last executing test programs: 5m4.365060927s ago: executing program 3 (id=859): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 5m3.197487319s ago: executing program 3 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 5m2.008584662s ago: executing program 3 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) 5m0.618904426s ago: executing program 3 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)="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", 0xdac}], 0x1}, 0x1) bind$rxrpc(r7, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x24) 4m56.40860847s ago: executing program 3 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 4m54.107855062s ago: executing program 3 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_setup(0x1ff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x1e0, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1b0, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 4m37.834595427s ago: executing program 32 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_setup(0x1ff, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x1e0, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1b0, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 3m56.204084889s ago: executing program 2 (id=945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 3m54.511779819s ago: executing program 2 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$inet(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 3m52.650294768s ago: executing program 2 (id=949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="c3", 0x1, 0x20008044, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m48.828980081s ago: executing program 2 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 3m46.484312995s ago: executing program 2 (id=956): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket(0x18, 0x2, 0x6) r3 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000001380)='ns/uts\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x48) 3m43.343838512s ago: executing program 2 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), 0x0, 0x3, 0x0, 0x0, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 3m27.131421974s ago: executing program 33 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, &(0x7f0000000300), 0x0, 0x3, 0x0, 0x0, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 24.536727057s ago: executing program 4 (id=1217): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r1, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) 23.076064144s ago: executing program 1 (id=1219): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 23.023653817s ago: executing program 4 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) syz_open_procfs(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c936", 0xc5}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) 21.156570916s ago: executing program 4 (id=1221): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0xce21}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) socket$netlink(0x10, 0x3, 0x4) 19.74800312s ago: executing program 4 (id=1223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = gettid() r5 = fcntl$getown(r3, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000540)={0xfffffffd, 0x3f, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe8b5, 0x8e31}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r10, &(0x7f0000000300), 0x0, 0x5, 0x0) syz_clone3(&(0x7f00000007c0)={0x21005800, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480), {0x37}, &(0x7f00000004c0)=""/45, 0x2d, &(0x7f0000000600)=""/199, &(0x7f0000000780)=[r4, r5, r6, r7, 0x0, r8, r9], 0x7, {r10}}, 0x58) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xac, r14, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "8688636905db3c63e4122b5fcfc539874f993cf02bae4492db6e35a4811fd4bf6e2470ea5910ea5ffbca7d668cf2172d03278afbf65535b1639b52903b13580b5cf5f872a615b9fd7b982559949b02aad5f8c0b1f2839a9e67dd281c18caf98a347da22267bd090075de777dab7e3cd11201709e99d5ad61f70b96a6ea967872263c5ca72273f37a4196f4"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc000}, 0x807) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 19.078465837s ago: executing program 0 (id=1224): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000"], 0x0, 0x5a}, 0x28) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 17.200124566s ago: executing program 0 (id=1225): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000"], 0x0, 0x5a}, 0x28) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 17.155958539s ago: executing program 1 (id=1226): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x167) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x24) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={'md5\x00'}}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/18], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 16.116806044s ago: executing program 0 (id=1227): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000137932f719a2aff21429007e1497000009810000b70200000000000085000000860000008500460c38f1515ad7e0b516dde3b2e0eb0cf0f40fac45ccd115f5f84ef3fdf09e4e50a6a64ad335da2030861fbe27b247204a7ff9f10cc89cee3d9d0146f68d38eef192c5d853794db065a269d592cedf998e18211dcaddd7f31ee93df9cab9dae11077b699a7e2948f2597ba8018327e930f53f3f4162951e4067c58dd72f34ca3d4ce80dbe821668e671278fa89469e39b41d94d6167d709e01408044d46a39a309dd4dee19a02b24964678409fc025ad60405505d79a"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) timerfd_create(0x1, 0x80000) syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r5, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14.208067285s ago: executing program 1 (id=1228): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 12.755686262s ago: executing program 4 (id=1230): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000137932f719a2aff21429007e1497000009810000b70200000000000085000000860000008500460c38f1515ad7e0b516dde3b2e0eb0cf0f40fac45ccd115f5f84ef3fdf09e4e50a6a64ad335da2030861fbe27b247204a7ff9f10cc89cee3d9d0146f68d38eef192c5d853794db065a269d592cedf998e18211dcaddd7f31ee93df9cab9dae11077b699a7e2948f2597ba8018327e930f53f3f4162951e4067c58dd72f34ca3d4ce80dbe821668e671278fa89469e39b41d94d6167d709e01408044d46a39a309dd4dee19a02b24964678409fc025ad60405505d79aa43411e211d49d0503148ac8e83adfa0"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) timerfd_create(0x1, 0x80000) syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r5, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.055630819s ago: executing program 5 (id=1231): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000"], 0x0, 0x5a}, 0x28) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 10.9089916s ago: executing program 5 (id=1232): syz_emit_ethernet(0x46, &(0x7f0000019580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800490000380000000000069078ac1e0001ac1414008307e3ac1e0001860600000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8da050db0e50545b810db10899507163d87d6389ac1ab43239c4dddd1daef129316fa766cbc31372f6fb9546bd9f2e58bb1a4d6c427e08fad6e2b2b81b0fdce4e915955bd805d487fe32620b0608b90287b66920e1634e1f856a2bbc45a839bf74ed6ddb7ea097e7d11c07703ebcbd5ab08f31d0b7"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, 0x0, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0) getsockopt(r8, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.326901391s ago: executing program 1 (id=1233): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x612, &(0x7f0000000140)={0x0, 0x3536, 0x100, 0x0, 0x137d}, 0x0, &(0x7f0000000080), &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB='b *:* m*'], 0x8) epoll_create1(0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) 7.846949923s ago: executing program 5 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) fcntl$setstatus(r2, 0x4, 0x2c00) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') socket$nl_route(0x10, 0x3, 0x0) 7.680027742s ago: executing program 0 (id=1235): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket(0x18, 0x2, 0x6) r3 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000001380)='ns/uts\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000008, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x10) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5.143906496s ago: executing program 5 (id=1236): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000137932f719a2aff21429007e1497000009810000b70200000000000085000000860000008500460c38f1515ad7e0b516dde3b2e0eb0cf0f40fac45ccd115f5f84ef3fdf09e4e50a6a64ad335da2030861fbe27b247204a7ff9f10cc89cee3d9d0146f68d38eef192c5d853794db065a269d592cedf998e18211dcaddd7f31ee93df9cab9dae11077b699a7e2948f2597ba8018327e930f53f3f4162951e4067c58dd72f34ca3d4ce80dbe821668e671278fa89469e39b41d94d6167d709e01408044d46a39a309dd4dee19a02b24964678409fc025ad60405505d79aa43411e211d49d0503148ac8e83adfa0"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) timerfd_create(0x1, 0x80000) syz_open_dev$swradio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r5, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.980151329s ago: executing program 1 (id=1237): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700000000000000f4ffffffffffff"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x1d48, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000040)={[0xff]}, 0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$kcm(0x10, 0x2, 0x10) 3.838225776s ago: executing program 0 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c1", 0xc2}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) 2.541054535s ago: executing program 5 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30", 0x6e}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c1", 0xc2}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) 1.455378563s ago: executing program 0 (id=1240): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) 1.101388462s ago: executing program 4 (id=1241): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 1.100804802s ago: executing program 1 (id=1242): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x5040) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) userfaultfd(0x80001) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 5 (id=1243): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc010) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): has an invalid bInterval 0, changing to 7 [ 117.015730][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.093162][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.184862][ T4312] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.216963][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.271960][ T4312] usb 4-1: config 0 descriptor?? [ 117.448591][ T4638] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 117.743535][ T4312] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 119.780392][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.928784][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.168828][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.352954][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.921846][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.932252][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 120.980391][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.138135][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.304738][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.312055][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.604907][ T4724] capability: warning: `syz.3.73' uses 32-bit capabilities (legacy support in use) [ 121.635687][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.697554][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.803134][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.884775][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 121.892909][ T4312] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 122.830308][ T4312] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 122.842841][ T4312] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 122.854742][ T4312] microsoft 0003:045E:07DA.0004: no inputs found [ 122.864794][ T4312] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 122.897477][ T4312] usb 4-1: USB disconnect, device number 3 [ 123.144956][ T4745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'. [ 123.414851][ T4743] fido_id[4743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.439326][ T4749] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 123.533043][ T4749] netlink: 152 bytes leftover after parsing attributes in process `syz.0.77'. [ 123.641751][ T4749] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.781289][ T4757] smc: net device vcan0 applied user defined pnetid SYZ1 [ 123.799026][ T4757] smc: net device vcan0 erased user defined pnetid SYZ1 [ 124.200209][ T4767] blktrace: Concurrent blktraces are not allowed on loop4 [ 124.385202][ T4773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 124.442848][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 124.464891][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.714976][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 125.293824][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.370414][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.428295][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.533052][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.624718][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.650626][ T4784] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 125.679458][ T4784] netlink: 152 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.689497][ T22] usb 3-1: config 0 descriptor?? [ 125.765169][ T4784] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.129775][ T22] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 126.161236][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.184074][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.208506][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.231660][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.280411][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.384890][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.413806][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.433487][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.470395][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.479452][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.489664][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.599308][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.612692][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.635157][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.643851][ T22] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 126.655609][ T22] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 126.681775][ T22] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 126.715984][ T22] microsoft 0003:045E:07DA.0005: no inputs found [ 126.722550][ T22] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 126.824295][ T22] usb 3-1: USB disconnect, device number 2 [ 127.109889][ T4800] fido_id[4800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 127.778040][ T4799] x_tables: duplicate underflow at hook 4 [ 128.127610][ T4815] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 128.209539][ T4815] netlink: 152 bytes leftover after parsing attributes in process `syz.3.94'. [ 128.297429][ T4815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.432980][ T4799] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 129.815899][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 130.493194][ T4836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'. [ 130.759858][ T4839] loop2: detected capacity change from 0 to 256 [ 130.769066][ T4839] ======================================================= [ 130.769066][ T4839] WARNING: The mand mount option has been deprecated and [ 130.769066][ T4839] and is ignored by this kernel. Remove the mand [ 130.769066][ T4839] option from the mount to silence this warning. [ 130.769066][ T4839] ======================================================= [ 132.033014][ T4839] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 132.605125][ T4848] 9pnet_virtio: no channels available for device syz [ 132.927834][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934169][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.929027][ T4862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.106'. [ 138.987246][ T4867] loop1: detected capacity change from 0 to 256 [ 140.189045][ T4867] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 144.277680][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'. [ 146.322699][ T4894] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 148.055911][ T4928] Zero length message leads to an empty skb [ 150.360739][ T4937] smc: net device vcan0 applied user defined pnetid SYZ1 [ 150.606298][ T4937] smc: net device vcan0 erased user defined pnetid SYZ1 [ 157.427128][ T4980] blktrace: Concurrent blktraces are not allowed on loop4 [ 157.485831][ T4985] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 157.493575][ T4985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.131'. [ 157.506963][ T4985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.875208][ T4994] x_tables: duplicate underflow at hook 4 [ 169.899348][ T5036] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 169.906140][ T5036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.094898][ T5036] vhci_hcd vhci_hcd.0: Device attached [ 170.223550][ T5047] vhci_hcd: connection closed [ 170.225572][ T4733] vhci_hcd: stop threads [ 170.260378][ T4733] vhci_hcd: release socket [ 170.287628][ T4733] vhci_hcd: disconnect device [ 170.295292][ T4318] vhci_hcd: vhci_device speed not set [ 170.838123][ T4376] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.144741][ T4376] usb 4-1: Using ep0 maxpacket: 16 [ 172.151792][ T4376] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.208071][ T4376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 172.258472][ T4376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.439928][ T4376] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 172.537942][ T4376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.574723][ T4314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.700691][ T5066] smc: net device vcan0 applied user defined pnetid SYZ1 [ 172.710655][ T5066] smc: net device vcan0 erased user defined pnetid SYZ1 [ 173.568911][ T4376] usb 4-1: Product: syz [ 173.573201][ T4376] usb 4-1: Manufacturer: syz [ 173.578125][ T4376] usb 4-1: SerialNumber: syz [ 173.585690][ T4376] usb 4-1: config 0 descriptor?? [ 173.666506][ T4314] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.675681][ T4314] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.686446][ T4314] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.696429][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 173.708774][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 173.816793][ T4314] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.865294][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.873417][ T4314] usb 3-1: Product: syz [ 173.994953][ T4314] usb 3-1: can't set config #1, error -71 [ 174.139567][ T4314] usb 3-1: USB disconnect, device number 3 [ 177.998826][ T4376] usb 4-1: can't set config #0, error -71 [ 178.023902][ T4376] usb 4-1: USB disconnect, device number 4 [ 178.240040][ T5096] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 178.351568][ T5101] smc: net device vcan0 applied user defined pnetid SYZ1 [ 179.906953][ T5112] x_tables: duplicate underflow at hook 4 [ 180.217989][ T5112] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 180.231260][ T5117] netlink: 'syz.3.160': attribute type 4 has an invalid length. [ 180.239073][ T5117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.160'. [ 180.248718][ T5117] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.124810][ T951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.377028][ T951] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.594311][ T951] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.686362][ T951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.754718][ T951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.817610][ T951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.119485][ T951] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.591722][ T951] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.599966][ T951] usb 4-1: Product: syz [ 185.604284][ T951] usb 4-1: Manufacturer: syz [ 186.024450][ T951] usb 4-1: can't set config #1, error -71 [ 186.060482][ T951] usb 4-1: USB disconnect, device number 5 [ 186.665233][ T4272] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.075023][ T4272] usb 3-1: Using ep0 maxpacket: 16 [ 187.515712][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.589976][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 187.709137][ T4272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.324848][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 191.330938][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 191.337083][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 191.343271][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 191.349445][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 192.846203][ T4272] usb 3-1: string descriptor 0 read error: -32 [ 193.033059][ T4272] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 193.070467][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.120022][ T4272] usb 3-1: config 0 descriptor?? [ 193.163882][ T4272] usb 3-1: can't set config #0, error -71 [ 193.203025][ T4272] usb 3-1: USB disconnect, device number 4 [ 194.677419][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.683968][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.747769][ T5241] 9pnet_virtio: no channels available for device syz [ 208.468475][ T5273] smc: net device vcan0 erased user defined pnetid SYZ1 [ 214.366257][ T5295] netlink: 'syz.3.201': attribute type 4 has an invalid length. [ 214.374162][ T5295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.201'. [ 214.434926][ T5295] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.013526][ T5304] smc: net device vcan0 applied user defined pnetid SYZ1 [ 215.024342][ T5304] smc: net device vcan0 erased user defined pnetid SYZ1 [ 215.703455][ T5299] siw: device registration error -23 [ 217.712615][ T5299] 9pnet_virtio: no channels available for device syz [ 220.041066][ T5316] smc: net device vcan0 applied user defined pnetid SYZ1 [ 220.048529][ T5316] smc: net device vcan0 erased user defined pnetid SYZ1 [ 221.662637][ T5334] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 221.973320][ T5334] netlink: 152 bytes leftover after parsing attributes in process `syz.2.213'. [ 222.004722][ T5334] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.239595][ T5371] smc: net device vcan0 applied user defined pnetid SYZ1 [ 233.247697][ T5371] smc: net device vcan0 erased user defined pnetid SYZ1 [ 234.295775][ T5383] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 234.334139][ T5383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.226'. [ 234.385025][ T5383] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 239.217092][ T5413] 9pnet_virtio: no channels available for device syz [ 240.342084][ T5407] 9pnet_virtio: no channels available for device syz [ 242.761323][ T5435] smc: net device vcan0 applied user defined pnetid SYZ1 [ 242.772419][ T5435] smc: net device vcan0 erased user defined pnetid SYZ1 [ 244.060853][ T5441] netlink: 48 bytes leftover after parsing attributes in process `syz.2.238'. [ 247.422177][ T5448] netlink: 'syz.4.239': attribute type 4 has an invalid length. [ 247.430039][ T5448] netlink: 152 bytes leftover after parsing attributes in process `syz.4.239'. [ 247.445596][ T5448] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 249.328365][ T5454] netlink: 48 bytes leftover after parsing attributes in process `syz.2.243'. [ 251.491065][ T5470] smc: net device vcan0 applied user defined pnetid SYZ1 [ 251.502033][ T5470] smc: net device vcan0 erased user defined pnetid SYZ1 [ 253.424671][ T5480] raw_sendmsg: syz.4.246 forgot to set AF_INET. Fix it! [ 253.702538][ T5487] smc: net device vcan0 applied user defined pnetid SYZ1 [ 253.711242][ T5487] smc: net device vcan0 erased user defined pnetid SYZ1 [ 255.843137][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849586][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.886180][ T5505] lo speed is unknown, defaulting to 1000 [ 256.892958][ T5505] lo speed is unknown, defaulting to 1000 [ 256.901237][ T5505] lo speed is unknown, defaulting to 1000 [ 256.967539][ T5505] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 257.026597][ T5508] 9pnet_virtio: no channels available for device syz [ 257.063141][ T5505] lo speed is unknown, defaulting to 1000 [ 257.072952][ T5505] lo speed is unknown, defaulting to 1000 [ 257.083002][ T5505] lo speed is unknown, defaulting to 1000 [ 257.104336][ T5505] lo speed is unknown, defaulting to 1000 [ 257.114739][ T5505] lo speed is unknown, defaulting to 1000 [ 263.780579][ T5548] smc: net device vcan0 applied user defined pnetid SYZ1 [ 263.789480][ T5548] smc: net device vcan0 erased user defined pnetid SYZ1 [ 265.211757][ T5556] smc: net device vcan0 applied user defined pnetid SYZ1 [ 265.222809][ T5556] smc: net device vcan0 erased user defined pnetid SYZ1 [ 266.428230][ T5565] siw: device registration error -23 [ 266.499983][ T5567] 9pnet_virtio: no channels available for device syz [ 267.424838][ T5569] siw: device registration error -23 [ 267.496651][ T5571] 9pnet_virtio: no channels available for device syz [ 271.754311][ T5600] 9pnet_virtio: no channels available for device syz [ 273.179769][ T5610] smc: net device vcan0 applied user defined pnetid SYZ1 [ 273.188536][ T5610] smc: net device vcan0 erased user defined pnetid SYZ1 [ 275.396862][ T5626] netlink: 'syz.2.281': attribute type 4 has an invalid length. [ 275.404798][ T5626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.281'. [ 275.413897][ T5626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.179082][ T5630] siw: device registration error -23 [ 277.726715][ T5636] 9pnet_virtio: no channels available for device syz [ 280.516240][ T5658] blktrace: Concurrent blktraces are not allowed on loop4 [ 281.833452][ T5663] smc: net device vcan0 applied user defined pnetid SYZ1 [ 281.893904][ T5663] smc: net device vcan0 erased user defined pnetid SYZ1 [ 285.321927][ T5695] 9pnet_virtio: no channels available for device syz [ 288.675501][ T5715] siw: device registration error -23 [ 288.747535][ T5717] 9pnet_virtio: no channels available for device syz [ 290.460793][ T5737] siw: device registration error -23 [ 290.532959][ T5739] 9pnet_virtio: no channels available for device syz [ 291.347036][ T5740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 291.353721][ T5740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.408748][ T5740] vhci_hcd vhci_hcd.0: Device attached [ 291.684748][ T4345] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 292.117575][ T5748] siw: device registration error -23 [ 292.186173][ T5750] 9pnet_virtio: no channels available for device syz [ 293.219354][ T5741] vhci_hcd: connection reset by peer [ 293.237546][ T4433] vhci_hcd: stop threads [ 293.241925][ T4433] vhci_hcd: release socket [ 293.277716][ T4433] vhci_hcd: disconnect device [ 293.546653][ T5755] loop1: detected capacity change from 0 to 128 [ 294.242860][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.646501][ T5755] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.035170][ T4345] vhci_hcd: vhci_device speed not set [ 297.220759][ T5776] device gretap1 entered promiscuous mode [ 297.283049][ T5776] batman_adv: batadv0: Adding interface: gretap1 [ 297.303638][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 297.364867][ T5776] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.645011][ T5776] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 299.846001][ T5793] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 299.853850][ T5793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.317'. [ 299.898804][ T5793] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.721041][ T5818] blktrace: Concurrent blktraces are not allowed on loop4 [ 305.901623][ T5831] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 305.916095][ T5831] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 305.924782][ T5831] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 310.689832][ T5853] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 310.709881][ T5853] netlink: 152 bytes leftover after parsing attributes in process `syz.3.334'. [ 310.722014][ T5853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.929927][ T5859] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 310.968927][ T5859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.333'. [ 311.012465][ T5859] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 313.270753][ T5869] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 313.280111][ T5869] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 313.288838][ T5869] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 316.249628][ T4284] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 316.250920][ T4284] Bluetooth: hci4: Malformed LE Event: 0x02 [ 316.641036][ T5893] blktrace: Concurrent blktraces are not allowed on loop4 [ 316.949482][ T5898] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 317.249265][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.256117][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.933642][ T5951] netlink: 'syz.4.354': attribute type 4 has an invalid length. [ 324.941623][ T5951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.354'. [ 324.952534][ T5951] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.804275][ T5965] 9pnet_virtio: no channels available for device syz [ 328.919684][ T5970] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 328.927836][ T5970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.360'. [ 328.937143][ T5970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 330.479289][ T5976] blktrace: Concurrent blktraces are not allowed on loop4 [ 332.417623][ T6003] siw: device registration error -23 [ 332.491122][ T6005] 9pnet_virtio: no channels available for device syz [ 333.681072][ T6007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 333.687678][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 333.723857][ T6007] vhci_hcd vhci_hcd.0: Device attached [ 333.984656][ T4318] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 334.812033][ T6009] vhci_hcd: connection reset by peer [ 