attribute type 12 has an invalid length. [ 136.330915][ T5405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.323'. [ 136.425947][ T5394] XFS (loop0): Mounting V5 Filesystem [ 136.434709][ T4256] usb 2-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 136.490393][ T4256] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.592182][ T4256] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 77, using maximum allowed: 30 [ 136.632957][ T4256] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 136.695436][ T5394] XFS (loop0): Ending clean mount [ 136.893057][ T4256] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.544705][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.602981][ T4256] usb 2-1: SerialNumber: syz [ 137.613291][ T4193] XFS (loop0): Unmounting Filesystem [ 137.655751][ T4256] usb 2-1: selecting invalid altsetting 1 [ 139.238025][ T26] audit: type=1800 audit(1764200854.625:2320): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.329" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 139.264603][ T4256] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 139.270983][ T4256] cdc_ncm 2-1:1.0: bind() failure [ 139.317601][ T5431] tipc: Enabling of bearer rejected, failed to enable media [ 139.381658][ T5436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.397344][ T4256] usb 2-1: USB disconnect, device number 5 [ 139.570779][ T5436] syz.1.331 (5436) used greatest stack depth: 20000 bytes left [ 139.860745][ T5445] hub 6-0:1.0: USB hub found [ 139.865567][ T5445] hub 6-0:1.0: 1 port detected [ 140.501069][ T5457] xt_socket: unknown flags 0x4c [ 142.584300][ T5487] input: syz1 as /devices/virtual/input/input5 [ 143.321957][ T5500] loop1: detected capacity change from 0 to 512 [ 143.390739][ T5500] EXT4-fs (loop1): can't read group descriptor 0 [ 145.491180][ T5528] netlink: 80 bytes leftover after parsing attributes in process `syz.4.354'. [ 146.624592][ T4357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.656832][ T5552] tipc: Enabled bearer , priority 0 [ 146.687613][ T5552] device syzkaller0 entered promiscuous mode [ 146.699786][ T5551] tipc: Resetting bearer [ 146.760899][ T5551] tipc: Disabling bearer [ 147.665682][ T4357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.717253][ T4357] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 147.726978][ T4357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.752861][ T4357] usb 5-1: config 0 descriptor?? [ 147.779593][ T5564] netlink: 80 bytes leftover after parsing attributes in process `syz.1.366'. [ 148.342336][ T4357] hid-generic 0003:28BD:0935.0003: hidraw0: USB HID v10.00 Device [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 148.428544][ T4172] usb 5-1: USB disconnect, device number 5 [ 148.743980][ T5573] fido_id[5573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 149.722865][ T5589] ptrace attach of ""[5591] was attempted by "./syz-executor exec"[5589] [ 149.966603][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 150.090694][ T5598] tipc: Started in network mode [ 150.104545][ T5598] tipc: Node identity 06ed5aed5331, cluster identity 4711 [ 150.113125][ T5598] tipc: Enabled bearer , priority 0 [ 150.121315][ T5601] netlink: 80 bytes leftover after parsing attributes in process `syz.1.377'. [ 150.132328][ T5598] device syzkaller0 entered promiscuous mode [ 150.148433][ T5596] tipc: Resetting bearer [ 150.266116][ T5596] tipc: Disabling bearer [ 151.173026][ T4346] tipc: Node number set to 1440504557 [ 152.179020][ T5622] hub 6-0:1.0: USB hub found [ 152.185226][ T5622] hub 6-0:1.0: 1 port detected [ 153.147679][ T5640] netlink: 80 bytes leftover after parsing attributes in process `syz.2.388'. [ 153.242078][ T5634] kvm [5633]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x495a [ 153.264814][ T5634] kvm [5633]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 153.312526][ T5634] kvm [5633]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x11f1 [ 153.361677][ T5634] kvm [5633]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 153.376609][ T5634] kvm [5633]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x40c8 [ 154.306382][ T5651] tipc: Enabled bearer , priority 0 [ 154.329792][ T5651] device syzkaller0 entered promiscuous mode [ 154.408035][ T5650] tipc: Resetting bearer [ 154.482557][ T5650] tipc: Disabling bearer [ 154.904818][ T4357] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.084678][ T4256] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.285304][ T4357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.353297][ T4357] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 155.475072][ T4256] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 155.584837][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.594236][ T4256] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.625272][ T4357] usb 2-1: config 0 descriptor?? [ 155.634821][ T5678] netlink: 80 bytes leftover after parsing attributes in process `syz.4.400'. [ 155.644041][ T4256] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.661757][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.672324][ T4256] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 155.694853][ T4256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.701598][ T4256] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 155.717074][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.741699][ T4256] usb 4-1: config 0 descriptor?? [ 155.923321][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 156.094395][ T5686] xt_socket: unknown flags 0x4c [ 156.164614][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.244667][ T1107] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 156.253842][ T1107] usb 3-1: config 4 has no interface number 0 [ 156.260474][ T1107] usb 3-1: config 4 interface 30 has no altsetting 0 [ 156.327783][ T4346] usb 2-1: USB disconnect, device number 6 [ 156.614678][ T1107] usb 3-1: string descriptor 0 read error: -22 [ 156.622054][ T1107] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 156.631265][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.677439][ T1107] dw2102: su3000_identify_state [ 156.683138][ T1107] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 156.690417][ T1107] dw2102: su3000_power_ctrl: 1, initialized 0 [ 156.696991][ T1107] dvb-usb: bulk message failed: -22 (2/0) [ 156.708169][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.735957][ T1107] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 156.744558][ T1107] usb 3-1: media controller created [ 156.750259][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 156.757827][ T4256] usb 4-1: string descriptor 0 read error: -71 [ 156.765530][ T1107] dw2102: i2c transfer failed. [ 156.773960][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 156.780152][ T4256] uclogic 0003:5543:004D.0005: failed retrieving string descriptor #200: -71 [ 156.789447][ T4256] uclogic 0003:5543:004D.0005: failed retrieving pen parameters: -71 [ 156.797981][ T1107] dw2102: i2c transfer failed. [ 156.803027][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 156.809209][ T4256] uclogic 0003:5543:004D.0005: failed probing pen v2 parameters: -71 [ 156.817802][ T1107] dw2102: i2c transfer failed. [ 156.822694][ T4256] uclogic 0003:5543:004D.0005: failed probing parameters: -71 [ 156.830820][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 156.836929][ T1107] dw2102: i2c transfer failed. [ 156.841990][ T4256] uclogic: probe of 0003:5543:004D.0005 failed with error -71 [ 156.885322][ T5675] dvb-usb: bulk message failed: -22 (3/0) [ 156.891312][ T5675] dw2102: i2c transfer failed. [ 156.897277][ T5675] dvb-usb: bulk message failed: -22 (4/0) [ 156.903021][ T5675] dw2102: i2c transfer failed. [ 156.908985][ T5675] dvb-usb: bulk message failed: -22 (6/0) [ 156.916633][ T5675] dw2102: i2c transfer failed. [ 156.918454][ T4256] usb 4-1: USB disconnect, device number 4 [ 156.921641][ T5675] dw2102: i2c wr: len=66 is too big! [ 156.921641][ T5675] [ 156.983575][ T5693] binder: 5691:5693 ioctl c018620c 200000000240 returned -22 [ 157.035389][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 157.035436][ T1107] dw2102: i2c transfer failed. [ 157.035471][ T1107] dvb-usb: bulk message failed: -22 (6/0) [ 157.035485][ T1107] dw2102: i2c transfer failed. [ 157.035615][ T1107] dvb-usb: MAC address: 02:02:02:02:02:02 [ 157.091638][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.128300][ T5698] tipc: Enabled bearer , priority 0 [ 157.128928][ T5698] device syzkaller0 entered promiscuous mode [ 157.133001][ T5697] tipc: Resetting bearer [ 157.157039][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 157.182874][ T1107] dw2102: command 0x0e transfer failed. [ 157.190983][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 157.197091][ T1107] dw2102: command 0x0e transfer failed. [ 157.208678][ T5697] tipc: Disabling bearer [ 157.670829][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 157.677208][ T1107] dw2102: command 0x0e transfer failed. [ 157.756578][ T1107] dvb-usb: bulk message failed: -22 (3/0) [ 157.762460][ T1107] dw2102: command 0x0e transfer failed. [ 157.768996][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 157.860920][ T1107] dw2102: command 0x51 transfer failed. [ 157.872068][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 157.885422][ T1107] dw2102: i2c probe for address 0x68 failed. [ 157.894132][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 157.924195][ T1107] dw2102: i2c probe for address 0x69 failed. [ 158.132509][ T1107] dvb-usb: bulk message failed: -22 (5/0) [ 158.408651][ T1107] dw2102: i2c probe for address 0x6a failed. [ 158.599520][ T1107] dw2102: probing for demodulator failed. Is the external power switched on? [ 158.789739][ T1107] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 158.858017][ T5732] xt_socket: unknown flags 0x4c [ 158.876448][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 158.964687][ T5738] input: syz0 as /devices/virtual/input/input7 [ 159.014612][ T1107] rc_core: IR keymap rc-tt-1500 not found [ 159.020459][ T1107] Registered IR keymap rc-empty [ 159.039844][ T1107] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 159.065825][ T1107] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 159.100014][ T1107] dvb-usb: schedule remote query interval to 250 msecs. [ 159.124589][ T1107] dw2102: su3000_power_ctrl: 0, initialized 1 [ 159.137415][ T1107] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 159.185896][ T1107] usb 3-1: USB disconnect, device number 3 [ 159.311119][ T1107] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 159.441936][ T5741] tipc: Enabled bearer , priority 0 [ 159.664932][ T5741] tipc: Disabling bearer [ 159.720758][ T4223] [ 159.723156][ T4223] ====================================================== [ 159.730197][ T4223] WARNING: possible circular locking dependency detected [ 159.737207][ T4223] syzkaller #0 Not tainted [ 159.741601][ T4223] ------------------------------------------------------ [ 159.748594][ T4223] kworker/0:3/4223 is trying to acquire lock: [ 159.754642][ T4223] ffff888074540c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 159.765712][ T4223] [ 159.765712][ T4223] but task is already holding lock: [ 159.773063][ T4223] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 159.782089][ T4223] [ 159.782089][ T4223] which lock already depends on the new