last executing test programs: 14.363657678s ago: executing program 0 (id=707): syz_open_dev$vim2m(0x0, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14.240078935s ago: executing program 3 (id=708): clock_gettime(0x73d120d1a3af8f7f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x2, 0x2002) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 13.425347996s ago: executing program 1 (id=712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x220802, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x2000000) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0x0, 0x20385655, 0x2, @discrete={0x5, 0x80007}}) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x4, 0x40a, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) close(r3) mq_unlink(&(0x7f0000000000)='eth0\x00') sync_file_range(r0, 0x5, 0x7, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0x1, 0xc97, 0x641, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 13.187337022s ago: executing program 3 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 13.096471815s ago: executing program 3 (id=715): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x17, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@ax25={{0x3, @netrom}, [@rose, @rose, @bcast, @null, @default, @default, @rose]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/222, 0xde}], 0x1, &(0x7f0000000500)=""/42, 0x2a}, 0x0, 0x2000, 0x0, {0x2}}) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x84382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x21, 0x11, 0x10, 0x4, 0xe80, 0x7, 0x40}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 10.838144601s ago: executing program 0 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r1}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 10.748274354s ago: executing program 1 (id=719): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x14, r5, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x53d040) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 9.766155864s ago: executing program 1 (id=720): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 8.255581396s ago: executing program 1 (id=721): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0xd1, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) 8.216161949s ago: executing program 0 (id=723): semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000001c0)=0x4a8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5, 0x7, 0x6, 0x8004002, 0x0, 0x800000000000, 0xefffffffffffffff, 0x0, 0x0, 0xfffffffffffff801, 0xfffffffffffffffe, 0x2, 0x6, 0x200001, 0x800006, 0xec], 0x0, 0x40400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.755218204s ago: executing program 0 (id=724): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) clock_gettime(0x73d120d1a3af8f7f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x2, 0x2002) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 7.754598275s ago: executing program 2 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 7.652922815s ago: executing program 2 (id=726): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x1400}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) 7.420290533s ago: executing program 2 (id=727): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200003}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x5, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.045230834s ago: executing program 2 (id=728): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xfffffea4}], 0x2) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000001600)={[{@dioread_nolock}, {@noquota}, {@inlinecrypt}, {@barrier_val}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/131, 0x83}], 0x1}, 0x7fffffff}], 0x1, 0x40000001, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) sendmsg$tipc(r2, 0x0, 0x10) 7.004678606s ago: executing program 4 (id=729): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) 5.403154862s ago: executing program 3 (id=730): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x14, r5, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x53d040) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xff, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000380)='G') setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 5.402490853s ago: executing program 0 (id=731): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 3.705912531s ago: executing program 0 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_restrict_self(r4, 0x0) 3.608209743s ago: executing program 4 (id=733): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r1}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 3.221792932s ago: executing program 2 (id=734): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x0) 2.856585275s ago: executing program 3 (id=735): syz_open_dev$sndpcmp(&(0x7f0000003700), 0x1ff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) setregid(0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180200007800000000000000626f000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003f000000850000007b00000018010000205c912500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000240)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 2.148796155s ago: executing program 4 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 634.190417ms ago: executing program 2 (id=737): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 494.965431ms ago: executing program 1 (id=738): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="ff", 0x1}], 0x1) 493.694121ms ago: executing program 4 (id=739): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200003}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x5, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 400.317474ms ago: executing program 3 (id=740): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x17, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@ax25={{0x3, @netrom}, [@rose, @rose, @bcast, @null, @default, @default, @rose]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/222, 0xde}], 0x1, &(0x7f0000000500)=""/42, 0x2a}, 0x0, 0x2000, 0x0, {0x2}}) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x84382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0xd}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x2000c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 65.880238][ T4170] cgroup: Unknown subsys name 'net' [ 66.030495][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.725974][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.257765][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.269069][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 69.285344][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.317870][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.367912][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.517106][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.524922][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.534745][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.544533][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.551872][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.560740][ T4195] device bridge_slave_0 entered promiscuous mode [ 69.583027][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.590670][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.599321][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.609068][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.616879][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.625524][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.634638][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.642209][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.651765][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.660200][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.668496][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.677945][ T4195] device bridge_slave_1 entered promiscuous mode [ 