334.822262][ T4405] vhci_hcd: stop threads [ 334.833814][ T4405] vhci_hcd: release socket [ 334.857772][ T4405] vhci_hcd: disconnect device [ 335.295074][ T4424] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 335.374154][ T6033] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 335.383495][ T6033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.374'. [ 335.395333][ T6033] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.524761][ T4424] usb 2-1: Using ep0 maxpacket: 16 [ 336.020629][ T4424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.039984][ T4424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 336.124709][ T4424] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.176097][ T4424] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 336.200340][ T4424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.233320][ T4424] usb 2-1: Product: syz [ 336.244671][ T4424] usb 2-1: Manufacturer: syz [ 336.374698][ T4424] usb 2-1: SerialNumber: syz [ 336.401330][ T4424] usb 2-1: config 0 descriptor?? [ 337.692005][ T4424] mcba_usb 2-1:0.0: Can't find endpoints [ 339.244894][ T4318] vhci_hcd: vhci_device speed not set [ 339.364424][ T6049] siw: device registration error -23 [ 339.440740][ T6051] 9pnet_virtio: no channels available for device syz [ 340.559482][ T5255] usb 2-1: USB disconnect, device number 2 [ 342.390686][ T6068] smc: net device vcan0 applied user defined pnetid SYZ1 [ 342.401138][ T6068] smc: net device vcan0 erased user defined pnetid SYZ1 [ 343.478400][ T6065] siw: device registration error -23 [ 343.598394][ T6078] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 343.607337][ T6078] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 343.616066][ T6078] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 344.480899][ T6067] 9pnet_virtio: no channels available for device syz [ 345.751122][ T6082] siw: device registration error -23 [ 345.822394][ T6084] 9pnet_virtio: no channels available for device syz [ 346.308047][ T6091] siw: device registration error -23 [ 346.385477][ T6093] 9pnet_virtio: no channels available for device syz [ 349.864894][ T4272] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.507539][ T4272] usb 2-1: Using ep0 maxpacket: 16 [ 350.538513][ T4272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.587112][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 350.614023][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.636416][ T4272] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 350.651300][ T4272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.660288][ T4272] usb 2-1: Product: syz [ 350.667774][ T4272] usb 2-1: Manufacturer: syz [ 350.673341][ T4272] usb 2-1: SerialNumber: syz [ 350.702181][ T4272] usb 2-1: config 0 descriptor?? [ 350.792875][ T4272] mcba_usb 2-1:0.0: Can't find endpoints [ 351.454921][ T6125] 9pnet_virtio: no channels available for device syz [ 353.764241][ T4272] usb 2-1: USB disconnect, device number 3 [ 354.837428][ T6141] 9pnet_virtio: no channels available for device syz [ 357.359859][ T6151] siw: device registration error -23 [ 357.426351][ T6154] 9pnet_virtio: no channels available for device syz [ 359.970036][ T6177] siw: device registration error -23 [ 360.041899][ T6179] 9pnet_virtio: no channels available for device syz [ 366.558604][ T6210] siw: device registration error -23 [ 366.631486][ T6212] 9pnet_virtio: no channels available for device syz [ 367.810615][ T6220] 9pnet_virtio: no channels available for device syz [ 368.709855][ T6225] netlink: 'syz.3.416': attribute type 4 has an invalid length. [ 368.717831][ T6225] netlink: 152 bytes leftover after parsing attributes in process `syz.3.416'. [ 368.727133][ T6225] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.297212][ T6248] smc: net device vcan0 applied user defined pnetid SYZ1 [ 371.311610][ T6248] smc: net device vcan0 erased user defined pnetid SYZ1 [ 374.781138][ T6271] siw: device registration error -23 [ 374.855220][ T6273] 9pnet_virtio: no channels available for device syz [ 375.938519][ T6277] siw: device registration error -23 [ 376.086564][ T6279] 9pnet_virtio: no channels available for device syz [ 378.383558][ T6293] 9pnet_virtio: no channels available for device syz [ 378.688908][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.695330][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.303120][ T6307] netlink: 'syz.3.436': attribute type 4 has an invalid length. [ 379.311136][ T6307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.436'. [ 379.321778][ T6307] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.483416][ T6318] blktrace: Concurrent blktraces are not allowed on loop4 [ 384.333735][ T6329] 9pnet_virtio: no channels available for device syz [ 385.967148][ T6337] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 385.976360][ T6337] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 385.984961][ T6337] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 387.892539][ T6351] siw: device registration error -23 [ 387.960118][ T6352] 9pnet_virtio: no channels available for device syz [ 389.059378][ T6364] siw: device registration error -23 [ 389.130239][ T6366] 9pnet_virtio: no channels available for device syz [ 391.259839][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 396.627959][ T6410] binfmt_misc: register: failed to install interpreter file ./file0 [ 398.589098][ T6415] loop4: detected capacity change from 0 to 22 [ 398.637304][ T6415] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 398.727403][ T6415] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 400.608294][ T6432] blktrace: Concurrent blktraces are not allowed on loop4 [ 400.774503][ T6433] blktrace: Concurrent blktraces are not allowed on loop4 [ 404.649062][ T4284] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 404.649153][ T4284] Bluetooth: hci2: Malformed LE Event: 0x02 [ 405.847712][ T6507] binfmt_misc: register: failed to install interpreter file ./file0 [ 406.904819][ T6509] siw: device registration error -23 [ 407.059074][ T6505] 9pnet_virtio: no channels available for device syz [ 409.965388][ T6522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.476'. [ 410.541926][ T6533] 9pnet_virtio: no channels available for device syz [ 417.682489][ T6605] blktrace: Concurrent blktraces are not allowed on loop4 [ 418.066174][ T6615] smc: net device vcan0 applied user defined pnetid SYZ1 [ 418.078344][ T6615] smc: net device vcan0 erased user defined pnetid SYZ1 [ 419.976380][ T6629] netlink: 'syz.4.494': attribute type 4 has an invalid length. [ 419.984588][ T6629] netlink: 152 bytes leftover after parsing attributes in process `syz.4.494'. [ 419.996201][ T6629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 420.584160][ T6631] 9pnet_virtio: no channels available for device syz [ 421.314649][ T4284] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 421.314712][ T4284] Bluetooth: hci4: Malformed LE Event: 0x02 [ 422.308178][ T6632] 9pnet_virtio: no channels available for device syz [ 423.550462][ T6670] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 423.560194][ T6670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.499'. [ 423.569447][ T6670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 425.987400][ T6677] smc: net device vcan0 applied user defined pnetid SYZ1 [ 426.047486][ T6677] smc: net device vcan0 erased user defined pnetid SYZ1 [ 426.256318][ T6683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 426.262921][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.795290][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 427.064749][ T5173] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 427.424252][ T6711] device gretap1 entered promiscuous mode [ 427.815075][ T6715] blktrace: Concurrent blktraces are not allowed on loop4 [ 429.131328][ T6688] vhci_hcd: connection reset by peer [ 429.143269][ T4404] vhci_hcd: stop threads [ 429.185089][ T4404] vhci_hcd: release socket [ 429.252512][ T4404] vhci_hcd: disconnect device [ 429.409662][ T6723] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 429.418239][ T6723] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 429.426965][ T6723] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 430.643743][ T6731] device gretap1 entered promiscuous mode [ 430.683572][ T6731] batman_adv: batadv0: Adding interface: gretap1 [ 430.695358][ T6731] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.877583][ T6731] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 431.405110][ T6738] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 431.411702][ T6738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.224707][ T5173] vhci_hcd: vhci_device speed not set [ 432.713209][ T6738] vhci_hcd vhci_hcd.0: Device attached [ 433.064739][ T22] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 433.481781][ T6739] vhci_hcd: connection reset by peer [ 433.497824][ T4720] vhci_hcd: stop threads [ 433.502262][ T4720] vhci_hcd: release socket [ 433.512521][ T4720] vhci_hcd: disconnect device [ 438.364660][ T22] vhci_hcd: vhci_device speed not set [ 439.023311][ T6808] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 439.032036][ T6808] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 439.042026][ T6808] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 440.127503][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.133911][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.053498][ T6823] blktrace: Concurrent blktraces are not allowed on loop4 [ 441.336977][ T6839] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 441.345445][ T6839] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 441.354189][ T6839] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 443.514681][ T6150] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 443.904822][ T6150] usb 1-1: Using ep0 maxpacket: 16 [ 444.118242][ T6150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.181559][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 444.270496][ T6854] siw: device registration error -23 [ 444.338237][ T6856] 9pnet_virtio: no channels available for device syz [ 445.094001][ T6150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.183685][ T6150] usb 1-1: string descriptor 0 read error: -71 [ 445.217300][ T6150] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 445.323468][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.371976][ T6150] usb 1-1: config 0 descriptor?? [ 445.386806][ T6150] usb 1-1: can't set config #0, error -71 [ 445.474051][ T6859] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 445.482453][ T6859] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 445.491072][ T6859] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 447.142264][ T6150] usb 1-1: USB disconnect, device number 3 [ 447.686141][ T6866] smc: net device vcan0 applied user defined pnetid SYZ1 [ 447.696642][ T6866] smc: net device vcan0 erased user defined pnetid SYZ1 [ 448.942325][ T6876] loop3: detected capacity change from 0 to 256 [ 448.979053][ T6876] exfat: Bad value for 'uid' [ 449.871638][ T6894] 9pnet_virtio: no channels available for device syz [ 450.879626][ T6903] binfmt_misc: register: failed to install interpreter file ./file0 [ 451.204945][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 451.411030][ T6916] 9pnet_virtio: no channels available for device syz [ 451.534601][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 452.145168][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.159228][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 452.214592][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.272178][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 452.306141][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.321318][ T14] usb 2-1: Product: syz [ 452.328376][ T14] usb 2-1: Manufacturer: syz [ 452.348252][ T14] usb 2-1: SerialNumber: syz [ 452.392200][ T14] usb 2-1: config 0 descriptor?? [ 452.610240][ T14] mcba_usb 2-1:0.0: Can't find endpoints [ 454.197039][ T6927] blktrace: Concurrent blktraces are not allowed on loop4 [ 455.591969][ T14] usb 2-1: USB disconnect, device number 4 [ 456.210799][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 456.480953][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.608803][ T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 456.698410][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.712162][ T14] usb 2-1: Product: syz [ 456.716689][ T14] usb 2-1: Manufacturer: syz [ 456.721344][ T14] usb 2-1: SerialNumber: syz [ 456.752083][ T14] usb 2-1: config 0 descriptor?? [ 456.987118][ T14] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 456.993915][ T14] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 457.064992][ T6944] siw: device registration error -23 [ 457.088797][ T6944] 9pnet_virtio: no channels available for device syz [ 457.944852][ T14] usb 2-1: USB disconnect, device number 5 [ 459.336385][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 460.398326][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 460.413884][ T14] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 460.534559][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.604344][ T14] usb 2-1: Product: syz [ 460.644646][ T6965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 460.644666][ T14] usb 2-1: Manufacturer: syz [ 460.651318][ T6965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.713511][ T14] usb 2-1: SerialNumber: syz [ 460.786327][ T14] usb 2-1: config 0 descriptor?? [ 461.005383][ T14] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 006 [ 461.411457][ T6965] vhci_hcd vhci_hcd.0: Device attached [ 461.574060][ T41] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 462.364747][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 462.534829][ T5490] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 462.574752][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 462.585537][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.661403][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 462.756746][ T5490] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.221223][ T5490] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 463.272849][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.308764][ T5490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.367970][ T5490] usb 1-1: Product: syz [ 463.373398][ T5490] usb 1-1: Manufacturer: syz [ 463.388949][ T14] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 463.398674][ T5490] usb 1-1: SerialNumber: syz [ 463.405724][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.414147][ T14] usb 5-1: Product: syz [ 463.419361][ T5490] usb 1-1: config 0 descriptor?? [ 463.438614][ T14] usb 5-1: Manufacturer: syz [ 463.470841][ T14] usb 5-1: SerialNumber: syz [ 463.577491][ T14] usb 5-1: config 0 descriptor?? [ 463.616875][ T14] mcba_usb 5-1:0.0: Can't find endpoints [ 463.643710][ T5490] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 463.675741][ T5490] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22 [ 463.787804][ T5490] usb 1-1: USB disconnect, device number 4 [ 464.348892][ T6991] i2c i2c-1: failure sending STOP [ 464.397859][ T6968] vhci_hcd: connection reset by peer [ 464.403401][ T4708] vhci_hcd: stop threads [ 464.417914][ T5255] usb 2-1: USB disconnect, device number 6 [ 464.430277][ T4708] vhci_hcd: release socket [ 464.444036][ T4708] vhci_hcd: disconnect device [ 466.984248][ T7025] siw: device registration error -23 [ 467.052752][ T7027] 9pnet_virtio: no channels available for device syz [ 467.174599][ T41] vhci_hcd: vhci_device speed not set [ 470.602853][ T22] usb 5-1: USB disconnect, device number 3 [ 471.674640][ T7058] blktrace: Concurrent blktraces are not allowed on loop4 [ 471.762295][ T7064] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 471.770768][ T7064] netlink: 152 bytes leftover after parsing attributes in process `syz.2.587'. [ 471.780104][ T7064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.314118][ T7071] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 473.320701][ T7071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.633577][ T7071] vhci_hcd vhci_hcd.0: Device attached [ 473.727386][ T7081] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 473.872137][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 473.894914][ T5417] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 477.421122][ T7072] vhci_hcd: connection reset by peer [ 477.431208][ T4728] vhci_hcd: stop threads [ 477.591295][ T4728] vhci_hcd: release socket [ 477.632076][ T4728] vhci_hcd: disconnect device [ 477.724758][ T4272] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 477.924624][ T4272] usb 1-1: Using ep0 maxpacket: 16 [ 477.975997][ T4272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.005987][ T4272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 478.047974][ T4272] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.607502][ T4272] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 478.627704][ T4272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.637407][ T4272] usb 1-1: Product: syz [ 478.641582][ T4272] usb 1-1: Manufacturer: syz [ 478.646484][ T4272] usb 1-1: SerialNumber: syz [ 478.680288][ T4272] usb 1-1: config 0 descriptor?? [ 478.742522][ T4272] mcba_usb 1-1:0.0: Can't find endpoints [ 479.094764][ T5417] vhci_hcd: vhci_device speed not set [ 479.784285][ T7108] loop1: detected capacity change from 0 to 22 [ 479.802337][ T7108] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 479.886892][ T7108] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 483.493145][ T5255] usb 1-1: USB disconnect, device number 5 [ 484.314569][ T7131] siw: device registration error -23 [ 484.467533][ T7135] 9pnet_virtio: no channels available for device syz [ 491.416352][ T7173] 9pnet_virtio: no channels available for device syz [ 494.474630][ T7184] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 494.481207][ T7184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.526379][ T7184] vhci_hcd vhci_hcd.0: Device attached [ 494.774717][ T4272] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 496.174670][ T4345] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 496.374644][ T4345] usb 4-1: Using ep0 maxpacket: 32 [ 496.386903][ T4345] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 496.414070][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.422413][ T7185] vhci_hcd: connection reset by peer [ 496.440741][ T4715] vhci_hcd: stop threads [ 496.460237][ T4715] vhci_hcd: release socket [ 496.497046][ T4715] vhci_hcd: disconnect device [ 496.502226][ T4345] usb 4-1: Product: syz [ 496.537911][ T4345] usb 4-1: Manufacturer: syz [ 496.564320][ T4345] usb 4-1: SerialNumber: syz [ 496.959664][ T4345] usb 4-1: config 0 descriptor?? [ 497.206560][ T4345] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 006 [ 499.884705][ T4272] vhci_hcd: vhci_device speed not set [ 499.884815][ T7214] i2c i2c-1: failure reading status [ 500.064149][ T4345] usb 4-1: USB disconnect, device number 6 [ 500.414279][ T7229] blktrace: Concurrent blktraces are not allowed on loop4 [ 502.307096][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.313916][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.474858][ T7239] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 502.481550][ T7239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 502.797600][ T7239] vhci_hcd vhci_hcd.0: Device attached [ 503.074846][ T4272] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 503.723890][ T7252] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 503.732426][ T7252] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 503.741797][ T7252] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 503.964861][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 504.615160][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 504.774621][ T22] usb 1-1: device descriptor read/64, error -32 [ 505.044629][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 505.289866][ T7240] vhci_hcd: connection reset by peer [ 505.295642][ T4728] vhci_hcd: stop threads [ 505.300055][ T4728] vhci_hcd: release socket [ 505.316247][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.329828][ T4728] vhci_hcd: disconnect device [ 505.384364][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 505.445437][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.491455][ T22] usb 1-1: Product: syz [ 505.512062][ T22] usb 1-1: Manufacturer: syz [ 505.532440][ T22] usb 1-1: SerialNumber: syz [ 505.566153][ T22] usb 1-1: config 0 descriptor?? [ 505.782486][ T22] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 505.805762][ T22] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22 [ 505.828718][ T22] usb 1-1: USB disconnect, device number 7 [ 508.724705][ T4272] vhci_hcd: vhci_device speed not set [ 510.280529][ T7283] 9pnet_virtio: no channels available for device syz [ 515.970657][ T7311] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 516.482652][ T7320] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 516.491300][ T7320] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 516.499992][ T7320] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 517.141440][ T7323] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 517.158453][ T7322] netlink: 'syz.4.649': attribute type 4 has an invalid length. [ 517.195249][ T7322] netlink: 152 bytes leftover after parsing attributes in process `syz.4.649'. [ 517.216115][ T7322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 517.479527][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 530.015753][ T7392] siw: device registration error -23 [ 530.087656][ T7394] 9pnet_virtio: no channels available for device syz [ 530.444379][ T7371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.210701][ T7441] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 539.219160][ T7441] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 539.228823][ T7441] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 541.820815][ T7455] smc: net device vcan0 applied user defined pnetid SYZ1 [ 541.833069][ T7455] smc: net device vcan0 erased user defined pnetid SYZ1 [ 542.687951][ T7458] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 542.696016][ T7458] netlink: 152 bytes leftover after parsing attributes in process `syz.4.679'. [ 542.705268][ T7458] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 551.804273][ T7500] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 551.811001][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.025838][ T7508] siw: device registration error -23 [ 552.994726][ T4272] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 553.048029][ T7513] smc: net device vcan0 applied user defined pnetid SYZ1 [ 553.057160][ T7513] smc: net device vcan0 erased user defined pnetid SYZ1 [ 553.849192][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 553.857308][ T7516] blktrace: Concurrent blktraces are not allowed on loop4 [ 555.472702][ T7529] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 555.481267][ T7529] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 555.489962][ T7529] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 556.617208][ T7533] siw: device registration error -23 [ 558.208369][ T7542] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 558.217689][ T7542] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 558.226738][ T7542] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 558.579823][ T7501] vhci_hcd: connection reset by peer [ 558.595394][ T4715] vhci_hcd: stop threads [ 558.599752][ T4715] vhci_hcd: release socket [ 558.641209][ T4715] vhci_hcd: disconnect device [ 558.704828][ T4272] vhci_hcd: vhci_device speed not set [ 560.366598][ T7558] loop0: detected capacity change from 0 to 128 [ 561.331055][ T7558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 561.411166][ T7558] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 562.294627][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 562.974585][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 562.983817][ T7] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 563.108003][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114443][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.153475][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.674620][ T7] usb 5-1: Product: syz [ 563.678874][ T7] usb 5-1: Manufacturer: syz [ 563.683516][ T7] usb 5-1: SerialNumber: syz [ 563.690236][ T7] usb 5-1: config 0 descriptor?? [ 563.721708][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 564.323197][ T7] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 004 [ 566.656827][ T7601] siw: device registration error -23 [ 567.404946][ T7590] i2c i2c-1: failure reading status [ 568.091051][ T4345] usb 5-1: USB disconnect, device number 4 [ 572.190554][ T7633] smc: net device vcan0 applied user defined pnetid SYZ1 [ 572.202677][ T7633] smc: net device vcan0 erased user defined pnetid SYZ1 [ 573.529786][ T7646] netlink: 'syz.4.724': attribute type 4 has an invalid length. [ 573.537894][ T7646] netlink: 152 bytes leftover after parsing attributes in process `syz.4.724'. [ 573.547554][ T7646] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 580.459581][ T7675] binfmt_misc: register: failed to install interpreter file ./file0 [ 583.295301][ T7698] siw: device registration error -23 [ 585.191472][ T7709] 9pnet_virtio: no channels available for device syz [ 590.518763][ T7740] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 590.528463][ T7740] netlink: 152 bytes leftover after parsing attributes in process `syz.1.748'. [ 590.537978][ T7740] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 591.665172][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 591.671787][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 591.776916][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 592.134554][ T4424] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 592.284845][ T7761] 9pnet_virtio: no channels available for device syz [ 593.001024][ T7753] vhci_hcd: connection reset by peer [ 593.010165][ T4722] vhci_hcd: stop threads [ 593.022366][ T4722] vhci_hcd: release socket [ 593.053507][ T4722] vhci_hcd: disconnect device [ 593.684603][ T5417] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 593.954780][ T5417] usb 2-1: Using ep0 maxpacket: 16 [ 593.970569][ T5417] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.044525][ T5417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 594.063526][ T5417] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.124588][ T5417] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 594.143905][ T5417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.167560][ T5417] usb 2-1: Product: syz [ 594.171768][ T5417] usb 2-1: Manufacturer: syz [ 594.205019][ T5417] usb 2-1: SerialNumber: syz [ 594.221692][ T5417] usb 2-1: config 0 descriptor?? [ 594.249579][ T5417] mcba_usb 2-1:0.0: Can't find endpoints [ 594.935607][ T7779] smc: net device vcan0 applied user defined pnetid SYZ1 [ 594.944631][ T7779] smc: net device vcan0 erased user defined pnetid SYZ1 [ 596.667120][ T7791] netlink: 'syz.3.757': attribute type 4 has an invalid length. [ 596.675208][ T7791] netlink: 152 bytes leftover after parsing attributes in process `syz.3.757'. [ 596.684632][ T7791] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 596.734737][ T4272] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 596.924950][ T4272] usb 1-1: Using ep0 maxpacket: 32 [ 596.943968][ T4272] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 596.953243][ T4272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.962537][ T4272] usb 1-1: Product: syz [ 596.966827][ T4272] usb 1-1: Manufacturer: syz [ 596.971541][ T4272] usb 1-1: SerialNumber: syz [ 597.138642][ T4272] usb 1-1: config 0 descriptor?? [ 597.389310][ T4424] vhci_hcd: vhci_device speed not set [ 597.421866][ T4272] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 008 [ 599.001742][ T7787] i2c i2c-1: failure reading data [ 601.087526][ T7] usb 1-1: USB disconnect, device number 8 [ 603.508351][ T7832] siw: device registration error -23 [ 604.942813][ T5417] usb 2-1: USB disconnect, device number 7 [ 606.728955][ T7852] siw: device registration error -23 [ 611.314545][ T5490] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 611.717495][ T5490] usb 1-1: Using ep0 maxpacket: 16 [ 611.985097][ T5490] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.019590][ T5490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 612.087512][ T5490] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.243727][ T5490] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 612.293252][ T5490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.331991][ T5490] usb 1-1: Product: syz [ 612.350076][ T5490] usb 1-1: Manufacturer: syz [ 612.384550][ T5490] usb 1-1: SerialNumber: syz [ 612.416804][ T5490] usb 1-1: config 0 descriptor?? [ 612.451712][ T5490] mcba_usb 1-1:0.0: Can't find endpoints [ 615.034567][ T4345] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 615.126679][ T7924] blktrace: Concurrent blktraces are not allowed on loop4 [ 615.244592][ T4345] usb 4-1: Using ep0 maxpacket: 32 [ 615.255650][ T4345] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 615.279690][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.301571][ T4345] usb 4-1: Product: syz [ 615.314244][ T4345] usb 4-1: Manufacturer: syz [ 615.329520][ T4345] usb 4-1: SerialNumber: syz [ 615.365059][ T4345] usb 4-1: config 0 descriptor?? [ 615.600130][ T4345] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 007 [ 616.017114][ T4272] usb 1-1: USB disconnect, device number 9 [ 617.322779][ T7] usb 4-1: USB disconnect, device number 7 [ 620.887964][ T7969] siw: device registration error -23 [ 620.961069][ T7971] 9pnet_virtio: no channels available for device syz [ 622.392898][ T4424] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 623.204578][ T4424] usb 2-1: Using ep0 maxpacket: 16 [ 623.516857][ T7987] smc: net device vcan0 applied user defined pnetid SYZ1 [ 623.527277][ T7987] smc: net device vcan0 erased user defined pnetid SYZ1 [ 624.155934][ T4424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.167692][ T4424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 624.177616][ T4424] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.196359][ T4424] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 624.206634][ T4424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.215014][ T4424] usb 2-1: Product: syz [ 624.219460][ T4424] usb 2-1: Manufacturer: syz [ 624.224068][ T4424] usb 2-1: SerialNumber: syz [ 624.232530][ T4424] usb 2-1: config 0 descriptor?? [ 624.325226][ T4424] mcba_usb 2-1:0.0: Can't