lock. [ 159.782089][ T4223] [ 159.792587][ T4223] [ 159.792587][ T4223] the existing dependency chain (in reverse order) is: [ 159.801585][ T4223] [ 159.801585][ T4223] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 159.809564][ T4223] __mutex_lock_common+0x1eb/0x2390 [ 159.815280][ T4223] mutex_lock_nested+0x17/0x20 [ 159.820550][ T4223] rfkill_register+0x33/0x8a0 [ 159.825735][ T4223] hci_register_dev+0x452/0x970 [ 159.831097][ T4223] vhci_create_device+0x32c/0x5c0 [ 159.836622][ T4223] vhci_write+0x391/0x450 [ 159.841449][ T4223] vfs_write+0x712/0xd00 [ 159.846190][ T4223] ksys_write+0x14d/0x250 [ 159.851153][ T4223] do_syscall_64+0x4c/0xa0 [ 159.856082][ T4223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.862486][ T4223] [ 159.862486][ T4223] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 159.870283][ T4223] __mutex_lock_common+0x1eb/0x2390 [ 159.875990][ T4223] mutex_lock_nested+0x17/0x20 [ 159.881263][ T4223] vhci_send_frame+0x88/0x100 [ 159.886448][ T4223] hci_send_frame+0x1a9/0x2e0 [ 159.891631][ T4223] hci_tx_work+0x9f9/0x1710 [ 159.896645][ T4223] process_one_work+0x863/0x1000 [ 159.902107][ T4223] worker_thread+0xaa8/0x12a0 [ 159.907301][ T4223] kthread+0x436/0x520 [ 159.911885][ T4223] ret_from_fork+0x1f/0x30 [ 159.916812][ T4223] [ 159.916812][ T4223] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 159.925999][ T4223] __flush_work+0xdd/0x1b0 [ 159.930934][ T4223] hci_dev_do_close+0x1e7/0x1030 [ 159.936379][ T4223] hci_error_reset+0x101/0x2c0 [ 159.941648][ T4223] process_one_work+0x863/0x1000 [ 159.947089][ T4223] worker_thread+0xaa8/0x12a0 [ 159.952274][ T4223] kthread+0x436/0x520 [ 159.956856][ T4223] ret_from_fork+0x1f/0x30 [ 159.961803][ T4223] [ 159.961803][ T4223] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 159.969425][ T4223] __mutex_lock_common+0x1eb/0x2390 [ 159.975152][ T4223] mutex_lock_nested+0x17/0x20 [ 159.980422][ T4223] bg_scan_update+0x44/0x3b0 [ 159.985515][ T4223] process_one_work+0x863/0x1000 [ 159.990952][ T4223] worker_thread+0xaa8/0x12a0 [ 159.996134][ T4223] kthread+0x436/0x520 [ 160.000703][ T4223] ret_from_fork+0x1f/0x30 [ 160.005623][ T4223] [ 160.005623][ T4223] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 160.015407][ T4223] __lock_acquire+0x2c33/0x7c60 [ 160.020761][ T4223] lock_acquire+0x197/0x3f0 [ 160.025772][ T4223] __flush_work+0xdd/0x1b0 [ 160.030690][ T4223] __cancel_work_timer+0x3ac/0x520 [ 160.036298][ T4223] hci_request_cancel_all+0xcc/0x300 [ 160.042083][ T4223] hci_dev_do_close+0x4e/0x1030 [ 160.047433][ T4223] hci_rfkill_set_block+0x10a/0x190 [ 160.053133][ T4223] rfkill_set_block+0x1c6/0x420 [ 160.058493][ T4223] rfkill_epo+0x75/0x170 [ 160.063255][ T4223] rfkill_op_handler+0x76/0x220 [ 160.068609][ T4223] process_one_work+0x863/0x1000 [ 160.074044][ T4223] worker_thread+0xaa8/0x12a0 [ 160.079219][ T4223] kthread+0x436/0x520 [ 160.083784][ T4223] ret_from_fork+0x1f/0x30 [ 160.088700][ T4223] [ 160.088700][ T4223] other info that might help us debug this: [ 160.088700][ T4223] [ 160.098903][ T4223] Chain exists of: [ 160.098903][ T4223] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 160.098903][ T4223] [ 160.114596][ T4223] Possible unsafe locking scenario: [ 160.114596][ T4223] [ 160.122024][ T4223] CPU0 CPU1 [ 160.127365][ T4223] ---- ---- [ 160.132706][ T4223] lock(rfkill_global_mutex); [ 160.137445][ T4223] lock(&data->open_mutex); [ 160.144529][ T4223] lock(rfkill_global_mutex); [ 160.151809][ T4223] lock((work_completion)(&hdev->bg_scan_update)); [ 160.158370][ T4223] [ 160.158370][ T4223] *** DEADLOCK *** [ 160.158370][ T4223] [ 160.166610][ T4223] 3 locks held by kworker/0:3/4223: [ 160.171808][ T4223] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 160.182134][ T4223] #1: ffffc9000499fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 