69.691895][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.699724][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.709013][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.717928][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.725847][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.735424][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.764607][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.772625][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.781915][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.827170][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.839403][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.847496][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857517][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.867386][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.879130][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.892477][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.905029][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.925268][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.937153][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.949735][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.981398][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.028075][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.048396][ T4192] team0: Port device team_slave_0 added [ 70.057127][ T4187] team0: Port device team_slave_0 added [ 70.065373][ T4192] team0: Port device team_slave_1 added [ 70.074680][ T4183] team0: Port device team_slave_0 added [ 70.090067][ T4195] team0: Port device team_slave_0 added [ 70.098012][ T4187] team0: Port device team_slave_1 added [ 70.113473][ T4183] team0: Port device team_slave_1 added [ 70.128166][ T4195] team0: Port device team_slave_1 added [ 70.156559][ T4191] team0: Port device team_slave_0 added [ 70.192691][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.200749][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.227852][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.241983][ T4191] team0: Port device team_slave_1 added [ 70.250145][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.258666][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.286405][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.306915][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.314192][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.341734][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.354486][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.361744][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.389569][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.408254][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.415946][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.447845][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.466439][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.475383][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.506445][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.519294][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.527356][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.555274][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.579371][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.587151][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.615395][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.649121][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.657422][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.687225][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.722268][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.730894][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.740983][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.749720][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.780808][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.816787][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.824493][ T2855] Bluetooth: hci1: command 0x0409 tx timeout [ 70.825471][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.839011][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.847823][ T4192] Cannot create hsr debugfs directory [ 70.883847][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.892067][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.900186][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.903917][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 70.909078][ T4187] Cannot create hsr debugfs directory [ 70.921399][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.933780][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 70.974294][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 71.013871][ T4195] device hsr_slave_0 entered promiscuous mode [ 71.021765][ T4195] device hsr_slave_1 entered promiscuous mode [ 71.028617][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.037745][ T4195] Cannot create hsr debugfs directory [ 71.087877][ T4191] device hsr_slave_0 entered promiscuous mode [ 71.095979][ T4191] device hsr_slave_1 entered promiscuous mode [ 71.103061][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.118876][ T4191] Cannot create hsr debugfs directory [ 71.396381][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.410318][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.421430][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.437422][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.490343][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.501061][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.512245][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.526359][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.615144][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.626695][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.634402][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.644514][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.682237][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.694764][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.706164][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.719189][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.740779][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.760704][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.794432][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.849332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.860760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.871392][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.885207][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.898522][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.910361][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.928385][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.939887][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.954110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.966696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.980313][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990382][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.001114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.023289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.032633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.044468][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.052520][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.087730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.098323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.110660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.130808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.146989][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.168585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.180240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.191240][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.199831][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.223456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.232723][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.244676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.257742][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.266009][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.278810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.289954