find endpoints [ 624.448058][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.455235][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.516124][ T7993] loop0: detected capacity change from 0 to 128 [ 624.641268][ T7993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 624.698584][ T7993] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 625.720887][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 627.466488][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 627.504944][ T4272] usb 2-1: USB disconnect, device number 8 [ 631.744617][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 631.781920][ T7] usb 5-1: device descriptor read/all, error -71 [ 632.139700][ T8030] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 635.195338][ T8045] netlink: 'syz.2.815': attribute type 4 has an invalid length. [ 635.203690][ T8045] netlink: 152 bytes leftover after parsing attributes in process `syz.2.815'. [ 635.212869][ T8045] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 635.829597][ T8052] siw: device registration error -23 [ 643.454536][ T4272] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 644.145458][ T4272] usb 2-1: Using ep0 maxpacket: 16 [ 644.169178][ T4272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.134500][ T4272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 645.144904][ T4272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.189454][ T4272] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 645.614778][ T4272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.632534][ T4272] usb 2-1: Product: syz [ 645.638611][ T4272] usb 2-1: Manufacturer: syz [ 645.643330][ T4272] usb 2-1: SerialNumber: syz [ 645.710464][ T4272] usb 2-1: config 0 descriptor?? [ 647.671825][ T8117] smc: net device vcan0 applied user defined pnetid SYZ1 [ 647.718147][ T8118] smc: net device vcan0 erased user defined pnetid SYZ1 [ 650.765061][ T4272] usb 2-1: can't set config #0, error -110 [ 650.877049][ T8131] blktrace: Concurrent blktraces are not allowed on loop4 [ 650.901038][ T4272] usb 2-1: USB disconnect, device number 9 [ 654.507857][ T8163] fuse: Bad value for 'group_id' [ 654.710730][ T8167] 9pnet_virtio: no channels available for device syz [ 655.933648][ T8173] siw: device registration error -23 [ 658.834517][ T5417] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 659.065154][ T5417] usb 5-1: Using ep0 maxpacket: 16 [ 659.167978][ T8200] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 659.176600][ T8200] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 659.185218][ T8200] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 660.316330][ T5417] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.394614][ T5417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 660.457575][ T5417] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.670037][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 663.681950][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 664.124915][ T7] usb 3-1: device descriptor read/64, error -32 [ 664.574584][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 664.889874][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.530854][ T7] usb 3-1: config 0 has no interfaces? [ 665.607082][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 665.645315][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.663614][ T7] usb 3-1: Product: syz [ 665.668060][ T7] usb 3-1: Manufacturer: syz [ 665.683920][ T7] usb 3-1: SerialNumber: syz [ 665.717007][ T7] usb 3-1: config 0 descriptor?? [ 666.064912][ T4315] usb 3-1: USB disconnect, device number 6 [ 667.914575][ T5417] usb 5-1: string descriptor 0 read error: -32 [ 668.973190][ T5417] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 668.996579][ T5417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.018456][ T5417] usb 5-1: config 0 descriptor?? [ 669.099379][ T8237] siw: device registration error -23 [ 669.178953][ T5417] usb 5-1: can't set config #0, error -32 [ 670.274783][ T8248] smc: net device vcan0 applied user defined pnetid SYZ1 [ 670.286215][ T8248] smc: net device vcan0 erased user defined pnetid SYZ1 [ 671.846513][ T7] usb 5-1: USB disconnect, device number 7 [ 672.172350][ T8256] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 672.756921][ T8256] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 674.231688][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 675.622656][ T8262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.870'. [ 685.704557][ T4272] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 685.719322][ T8334] 9pnet_virtio: no channels available for device syz [ 685.888714][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.896974][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.639135][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.0.887'. [ 686.699867][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.428323][ T4272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 688.727990][ T4272] usb 3-1: string descriptor 0 read error: -71 [ 688.744625][ T4272] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 688.800709][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.866897][ T4272] usb 3-1: config 0 descriptor?? [ 688.887897][ T4272] usb 3-1: can't set config #0, error -71 [ 688.969484][ T4272] usb 3-1: USB disconnect, device number 7 [ 690.062550][ T8357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 690.108113][ T8357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 690.121331][ T8357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 690.131710][ T8357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 690.140890][ T8357] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 690.148568][ T8357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 690.254706][ T8363] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 690.263311][ T8363] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 690.272019][ T8363] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 691.168510][ T8355] lo speed is unknown, defaulting to 1000 [ 691.693000][ T4718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.809889][ T4718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.020763][ T4718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.177990][ T4718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.203962][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 692.211240][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 692.661835][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.698116][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.739387][ T8355] device bridge_slave_0 entered promiscuous mode [ 692.819457][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.843064][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.876649][ T8355] device bridge_slave_1 entered promiscuous mode [ 692.970694][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.009679][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.294536][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 695.598984][ T8355] team0: Port device team_slave_0 added [ 695.634515][ T8393] smc: net device vcan0 applied user defined pnetid SYZ1 [ 695.650068][ T8394] smc: net device vcan0 erased user defined pnetid SYZ1 [ 695.728704][ T8355] team0: Port device team_slave_1 added [ 695.927759][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.054465][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.304584][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.364531][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 696.935932][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.942951][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.818615][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.554513][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 700.057148][ T8355] device hsr_slave_0 entered promiscuous mode [ 700.134996][ T8355] device hsr_slave_1 entered promiscuous mode [ 700.165526][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.196209][ T8355] Cannot create hsr debugfs directory [ 701.461512][ T4718] batman_adv: batadv0: Removing interface: gretap1 [ 702.089460][ T8442] siw: device registration error -23 [ 702.164754][ T8449] 9pnet_virtio: no channels available for device syz [ 703.933780][ T8355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 704.704158][ T8355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 704.724433][ T8355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 704.741151][ T8355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 706.824893][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.894522][ T4718] device hsr_slave_0 left promiscuous mode [ 708.149023][ T4718] device hsr_slave_1 left promiscuous mode [ 708.278631][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.566752][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.585959][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.833287][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.248842][ T4718] device bridge_slave_1 left promiscuous mode [ 710.273236][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.466943][ T4718] device bridge_slave_0 left promiscuous mode [ 710.496562][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.682853][ T4718] device veth1_macvtap left promiscuous mode [ 712.689972][ T4718] device veth0_macvtap left promiscuous mode [ 712.697056][ T4718] device veth1_vlan left promiscuous mode [ 712.703637][ T4718] device veth0_vlan left promiscuous mode [ 715.453690][ T4718] team0 (unregistering): Port device team_slave_1 removed [ 715.513549][ T4718] team0 (unregistering): Port device team_slave_0 removed [ 715.560890][ T4718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.615188][ T4718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.884759][ T4718] bond0 (unregistering): Released all slaves [ 718.152467][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.170572][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 718.186414][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.282799][ T8521] smc: net device vcan0 applied user defined pnetid SYZ1 [ 718.304651][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 718.328979][ T8522] smc: net device vcan0 erased user defined pnetid SYZ1 [ 718.374140][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.418146][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.425563][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.594936][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 719.640715][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 719.707837][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.715243][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.765719][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 719.794318][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 719.821518][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 719.912146][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 719.941017][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 719.972370][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 720.001209][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 720.029815][ T8355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 720.061213][ T8355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.086385][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 720.105488][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 720.200377][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 721.117715][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 721.127462][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 721.215853][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 722.947339][ T8581] netlink: 'syz.1.936': attribute type 1 has an invalid length. [ 723.963416][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 725.478116][ T8586] bond1 (unregistering): Released all slaves [ 727.754549][ T8613] blktrace: Concurrent blktraces are not allowed on loop4 [ 728.133623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.148203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.190651][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.378071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.013343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.144846][ T8651] smc: net device vcan0 applied user defined pnetid SYZ1 [ 733.181102][ T8652] smc: net device vcan0 erased user defined pnetid SYZ1 [ 733.830399][ T8355] device veth0_vlan entered promiscuous mode [ 733.945695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 733.965009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 734.021953][ T8355] device veth1_vlan entered promiscuous mode [ 734.060139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 734.080002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 735.275033][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 735.284155][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 735.332769][ T8355] device veth0_macvtap entered promiscuous mode [ 735.378277][ T8355] device veth1_macvtap entered promiscuous mode [ 735.426194][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.455439][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.480722][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.540679][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.562016][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.584526][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.614584][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.634540][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.660185][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.738108][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.778900][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.879337][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.908672][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.956232][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.926374][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.955227][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.995141][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.099886][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.142681][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.169034][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.224631][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.268535][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.317051][ T8355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.396976][ T8355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.448622][ T8355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.530476][ T8355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.559823][ T8687] smc: net device vcan0 applied user defined pnetid SYZ1 [ 737.585932][ T8688] smc: net device vcan0 erased user defined pnetid SYZ1 [ 737.593106][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 737.637884][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 738.196354][ T4728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.204343][ T4728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.279307][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 738.884628][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.905901][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.987120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 