160.192475][ T4223] #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 160.201933][ T4223] [ 160.201933][ T4223] stack backtrace: [ 160.207826][ T4223] CPU: 0 PID: 4223 Comm: kworker/0:3 Not tainted syzkaller #0 [ 160.215343][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.225382][ T4223] Workqueue: events rfkill_op_handler [ 160.230933][ T4223] Call Trace: [ 160.234204][ T4223] [ 160.237121][ T4223] dump_stack_lvl+0x168/0x230 [ 160.241805][ T4223] ? load_image+0x3b0/0x3b0 [ 160.246294][ T4223] ? show_regs_print_info+0x20/0x20 [ 160.252697][ T4223] ? print_circular_bug+0x12b/0x1a0 [ 160.257872][ T4223] check_noncircular+0x274/0x310 [ 160.262785][ T4223] ? add_chain_block+0x940/0x940 [ 160.267695][ T4223] ? lockdep_lock+0xdc/0x1e0 [ 160.272262][ T4223] ? __lock_acquire+0x12d9/0x7c60 [ 160.277257][ T4223] ? lockdep_lock+0x1e0/0x1e0 [ 160.281912][ T4223] ? mark_lock+0x94/0x320 [ 160.286220][ T4223] __lock_acquire+0x2c33/0x7c60 [ 160.291055][ T4223] ? verify_lock_unused+0x140/0x140 [ 160.296228][ T4223] ? verify_lock_unused+0x140/0x140 [ 160.301405][ T4223] ? ret_from_fork+0x1e/0x30 [ 160.305973][ T4223] lock_acquire+0x197/0x3f0 [ 160.310451][ T4223] ? __flush_work+0xc1/0x1b0 [ 160.315024][ T4223] ? __lock_acquire+0x7c60/0x7c60 [ 160.320072][ T4223] ? read_lock_is_recursive+0x10/0x10 [ 160.325425][ T4223] ? start_flush_work+0x776/0x820 [ 160.330442][ T4223] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 160.336342][ T4223] __flush_work+0xdd/0x1b0 [ 160.340736][ T4223] ? __flush_work+0xc1/0x1b0 [ 160.345311][ T4223] ? flush_work+0x20/0x20 [ 160.349634][ T4223] ? try_to_grab_pending+0xf3/0x7e0 [ 160.354813][ T4223] ? lockdep_hardirqs_off+0x70/0x100 [ 160.360076][ T4223] ? mark_lock+0x94/0x320 [ 160.364384][ T4223] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 160.370338][ T4223] ? lock_chain_count+0x20/0x20 [ 160.375163][ T4223] ? lockdep_hardirqs_off+0x70/0x100 [ 160.380427][ T4223] ? mark_lock+0x94/0x320 [ 160.384737][ T4223] ? __cancel_work_timer+0x331/0x520 [ 160.390018][ T4223] __cancel_work_timer+0x3ac/0x520 [ 160.395195][ T4223] ? cancel_work_sync+0x20/0x20 [ 160.400025][ T4223] ? __cancel_work+0x1f4/0x2d0 [ 160.404766][ T4223] ? lockdep_hardirqs_on+0x94/0x140 [ 160.409955][ T4223] ? __cancel_work+0x26f/0x2d0 [ 160.414698][ T4223] ? cancel_work+0x20/0x20 [ 160.419090][ T4223] hci_request_cancel_all+0xcc/0x300 [ 160.424354][ T4223] hci_dev_do_close+0x4e/0x1030 [ 160.429182][ T4223] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 160.435052][ T4223] ? _raw_spin_unlock+0x40/0x40 [ 160.439968][ T4223] ? kobject_uevent_env+0x371/0x890 [ 160.445142][ T4223] hci_rfkill_set_block+0x10a/0x190 [ 160.450329][ T4223] ? rcu_lock_release+0x20/0x20 [ 160.455176][ T4223] rfkill_set_block+0x1c6/0x420 [ 160.460026][ T4223] rfkill_epo+0x75/0x170 [ 160.464251][ T4223] rfkill_op_handler+0x76/0x220 [ 160.469097][ T4223] process_one_work+0x863/0x1000 [ 160.474019][ T4223] ? worker_detach_from_pool+0x240/0x240 [ 160.479639][ T4223] ? lockdep_hardirqs_off+0x70/0x100 [ 160.484925][ T4223] ? _raw_spin_lock_irq+0xab/0xe0 [ 160.490034][ T4223] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 160.495390][ T4223] ? wq_worker_running+0x97/0x170 [ 160.500395][ T4223] worker_thread+0xaa8/0x12a0 [ 160.505052][ T4223] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 160.510920][ T4223] ? lockdep_hardirqs_on+0x94/0x140 [ 160.516107][ T4223] ? lockdep_hardirqs_on+0x94/0x140 [ 160.521286][ T4223] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 160.527157][ T4223] kthread+0x436/0x520 [ 160.531205][ T4223] ? rcu_lock_release+0x20/0x20 [ 160.536036][ T4223] ? kthread_blkcg+0xd0/0xd0 [ 160.540609][ T4223] ret_from_fork+0x1f/0x30 [ 160.545008][ T4223] [ 160.548160][ C0] vkms_vblank_simulate: vblank timer overrun