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.300635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.332207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.342249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.355437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.366522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.381563][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.402303][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.414089][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.428926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.437877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.448897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.458903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.468912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.479314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.490116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.502980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.521487][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.535178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.546073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.565366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.580161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.591215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.604341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.613053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.623777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.652260][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.668973][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.678159][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.688834][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.697733][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.738192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.750584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.761757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.769950][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.780155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.790753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.800445][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.808572][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.818866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.828674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.840847][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.848131][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.857691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.868234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.878026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.894081][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 72.904784][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.923434][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.932830][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.964883][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.972101][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.980728][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 72.987841][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.997089][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 73.005239][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 73.012884][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.024458][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.034045][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.044001][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.054065][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 73.062048][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.076489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.091212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.126931][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.145373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.155747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.177422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.195512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.222925][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.238468][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.258968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.268632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.313875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.322243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.332743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.342789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.353073][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.360851][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.370706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.380647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.390280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.401139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.414065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.425201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.435601][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.442832][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.452358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.464447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.474473][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.484856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.497335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.510392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.520458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.537182][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.548289][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.592156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.602702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.622179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.638282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.665369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.684472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.700208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.713727][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.749798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.764147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.777999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.797726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.810312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.859615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.880031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.895230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.916796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.929452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.945824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.966629][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.985788][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.998179][ T4183] device veth0_vlan entered promiscuous mode [ 74.009232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.021497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.103017][ T4183] device veth1_vlan entered promiscuous mode [ 74.117761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.133758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.151153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.161411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.177695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.230028][ T4191] device veth0_vlan entered promiscuous mode [ 74.252230][ T4192] device veth0_vlan entered promiscuous mode [ 74.269842][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.280100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.290424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.299391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.308494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.318603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.329609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.353040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.387584][ T4192] device veth1_vlan entered promiscuous mode [ 74.400550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.409595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.418685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.428175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.441734][ T4191] device veth1_vlan entered promiscuous mode [ 74.469816][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.480227][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.490359][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.501262][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.511634][ T4183] device veth0_macvtap entered promiscuous mode [ 74.525972][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.546828][ T4183] device veth1_macvtap entered promiscuous mode [ 74.578240][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.598417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.608308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.617909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.628248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.638235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.648074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.658135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.667962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.681042][ T4191] device veth0_macvtap entered promiscuous mode [ 74.692169][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.706205][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.715976][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726300][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.736908][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.754459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.764128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.774469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.788940][ T4191] device veth1_macvtap entered promiscuous mode [ 74.839916][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.850133][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.866028][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.877004][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.890783][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.907487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.918210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.941078][ T4192] device veth0_macvtap entered promiscuous mode [ 74.953881][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.965764][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.979229][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 74.979668][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.001871][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.013611][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.029439][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.040039][ T4187] device veth0_vlan entered promiscuous mode [ 75.050339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.058902][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 75.073912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.081941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.090495][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 75.097399][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 75.106026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.117529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.129537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.139105][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 75.141114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.169344][ T4192] device veth1_macvtap entered promiscuous mode [ 75.189756][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.199867][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.209809][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.221062][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.237218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.248353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.258857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.288932][ T4187] device veth1_vlan entered promiscuous mode [ 75.318696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.328830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.337750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.372751][ T4195] device veth0_vlan entered promiscuous mode [ 75.391769][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.404302][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.415766][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.427228][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.439645][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.478457][ T4195] device veth1_vlan entered promiscuous mode [ 75.504927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.517480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.527367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.539516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.554186][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.565494][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576006][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.587360][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.599391][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.628568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.639425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.652383][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653122][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.670521][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.674021][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688922][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.700641][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.713107][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.734642][ T4187] device veth0_macvtap entered promiscuous mode [ 75.771305][ T4187] device veth1_macvtap entered promiscuous mode [ 75.791327][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.802813][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.812359][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.824157][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.841159][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.853933][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.869437][ T4195] device veth0_macvtap entered promiscuous mode [ 75.894503][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.904459][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.930618][ T4195] device veth1_macvtap entered promiscuous mode [ 75.954713][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.966722][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.977802][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.993321][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.004625][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.016655][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.028794][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.051258][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.063058][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.072794][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.083521][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.091425][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.109722][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.126783][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.137272][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.151268][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.167281][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.178698][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.192892][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.214292][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.225816][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.241628][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