744.220737][ T8744] siw: device registration error -23 [ 744.292251][ T8746] 9pnet_virtio: no channels available for device syz [ 747.345679][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.352085][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.622668][ T8768] siw: device registration error -23 [ 747.695394][ T8770] 9pnet_virtio: no channels available for device syz [ 752.780536][ T8796] 9pnet_virtio: no channels available for device syz [ 752.838136][ T8798] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 752.905990][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'. [ 753.056596][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.081653][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.810718][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.818659][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.080246][ T8844] binfmt_misc: register: failed to install interpreter file ./file0 [ 759.582893][ T8855] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 759.591536][ T8855] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 759.600162][ T8855] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 763.320359][ T8872] 9pnet_virtio: no channels available for device syz [ 765.075636][ T8885] 9pnet_virtio: no channels available for device syz [ 766.286954][ T8893] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 766.296108][ T8893] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 766.305045][ T8893] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 767.849433][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 767.859778][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 767.871797][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 767.886941][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 767.894874][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 767.902233][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 767.996777][ T8891] lo speed is unknown, defaulting to 1000 [ 769.985581][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 772.794967][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 773.801089][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 775.014504][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 777.132247][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 777.843952][ T4737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.094339][ T4737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.654726][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.767281][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.952649][ T8891] device bridge_slave_0 entered promiscuous mode [ 779.991892][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.003536][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.020663][ T8891] device bridge_slave_1 entered promiscuous mode [ 780.051684][ T8996] binfmt_misc: register: failed to install interpreter file ./file0 [ 781.056871][ T4737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.101919][ T9003] loop5: detected capacity change from 0 to 128 [ 781.190981][ T4737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.216440][ T9003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 781.263168][ T9003] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 781.353713][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.408744][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.568537][ T8891] team0: Port device team_slave_0 added [ 782.287416][ T8891] team0: Port device team_slave_1 added [ 782.926005][ T8355] EXT4-fs (loop5): unmounting filesystem. [ 783.114457][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.145059][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.363545][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.088977][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.103444][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.165491][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.728617][ T8891] device hsr_slave_0 entered promiscuous mode [ 787.055105][ T8891] device hsr_slave_1 entered promiscuous mode [ 787.319375][ T8891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.343185][ T8891] Cannot create hsr debugfs directory [ 791.132703][ T8891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 791.181226][ T9076] 9pnet_virtio: no channels available for device syz [ 791.189601][ T8891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 791.299739][ T8891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.452081][ T8891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 792.742978][ T4737] device hsr_slave_0 left promiscuous mode [ 792.792393][ T4737] device hsr_slave_1 left promiscuous mode [ 792.805978][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.842871][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.904977][ T4737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.924008][ T4737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.980984][ T4737] device bridge_slave_1 left promiscuous mode [ 793.023779][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.101470][ T4737] device bridge_slave_0 left promiscuous mode [ 793.115575][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.914264][ T4737] device veth1_macvtap left promiscuous mode [ 794.734095][ T4737] device veth0_macvtap left promiscuous mode [ 794.781368][ T4737] device veth1_vlan left promiscuous mode [ 794.795250][ T4737] device veth0_vlan left promiscuous mode [ 801.896910][ T4737] team0 (unregistering): Port device team_slave_1 removed [ 801.963474][ T4737] team0 (unregistering): Port device team_slave_0 removed [ 802.020617][ T4737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.080542][ T4737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.146949][ T4737] bond0 (unregistering): Released all slaves [ 803.365950][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.403988][ T9104] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 803.465177][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 803.532713][ T9147] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 803.555508][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 803.583382][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.622015][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.771462][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.886995][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.963186][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 804.059167][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.066431][ T4728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.683321][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 804.842997][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 804.939830][ T9175] siw: device registration error -23 [ 805.009066][ T9177] 9pnet_virtio: no channels available for device syz [ 805.625916][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.633083][ T4728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.892242][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.172823][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.355977][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.371563][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.389803][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.471110][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.631797][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 809.338327][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.354832][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.528334][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.016670][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.055229][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.182751][ T8891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.233227][ T9204] loop5: detected capacity change from 0 to 128 [ 810.270466][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.319509][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.338784][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.348345][ T9204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 810.394785][ T9204] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 811.362327][ T8355] EXT4-fs (loop5): unmounting filesystem. [ 812.810336][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 812.859085][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 812.877487][ T9232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 812.884253][ T9232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 812.920985][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.098404][ T9232] vhci_hcd vhci_hcd.0: Device attached [ 813.364506][ T8240] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 814.464783][ T9235] vhci_hcd: connection reset by peer [ 814.471145][ T4737] vhci_hcd: stop threads [ 814.482484][ T4737] vhci_hcd: release socket [ 814.509823][ T4737] vhci_hcd: disconnect device [ 815.244812][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 815.285517][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 815.396662][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 815.430135][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.449496][ T9269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 815.456092][ T9269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 815.477217][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.514179][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.522933][ T9269] vhci_hcd vhci_hcd.0: Device attached [ 815.563588][ T8891] device veth0_vlan entered promiscuous mode [ 815.667091][ T8891] device veth1_vlan entered promiscuous mode [ 815.794724][ T5173] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 815.964527][ T8357] Bluetooth: hci5: command 0x0406 tx timeout [ 816.709456][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 816.761395][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 816.830828][ T8891] device veth0_macvtap entered promiscuous mode [ 816.864562][ T8891] device veth1_macvtap entered promiscuous mode [ 816.871686][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.926119][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.943376][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 816.991669][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.029423][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.078231][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.113541][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.144160][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.172650][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.190960][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.223680][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 817.247669][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.364991][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 818.794512][ T8240] vhci_hcd: vhci_device speed not set [ 818.879013][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.910281][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.951454][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.054729][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.091408][ T8891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.193485][ T9295] siw: device registration error -23 [ 819.314413][ T8891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.389872][ T9299] 9pnet_virtio: no channels available for device syz [ 820.046109][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.063565][ T8891] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.072628][ T8891] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.081615][ T8891] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.091021][ T8891] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.116339][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.145372][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 822.542671][ T9270] vhci_hcd: connection reset by peer [ 822.554735][ T4715] vhci_hcd: stop threads [ 822.559034][ T4715] vhci_hcd: release socket [ 822.572642][ T4715] vhci_hcd: disconnect device [ 823.366637][ T9326] loop4: detected capacity change from 0 to 128 [ 823.565466][ T9326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 823.624662][ T9326] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 824.306372][ T4728] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.969245][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 825.025526][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 825.034576][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 825.044030][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 825.057769][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 825.134968][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 825.142524][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.819021][ T4728] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.457240][ T9334] lo speed is unknown, defaulting to 1000 [ 826.820120][ T4728] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.342601][ T4728] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.404752][ T8357] Bluetooth: hci0: command 0x0409 tx timeout [ 829.743495][ T8357] Bluetooth: hci0: command 0x041b tx timeout [ 830.984016][ T9334] chnl_net:caif_netlink_parms(): no params data found [ 831.360536][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.383567][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.559611][ T9334] device bridge_slave_0 entered promiscuous mode [ 832.150103][ T8357] Bluetooth: hci0: command 0x040f tx timeout [ 833.147672][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.175744][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.228285][ T9334] device bridge_slave_1 entered promiscuous mode [ 833.434049][ T9404] siw: device registration error -23 [ 833.498296][ T9405] 9pnet_virtio: no channels available for device syz [ 834.204827][ T8357] Bluetooth: hci0: command 0x0419 tx timeout [ 834.295051][ T9388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.419513][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.545488][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.751453][ T9334] team0: Port device team_slave_0 added [ 834.793337][ T9334] team0: Port device team_slave_1 added [ 834.887423][ T9409] loop0: detected capacity change from 0 to 128 [ 835.936702][ T9409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 836.038510][ T9409] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 836.082597][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.092260][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.374693][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.416516][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.423524][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.956974][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 837.119611][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.133737][ T9334] device hsr_slave_0 entered promiscuous mode [ 840.214460][ T9334] device hsr_slave_1 entered promiscuous mode [ 840.645072][ T9334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.659827][ T9334] Cannot create hsr debugfs directory [ 843.701184][ T4728] device hsr_slave_0 left promiscuous mode [ 843.755486][ T4728] device hsr_slave_1 left promiscuous mode [ 843.823931][ T4728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.843171][ T4728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.878087][ T4728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.908675][ T4728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.946325][ T4728] device bridge_slave_1 left promiscuous mode [ 843.966345][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.075987][ T4728] device bridge_slave_0 left promiscuous mode [ 844.082320][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.233543][ T4728] device veth1_macvtap left promiscuous mode [ 844.278586][ T4728] device veth0_macvtap left promiscuous mode [ 844.324631][ T4728] device veth1_vlan left promiscuous mode [ 844.353954][ T4728] device veth0_vlan left promiscuous mode [ 846.917219][ T9469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.176921][ T9497] loop1: detected capacity change from 0 to 16 [ 848.212695][ T9497] erofs: (device loop1): mounted with root inode @ nid 36. [ 850.974741][ T9497] syz.1.1087: attempt to access beyond end of device [ 850.974741][ T9497] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 851.439958][ T26] audit: type=1800 audit(1777152389.778:2): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1087" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 851.556864][ T9497] syz.1.1087 (9497) used greatest stack depth: 20240 bytes left [ 853.966714][ T4728] team0 (unregistering): Port device team_slave_1 removed [ 855.790624][ T4728] team0 (unregistering): Port device team_slave_0 removed [ 858.523707][ T4728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.292648][ T4728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.476738][ T4728] bond0 (unregistering): Released all slaves [ 862.762079][ T9558] smc: net device vcan0 applied user defined pnetid SYZ1 [ 866.229709][ T9334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.297372][ T9334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.375328][ T9334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.445253][ T9334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.581412][ T9622] 9pnet_virtio: no channels available for device syz [ 866.710268][ T9334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.770094][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 866.781472][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 866.811468][ T9334] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.832774][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 866.865434][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 866.887369][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.894638][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.978319][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.006297][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 867.025274][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.165097][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.172310][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.210437][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 867.230318][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 867.259264][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 867.286207][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 867.296647][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 867.315645][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 867.334934][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 867.352298][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 867.378175][ T9334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.390952][ T9334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 867.399615][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 867.415723][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 867.478259][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 868.432728][ T9638] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 868.661906][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 869.845083][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.853015][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 869.963677][ T9334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.987345][ T9657] siw: device registration error -23 [ 870.058745][ T9659] 9pnet_virtio: no channels available for device syz [ 870.207331][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.213963][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.629153][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.704166][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 878.010833][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 878.277761][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 878.638405][ T9334] device veth0_vlan entered promiscuous mode [ 878.665452][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 878.684772][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 878.709860][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 878.932302][ T9334] device veth1_vlan entered promiscuous mode [ 879.128829][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 879.308345][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 879.397324][ T9334] device veth0_macvtap entered promiscuous mode [ 879.425939][ T9334] device veth1_macvtap entered promiscuous mode [ 879.471715][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.482759][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.493183][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.504079][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.514079][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.524987][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.539463][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.563877][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 879.595211][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.603576][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 879.613317][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.626183][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.637162][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.653915][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.665923][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.677955][ T9334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.696051][ T9334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.710304][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.721520][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 879.732164][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 879.745904][ T9334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.756331][ T9334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.766251][ T9334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.775493][ T9334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.112036][ T4733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.155522][ T4733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.208449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 887.595123][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.605605][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.613800][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.622983][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.632151][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 887.645388][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 887.898415][ T4405] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.201734][ T9780] lo speed is unknown, defaulting to 1000 [ 889.366738][ T4405] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.629298][ T4405] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.689035][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 889.724692][ T8357] Bluetooth: hci0: command 0x0409 tx timeout [ 891.381824][ T4405] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.815682][ T8357] Bluetooth: hci0: command 0x041b tx timeout [ 893.868734][ T9824] smc: net device vcan0 applied user defined pnetid SYZ1 [ 893.884943][ T8357] Bluetooth: hci0: command 0x040f tx timeout [ 895.940894][ T9780] chnl_net:caif_netlink_parms(): no params data found [ 895.964462][ T8357] Bluetooth: hci0: command 0x0419 tx timeout [ 898.148417][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.311013][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.609315][ T9780] device bridge_slave_0 entered promiscuous mode [ 898.854827][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.909571][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.975642][ T9780] device bridge_slave_1 entered promiscuous mode [ 899.404015][ T9780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.287316][ T9780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.629856][ T9780] team0: Port device team_slave_0 added [ 904.186910][ T9780] team0: Port device team_slave_1 added [ 906.022179][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.034787][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.084420][ T9780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.150782][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.172453][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.312240][ T9780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.774108][ T9780] device hsr_slave_0 entered promiscuous mode [ 906.824850][ T9780] device hsr_slave_1 entered promiscuous mode [ 906.844670][ T9780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.852412][ T9780] Cannot create hsr debugfs directory [ 907.177829][ T4405] device hsr_slave_0 left promiscuous mode [ 907.187270][ T4405] device hsr_slave_1 left promiscuous mode [ 907.233651][ T9939] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 907.240400][ T9939] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 907.248855][ T9939] vhci_hcd vhci_hcd.0: Device attached [ 907.352051][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.426228][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.564504][ T7] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 907.654461][ T9954] vhci_hcd: connection closed [ 907.654716][ T4725] vhci_hcd: stop threads [ 907.668157][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.774640][ T9942] 9pnet_virtio: no channels available for device syz [ 907.823808][ T4725] vhci_hcd: release socket [ 907.844216][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.865933][ T4725] vhci_hcd: disconnect device [ 907.947784][ T4405] device bridge_slave_1 left promiscuous mode [ 907.992245][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.031333][ T4405] device bridge_slave_0 left promiscuous mode [ 908.069583][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.171886][ T4405] device veth1_macvtap left promiscuous mode [ 908.271088][ T4405] device veth0_macvtap left promiscuous mode [ 908.369883][ T4405] device veth1_vlan left promiscuous mode [ 908.417893][ T4405] device veth0_vlan left promiscuous mode [ 909.994563][ T9983] siw: device registration error -23 [ 910.066858][ T9985] 9pnet_virtio: no channels available for device syz [ 912.884552][ T7] vhci_hcd: vhci_device speed not set [ 914.825072][T10004] siw: device registration error -23 [ 914.897093][T10006] 9pnet_virtio: no channels available for device syz [ 915.805043][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 915.858308][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 915.928058][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.983075][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.312370][ T4405] bond0 (unregistering): Released all slaves [ 916.416683][ T9987] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 916.466456][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 916.998969][T10024] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 917.007504][T10024] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 917.016244][T10024] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 921.817351][ T9780] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 921.835999][ T9780] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 921.880272][ T9780] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 921.896984][ T9780] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 923.411999][ T9780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.461712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.480288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 924.502554][ T9780] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.547938][ T9780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.558993][ T9780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.828864][T10092] 9pnet_virtio: no channels available for device syz [ 925.107288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 925.124923][T10085] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 925.155192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 925.189495][T10085] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 925.214858][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.221995][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.299568][T10085] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 925.321752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 925.366732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 925.407025][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.414270][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.515810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 925.550112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 925.602672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 926.464446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 926.497240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 926.595896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 926.835135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 926.884378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.908907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 926.924822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 926.946102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 926.959929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 926.985448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 929.611505][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 929.713065][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 929.778198][ T9780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.434765][T10144] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 931.646348][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.652701][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.141608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.914966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 935.247913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 935.280831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 935.656868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 935.719867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 935.761911][ T9780] device veth0_vlan entered promiscuous mode [ 935.856037][ T9780] device veth1_vlan entered promiscuous mode [ 936.555363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 936.618723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 936.673536][ T9780] device veth0_macvtap entered promiscuous mode [ 936.708742][ T9780] device veth1_macvtap entered promiscuous mode [ 936.835112][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.881649][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.934274][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.996841][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.025007][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.102112][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.123735][ T9780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.171359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 937.205318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 938.245155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 938.281160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 938.347308][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.368199][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.387812][ T11] nci: nci_rx_work: unknown MT 0x7 [ 938.417505][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.471499][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.509816][ T9780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 938.544484][ T9780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.599425][ T9780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.629846][T10200] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 938.640161][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 938.660277][T10200] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 938.660710][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 938.723967][ T9780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.759545][ T9780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.769949][T10200] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 938.807803][ T9780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.851308][ T9780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.941877][T10219] netlink: 'syz.5.1213': attribute type 1 has an invalid length. [ 940.173470][T10221] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 940.244137][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1213'. [ 940.358569][T10224] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 940.388786][T10224] bond1 (unregistering): Released all slaves [ 941.439911][T10203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.767165][T10268] binfmt_misc: register: failed to install interpreter file ./file0 [ 946.751915][T10265] siw: device registration error -23 [ 946.821677][T10271] 9pnet_virtio: no channels available for device syz [ 947.691496][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.703096][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.711632][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.719973][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.729717][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 947.737221][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 948.868545][ T4466] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.309653][ T4466] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.494229][T10276] lo speed is unknown, defaulting to 1000 [ 949.805925][ T8357] Bluetooth: hci0: command 0x0409 tx timeout [ 950.909271][ T4466] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.246505][ T4466] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.819823][T10276] chnl_net:caif_netlink_parms(): no params data found [ 951.884565][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 952.954877][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.981100][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.012840][T10276] device bridge_slave_0 entered promiscuous mode [ 953.964675][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 954.229578][T10323] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 954.561374][T10276] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.340481][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.362442][T10276] device bridge_slave_1 entered promiscuous mode [ 956.059602][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.092115][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 959.448098][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.827097][T10276] team0: Port device team_slave_0 added [ 961.928953][T10276] team0: Port device team_slave_1 added [ 962.277916][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.303515][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.356464][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.500778][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.521948][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.755543][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.991328][T10360] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 965.008245][T10360] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 965.060454][T10360] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 965.090324][ T4466] device hsr_slave_0 left promiscuous mode [ 965.111223][ T4466] device hsr_slave_1 left promiscuous mode [ 966.382490][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.426391][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.519072][T10380] ================================================================== [ 966.527295][T10380] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 966.534858][T10380] Read of size 8 at addr ffff888029251618 by task syz.0.1240/10380 [ 966.542770][T10380] [ 966.545120][T10380] CPU: 0 PID: 10380 Comm: syz.0.1240 Not tainted syzkaller #0 [ 966.552670][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 966.562829][T10380] Call Trace: [ 966.566119][T10380] [ 966.569195][T10380] dump_stack_lvl+0x188/0x24e [ 966.573884][T10380] ? read_lock_is_recursive+0x10/0x10 [ 966.579299][T10380] ? show_regs_print_info+0x12/0x12 [ 966.584505][T10380] ? load_image+0x400/0x400 [ 966.589021][T10380] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 966.594494][T10380] ? __virt_addr_valid+0x188/0x540 [ 966.599654][T10380] ? __virt_addr_valid+0x465/0x540 [ 966.604782][T10380] ? dvb_device_open+0xc6/0x370 [ 966.609634][T10380] print_report+0xa8/0x210 [ 966.614153][T10380] kasan_report+0x10b/0x140 [ 966.618756][T10380] ? dvb_device_open+0xc6/0x370 [ 966.623697][T10380] dvb_device_open+0xc6/0x370 [ 966.628377][T10380] chrdev_open+0x5c5/0x6a0 [ 966.632918][T10380] ? cd_forget+0x160/0x160 [ 966.637375][T10380] ? fsnotify_perm+0x39b/0x550 [ 966.642154][T10380] ? cd_forget+0x160/0x160 [ 966.646594][T10380] do_dentry_open+0x7e9/0x10d0 [ 966.651398][T10380] path_openat+0x2635/0x2ee0 [ 966.656000][T10380] ? lock_chain_count+0x20/0x20 [ 966.660874][T10380] ? do_filp_open+0x430/0x430 [ 966.665563][T10380] ? lockdep_hardirqs_on+0x94/0x140 [ 966.670958][T10380] ? asm_sysvec_call_function_single+0x16/0x20 [ 966.677129][T10380] do_filp_open+0x1f1/0x430 [ 966.681647][T10380] ? vfs_tmpfile+0x480/0x480 [ 966.686296][T10380] ? _raw_spin_unlock+0x24/0x40 [ 966.691262][T10380] ? alloc_fd+0x58f/0x630 [ 966.695599][T10380] do_sys_openat2+0x150/0x4b0 [ 966.700288][T10380] ? do_sys_open+0xe0/0xe0 [ 966.704725][T10380] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 966.710810][T10380] ? lock_chain_count+0x20/0x20 [ 966.715685][T10380] __x64_sys_openat+0x135/0x160 [ 966.720553][T10380] do_syscall_64+0x4c/0xa0 [ 966.724982][T10380] ? clear_bhb_loop+0x60/0xb0 [ 966.729673][T10380] ? clear_bhb_loop+0x60/0xb0 [ 966.734365][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.740274][T10380] RIP: 0033:0x7f960635d60e [ 966.744695][T10380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 966.764571][T10380] RSP: 002b:00007f96071f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 966.773084][T10380] RAX: ffffffffffffffda RBX: 00007f96071f46c0 RCX: 00007f960635d60e [ 966.781151][T10380] RDX: 0000000000000002 RSI: 00007f96071f3c00 RDI: ffffffffffffff9c [ 966.789155][T10380] RBP: 00007f96071f3c00 R08: 0000000000000000 R09: 0000000000000000 [ 966.797133][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 966.805107][T10380] R13: 00007f9606616128 R14: 00007f9606616090 R15: 00007ffc13717cc8 [ 966.813103][T10380] [ 966.816147][T10380] [ 966.818463][T10380] Allocated by task 1: [ 966.822520][T10380] kasan_set_track+0x4b/0x70 [ 966.827127][T10380] __kasan_kmalloc+0x8e/0xa0 [ 966.831731][T10380] dvb_register_device+0x311/0x2150 [ 966.836950][T10380] dvb_register_frontend+0x645/0x920 [ 966.842347][T10380] vidtv_bridge_probe+0x9a1/0xf70 [ 966.847392][T10380] platform_probe+0x137/0x1c0 [ 966.852079][T10380] really_probe+0x2aa/0xc70 [ 966.856615][T10380] __driver_probe_device+0x18c/0x330 [ 966.861907][T10380] driver_probe_device+0x4f/0x420 [ 966.867125][T10380] __driver_attach+0x44a/0x6e0 [ 966.871924][T10380] bus_for_each_dev+0x182/0x1f0 [ 966.876887][T10380] bus_add_driver+0x30a/0x5a0 [ 966.881592][T10380] driver_register+0x32d/0x430 [ 966.886376][T10380] vidtv_bridge_init+0x39/0x67 [ 966.891238][T10380] do_one_initcall+0x26a/0x840 [ 966.896096][T10380] do_initcall_level+0x137/0x1e4 [ 966.901088][T10380] do_initcalls+0x4b/0x8a [ 966.905437][T10380] kernel_init_freeable+0x415/0x5be [ 966.910654][T10380] kernel_init+0x19/0x1b0 [ 966.915001][T10380] ret_from_fork+0x1f/0x30 [ 966.919594][T10380] [ 966.921910][T10380] Freed by task 10323: [ 966.925968][T10380] kasan_set_track+0x4b/0x70 [ 966.930580][T10380] kasan_save_free_info+0x2d/0x50 [ 966.935717][T10380] ____kasan_slab_free+0x126/0x1e0 [ 966.940836][T10380] slab_free_freelist_hook+0x131/0x1a0 [ 966.946316][T10380] __kmem_cache_free+0xb6/0x1f0 [ 966.951167][T10380] dvb_device_open+0x2e7/0x370 [ 966.956115][T10380] chrdev_open+0x5c5/0x6a0 [ 966.960538][T10380] do_dentry_open+0x7e9/0x10d0 [ 966.965297][T10380] path_openat+0x2635/0x2ee0 [ 966.969885][T10380] do_filp_open+0x1f1/0x430 [ 966.974387][T10380] do_sys_openat2+0x150/0x4b0 [ 966.979062][T10380] __x64_sys_openat+0x135/0x160 [ 966.984010][T10380] do_syscall_64+0x4c/0xa0 [ 966.988539][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.994486][T10380] [ 966.996840][T10380] The buggy address belongs to the object at ffff888029251600 [ 966.996840][T10380] which belongs to the cache kmalloc-256 of size 256 [ 967.011013][T10380] The buggy address is located 24 bytes inside of [ 967.011013][T10380] 256-byte region [ffff888029251600, ffff888029251700) [ 967.024218][T10380] [ 967.026547][T10380] The buggy address belongs to the physical page: [ 967.033039][T10380] page:ffffea0000a49400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29250 [ 967.043306][T10380] head:ffffea0000a49400 order:1 compound_mapcount:0 compound_pincount:0 [ 967.051761][T10380] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 967.060208][T10380] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 967.068918][T10380] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 967.077681][T10380] page dumped because: kasan: bad access detected [ 967.084085][T10380] page_owner tracks the page as allocated [ 967.089789][T10380] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14507507135, free_ts 0 [ 967.109783][T10380] post_alloc_hook+0x173/0x1a0 [ 967.114583][T10380] get_page_from_freelist+0x1a1e/0x1ab0 [ 967.120153][T10380] __alloc_pages+0x1ec/0x4f0 [ 967.124761][T10380] alloc_page_interleave+0x24/0x1e0 [ 967.129967][T10380] alloc_slab_page+0x5d/0x160 [ 967.134660][T10380] new_slab+0x87/0x2c0 [ 967.138824][T10380] ___slab_alloc+0xbc6/0x1240 [ 967.143497][T10380] __kmem_cache_alloc_node+0x1a0/0x260 [ 967.148965][T10380] kmalloc_trace+0x26/0xe0 [ 967.153556][T10380] bus_add_driver+0xda/0x5a0 [ 967.158147][T10380] driver_register+0x32d/0x430 [ 967.163008][T10380] usb_register_driver+0x202/0x3d0 [ 967.168128][T10380] do_one_initcall+0x26a/0x840 [ 967.172996][T10380] do_initcall_level+0x137/0x1e4 [ 967.177929][T10380] do_initcalls+0x4b/0x8a [ 967.182254][T10380] kernel_init_freeable+0x415/0x5be [ 967.187459][T10380] page_owner free stack trace missing [ 967.192989][T10380] [ 967.195404][T10380] Memory state around the buggy address: [ 967.201029][T10380] ffff888029251500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 967.209172][T10380] ffff888029251580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 967.217226][T10380] >ffff888029251600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 967.225366][T10380] ^ [ 967.230305][T10380] ffff888029251680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 967.238361][T10380] ffff888029251700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 967.246509][T10380] ================================================================== [ 967.287086][T10380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 967.294530][T10380] CPU: 1 PID: 10380 Comm: syz.0.1240 Not tainted syzkaller #0 [ 967.302103][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.312245][T10380] Call Trace: [ 967.315521][T10380] [ 967.318467][T10380] dump_stack_lvl+0x188/0x24e [ 967.323173][T10380] ? memcpy+0x3c/0x60 [ 967.327240][T10380] ? show_regs_print_info+0x12/0x12 [ 967.332555][T10380] ? load_image+0x400/0x400 [ 967.337067][T10380] panic+0x2e5/0x730 [ 967.340976][T10380] ? bpf_jit_dump+0xd0/0xd0 [ 967.345476][T10380] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 967.351461][T10380] ? _raw_spin_unlock+0x40/0x40 [ 967.356310][T10380] check_panic_on_warn+0x80/0xa0 [ 967.361334][T10380] ? dvb_device_open+0xc6/0x370 [ 967.366186][T10380] end_report+0x66/0x110 [ 967.370535][T10380] kasan_report+0x118/0x140 [ 967.375044][T10380] ? dvb_device_open+0xc6/0x370 [ 967.380000][T10380] dvb_device_open+0xc6/0x370 [ 967.384697][T10380] chrdev_open+0x5c5/0x6a0 [ 967.389137][T10380] ? cd_forget+0x160/0x160 [ 967.393570][T10380] ? fsnotify_perm+0x39b/0x550 [ 967.398359][T10380] ? cd_forget+0x160/0x160 [ 967.402774][T10380] do_dentry_open+0x7e9/0x10d0 [ 967.407568][T10380] path_openat+0x2635/0x2ee0 [ 967.412249][T10380] ? lock_chain_count+0x20/0x20 [ 967.417469][T10380] ? do_filp_open+0x430/0x430 [ 967.422142][T10380] ? lockdep_hardirqs_on+0x94/0x140 [ 967.427470][T10380] ? asm_sysvec_call_function_single+0x16/0x20 [ 967.433635][T10380] do_filp_open+0x1f1/0x430 [ 967.438137][T10380] ? vfs_tmpfile+0x480/0x480 [ 967.442726][T10380] ? _raw_spin_unlock+0x24/0x40 [ 967.447579][T10380] ? alloc_fd+0x58f/0x630 [ 967.452012][T10380] do_sys_openat2+0x150/0x4b0 [ 967.456694][T10380] ? do_sys_open+0xe0/0xe0 [ 967.461121][T10380] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 967.467116][T10380] ? lock_chain_count+0x20/0x20 [ 967.471979][T10380] __x64_sys_openat+0x135/0x160 [ 967.476857][T10380] do_syscall_64+0x4c/0xa0 [ 967.481274][T10380] ? clear_bhb_loop+0x60/0xb0 [ 967.485951][T10380] ? clear_bhb_loop+0x60/0xb0 [ 967.490629][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.496608][T10380] RIP: 0033:0x7f960635d60e [ 967.501018][T10380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 967.520708][T10380] RSP: 002b:00007f96071f3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.529123][T10380] RAX: ffffffffffffffda RBX: 00007f96071f46c0 RCX: 00007f960635d60e [ 967.537179][T10380] RDX: 0000000000000002 RSI: 00007f96071f3c00 RDI: ffffffffffffff9c [ 967.545149][T10380] RBP: 00007f96071f3c00 R08: 0000000000000000 R09: 0000000000000000 [ 967.553130][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 967.561190][T10380] R13: 00007f9606616128 R14: 00007f9606616090 R15: 00007ffc13717cc8 [ 967.569172][T10380] [ 967.572351][T10380] Kernel Offset: disabled [ 967.577116][T10380] Rebooting in 86400 seconds..