.261672][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.285341][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.302242][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.314859][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.326060][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.338240][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.349802][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.361436][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.375013][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.383260][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.392403][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.405507][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.416486][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.426302][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.446266][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.469604][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.480513][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.490749][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.515790][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.528883][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.540920][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.554657][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.565527][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.578352][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.589232][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.601164][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.616094][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.650198][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.668865][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.681898][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.694454][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.704349][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.713823][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806007][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.844712][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.887911][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.997454][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.019007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.044553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.054261][ T2855] Bluetooth: hci1: command 0x0419 tx timeout [ 77.082097][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.121118][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.134199][ T2855] Bluetooth: hci0: command 0x0419 tx timeout [ 77.141169][ T2855] Bluetooth: hci3: command 0x0419 tx timeout [ 77.154173][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.162599][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.171046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.194964][ T2855] Bluetooth: hci2: command 0x0419 tx timeout [ 77.213387][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 77.276145][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.317788][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.346212][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.401056][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.479440][ T4204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.502608][ T4204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.524873][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.897656][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.023246][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.119270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.130321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.163307][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 78.273223][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 78.393461][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.438488][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.474387][ T4230] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 78.494378][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.559169][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.595972][ T4230] usb 5-1: config 0 descriptor?? [ 78.723890][ T4229] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 78.766235][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.827479][ T4229] usb 1-1: Product: syz [ 78.837336][ T4229] usb 1-1: Manufacturer: syz [ 78.842597][ T4229] usb 1-1: SerialNumber: syz [ 78.879054][ T4229] usb 1-1: config 0 descriptor?? [ 79.128451][ T4230] gt683r_led 0003:1770:FF00.0001: unbalanced delimiter at end of report description [ 79.189314][ T4230] gt683r_led 0003:1770:FF00.0001: hid parsing failed [ 79.223367][ T4230] gt683r_led: probe of 0003:1770:FF00.0001 failed with error -22 [ 79.386272][ T4230] usb 5-1: USB disconnect, device number 2 [ 80.413751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.510710][ T4301] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 80.519563][ T4301] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9'. [ 81.331150][ T4307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.501255][ T4316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13'. [ 82.066590][ T4229] usb 1-1: USB disconnect, device number 2 [ 82.078713][ T4330] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 82.813847][ T4266] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.827912][ T4352] process 'syz.0.24' launched './file0' with NULL argv: empty string added [ 85.840280][ T4266] usb 5-1: device descriptor read/all, error -71 [ 86.337101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.346561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 86.356182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 86.365893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.376134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.385616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.395399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.213249][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.411394][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 88.423274][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 88.743594][ T4229] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 88.801877][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.848212][ T4229] usb 1-1: Product: syz [ 88.930179][ T4229] usb 1-1: Manufacturer: syz [ 89.126000][ T4229] usb 1-1: SerialNumber: syz [ 89.190081][ T4229] usb 1-1: config 0 descriptor?? [ 89.205595][ T4383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'. [ 89.249338][ T4363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.279353][ T4363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.603924][ T4393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.612126][ T4393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.624722][ T4391] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 90.323444][ T4229] Error reading MAC address [ 90.465966][ T4229] usb 1-1: USB disconnect, device number 3 [ 92.136550][ T7] cfg80211: failed to load regulatory.db [ 93.712555][ T4412] loop4: detected capacity change from 0 to 1024 [ 93.744316][ T4412] ======================================================= [ 93.744316][ T4412] WARNING: The mand mount option has been deprecated and [ 93.744316][ T4412] and is ignored by this kernel. Remove the mand [ 93.744316][ T4412] option from the mount to silence this warning. [ 93.744316][ T4412] ======================================================= [ 93.829857][ T4412] EXT4-fs (loop4): inline encryption not supported [ 93.842211][ T4412] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.938381][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 95.226302][ T4427] Can't find ip_set type has [ 95.551924][ T4439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.49'. [ 95.840241][ T4444] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 98.763748][ T4480] loop4: detected capacity change from 0 to 1024 [ 98.877131][ T4480] EXT4-fs (loop4): inline encryption not supported [ 98.884554][ T4480] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.014514][ T4480] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 99.843029][ T4489] Can't find ip_set type hash:n [ 102.789705][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'. [ 103.002271][ T4512] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 103.011918][ T4512] netlink: 19 bytes leftover after parsing attributes in process `syz.2.63'. [ 105.431484][ T4539] loop0: detected capacity change from 0 to 1024 [ 105.473718][ T4539] EXT4-fs (loop0): inline encryption not supported [ 105.481741][ T4539] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.952881][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 107.351723][ T4562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 107.410098][ T4562] device veth1_to_hsr entered promiscuous mode [ 107.989106][ T4574] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 108.000784][ T4574] netlink: 19 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.502636][ T4609] loop2: detected capacity change from 0 to 1024 [ 110.546460][ T4609] EXT4-fs (loop2): inline encryption not supported [ 110.554119][ T4609] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.723875][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 110.751468][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.113454][ T4633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.396969][ T4641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 113.587820][ T4630] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 117.040296][ T4673] loop1: detected capacity change from 0 to 1024 [ 117.299988][ T4673] EXT4-fs (loop1): inline encryption not supported [ 117.313407][ T4673] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.440322][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 117.569508][ T4692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.323491][ T4714] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 122.237041][ T4750] loop3: detected capacity change from 0 to 1024 [ 122.277422][ T4750] EXT4-fs (loop3): inline encryption not supported [ 122.284812][ T4750] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.394527][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 124.905393][ T4769] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 124.914069][ T4769] netlink: 19 bytes leftover after parsing attributes in process `syz.3.134'. [ 125.412822][ T4774] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.463211][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.472618][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.168425][ T4804] loop4: detected capacity change from 0 to 1024 [ 128.359961][ T4804] EXT4-fs (loop4): inline encryption not supported [ 128.367599][ T4804] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.475622][ T4814] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 129.346521][ T4821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 129.360418][ T4821] device geneve2 entered promiscuous mode [ 129.614876][ T4804] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 130.985813][ T4845] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 131.000363][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.007948][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.253463][ T4853] tipc: Started in network mode [ 132.286376][ T4853] tipc: Node identity e25217284909, cluster identity 4711 [ 132.327974][ T4853] tipc: Enabled bearer , priority 0 [ 132.355077][ T4862] device syzkaller0 entered promiscuous mode [ 132.470568][ T4853] tipc: Resetting bearer [ 132.580525][ T4852] tipc: Resetting bearer [ 132.636938][ T4852] tipc: Disabling bearer [ 132.828255][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 132.847895][ T4867] device geneve2 entered promiscuous mode [ 133.066321][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073347][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.164786][ T4875] loop2: detected capacity change from 0 to 1024 [ 134.197322][ T4875] EXT4-fs (loop2): inline encryption not supported [ 134.204769][ T4875] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.270457][ T4875] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 134.297837][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.643642][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.652484][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.284136][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.313832][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.339396][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.373897][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.983833][ T4906] tipc: Started in network mode [ 136.003312][ T4906] tipc: Node identity 4a9ef637f03d, cluster identity 4711 [ 136.185230][ T4906] tipc: Enabled bearer , priority 0 [ 136.207055][ T4910] device syzkaller0 entered promiscuous mode [ 136.992431][ T4906] tipc: Resetting bearer [ 137.022070][ T4905] tipc: Resetting bearer [ 137.084474][ T4905] tipc: Disabling bearer [ 138.863228][ T4227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.124029][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 139.293474][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.319557][ T4954] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 140.503391][ T4227] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 140.548754][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.587872][ T4227] usb 5-1: Product: syz [ 140.608355][ T4227] usb 5-1: Manufacturer: syz [ 140.637020][ T4227] usb 5-1: SerialNumber: syz [ 140.680478][ T4227] usb 5-1: config 0 descriptor?? [ 142.602443][ T4989] Zero length message leads to an empty skb [ 144.043860][ T5003] tipc: Enabled bearer , priority 0 [ 144.064282][ T5003] device syzkaller0 entered promiscuous mode [ 144.179189][ T5003] tipc: Resetting bearer [ 144.207662][ T5002] tipc: Resetting bearer [ 144.262865][ T5002] tipc: Disabling bearer [ 144.282782][ T4227] usb 5-1: USB disconnect, device number 5 [ 144.393245][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.403235][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 145.563280][ T4260] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.816152][ T4260] usb 3-1: config 4 interface 0 has no altsetting 0 [ 146.163529][ T5033] device geneve2 entered promiscuous mode [ 146.354881][ T5037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 146.433547][ T4260] usb 3-1: string descriptor 0 read error: -22 [ 146.443250][ T5037] netlink: 'syz.1.216': attribute type 6 has an invalid length. [ 146.454689][ T4260] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 146.473448][ T5037] netlink: 140 bytes leftover after parsing attributes in process `syz.1.216'. [ 146.513455][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.612800][ T4260] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 146.655068][ T4260] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.673961][ T4260] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 146.694236][ T4260] usb 3-1: media controller created [ 146.758416][ T4260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.129754][ T4260] zl10353_read_register: readreg error (reg=127, ret==0) [ 147.157245][ T5046] tipc: Started in network mode [ 147.163065][ T5046] tipc: Node identity f248bbc757a5, cluster identity 4711 [ 147.199396][ T5046] tipc: Enabled bearer , priority 0 [ 147.219998][ T5049] device syzkaller0 entered promiscuous mode [ 147.265764][ T5046] tipc: Resetting bearer [ 147.291166][ T4260] usb 3-1: USB disconnect, device number 2 [ 147.300058][ T5045] tipc: Resetting bearer [ 147.365327][ T5045] tipc: Disabling bearer [ 148.700202][ T5065] device syzkaller0 entered promiscuous mode [ 148.799673][ T5070] ptrace attach of "./syz-executor exec"[4195] was attempted by "./syz-executor exec"[5070] [ 149.022116][ T5072] loop4: detected capacity change from 0 to 1024 [ 149.085372][ T5072] EXT4-fs (loop4): inline encryption not supported [ 149.093790][ T5072] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.179328][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 149.556425][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 149.966231][ T5083] device bridge_slave_1 left promiscuous mode [ 149.993891][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.405717][ T5095] tipc: Enabled bearer , priority 0 [ 150.493432][ T5096] device syzkaller0 entered promiscuous mode [ 150.563412][ T5095] tipc: Resetting bearer [ 150.638425][ T5094] tipc: Resetting bearer [ 150.704806][ T5094] tipc: Disabling bearer [ 150.932814][ T5100] device bridge0 entered promiscuous mode [ 150.980714][ T5100] device vlan2 entered promiscuous mode [ 152.124512][ T5120] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 153.092560][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 153.228984][ T2855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.389492][ T5133] tipc: Enabled bearer , priority 0 [ 153.403986][ T5133] device syzkaller0 entered promiscuous mode [ 153.430702][ T5133] tipc: Resetting bearer [ 153.496825][ T5132] tipc: Resetting bearer [ 153.546273][ T5132] tipc: Disabling bearer [ 153.936621][ T2855] usb 4-1: device descriptor read/64, error -71 [ 154.223525][ T2855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.621604][ T5145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.685329][ T2855] usb 4-1: device descriptor read/64, error -71 [ 154.979256][ T2855] usb usb4-port1: attempt power cycle [ 154.993523][ T5141] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.273904][ T5141] usb 2-1: Using ep0 maxpacket: 32 [ 155.393909][ T2855] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.456152][ T5141] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.492612][ T5141] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.733669][ T5141] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.879964][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 155.924401][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.935642][ T5141] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.946397][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.961273][ T5141] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.971422][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.002631][ T5141] usb 2-1: config 0 descriptor?? [ 156.008586][ T2855] usb 4-1: device descriptor read/8, error -71 [ 156.091026][ T5162] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 156.828281][ T5141] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.861553][ T5141] usb 2-1: USB disconnect, device number 2 [ 156.907709][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 157.006524][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.018732][ T5141] usblp0: removed [ 157.132714][ T5167] device bridge_slave_1 left promiscuous mode [ 157.160509][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.403208][ T5141] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.389027][ T5201] fuse: Bad value for 'fd' [ 159.433767][ T5201] fuse: Unknown parameter '' [ 160.607688][ T5217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.897485][ T5222] tipc: Started in network mode [ 160.925792][ T5222] tipc: Node identity ee41ac2fdcd8, cluster identity 4711 [ 160.954545][ T5222] tipc: Enabled bearer , priority 0 [ 161.017583][ T5225] device syzkaller0 entered promiscuous mode [ 161.094458][ T5222] tipc: Resetting bearer [ 161.226082][ T5221] tipc: Resetting bearer [ 161.396241][ T5221] tipc: Disabling bearer [ 162.295385][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.317642][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.336014][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.379310][ T5141] tipc: Node number set to 848931887 [ 162.573496][ T4224] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.846635][ T4224] usb 4-1: Using ep0 maxpacket: 32 [ 162.994967][ T4224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.163455][ T4224] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.185988][ T4224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.333839][ T4224] usb 4-1: Product: syz [ 163.339073][ T4224] usb 4-1: Manufacturer: syz [ 163.345182][ T4224] usb 4-1: SerialNumber: syz [ 163.364302][ T4224] usb 4-1: config 0 descriptor?? [ 165.895182][ T4260] usb 4-1: USB disconnect, device number 6 [ 166.683204][ T2855] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.943447][ T2855] usb 2-1: Using ep0 maxpacket: 32 [ 167.064652][ T2855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.089455][ T2855] usb 2-1: config 0 has no interfaces? [ 167.302992][ T2855] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 167.330421][ T2855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.384286][ T2855] usb 2-1: Product: syz [ 167.388751][ T2855] usb 2-1: Manufacturer: syz [ 167.419336][ T2855] usb 2-1: SerialNumber: syz [ 167.442034][ T2855] usb 2-1: config 0 descriptor?? [ 168.392680][ T1108] usb 2-1: USB disconnect, device number 4 [ 168.622488][ T5305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.817298][ T4260] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.899006][ T5312] tipc: Enabled bearer , priority 0 [ 168.907351][ T5312] device syzkaller0 entered promiscuous mode [ 168.939374][ T5312] tipc: Resetting bearer [ 168.954909][ T5311] tipc: Resetting bearer [ 168.982806][ T5311] tipc: Disabling bearer [ 169.073181][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 169.213410][ T4260] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.393477][ T4260] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 169.413467][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.442104][ T4260] usb 3-1: Product: syz [ 169.457705][ T4260] usb 3-1: Manufacturer: syz [ 169.478772][ T4260] usb 3-1: SerialNumber: syz [ 169.511830][ T4260] usb 3-1: config 0 descriptor?? [ 170.376204][ T5332] device syzkaller0 entered promiscuous mode [ 171.559070][ T2855] usb 3-1: USB disconnect, device number 3 [ 171.714726][ T5350] tipc: Enabled bearer , priority 0 [ 171.757856][ T5350] device syzkaller0 entered promiscuous mode [ 171.818733][ T5354] device vxcan1 entered promiscuous mode [ 171.919082][ T5350] tipc: Resetting bearer [ 171.982453][ T5348] tipc: Resetting bearer [ 172.022954][ T5348] tipc: Disabling bearer [ 172.426581][ T5372] loop1: detected capacity change from 0 to 1024 [ 172.635511][ T5372] EXT4-fs (loop1): inline encryption not supported [ 172.643373][ T5372] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.710733][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 174.552210][ T5387] tipc: Started in network mode [ 174.558196][ T5387] tipc: Node identity 8adabf951e84, cluster identity 4711 [ 174.568376][ T5387] tipc: Enabled bearer , priority 0 [ 174.584653][ T5387] device syzkaller0 entered promiscuous mode [ 175.296447][ T5387] tipc: Resetting bearer [ 175.373612][ T5386] tipc: Resetting bearer [ 175.419878][ T5386] tipc: Disabling bearer [ 175.458025][ T5407] tipc: Enabled bearer , priority 0 [ 175.633547][ T5415] loop0: detected capacity change from 0 to 1024 [ 176.877070][ T5415] EXT4-fs (loop0): inline encryption not supported [ 176.884479][ T5415] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.907257][ T1108] tipc: Node number set to 2874873640 [ 177.120144][ T5415] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 177.289371][ T5405] tipc: Resetting bearer [ 177.400362][ T5402] tipc: Disabling bearer [ 177.771736][ T5433] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 178.323224][ T4225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.384061][ T5441] device vxcan1 entered promiscuous mode [ 178.624903][ T4225] usb 2-1: Using ep0 maxpacket: 32 [ 179.713331][ T4225] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 179.755709][ T4225] usb 2-1: config 0 has no interface number 0 [ 179.792585][ T4225] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.842646][ T4225] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.942063][ T4225] usb 2-1: config 0 interface 184 has no altsetting 0 [ 180.066457][ T5455] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 180.223339][ T4225] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.276070][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.303831][ T5457] tipc: Enabled bearer , priority 0 [ 180.331420][ T5457] device syzkaller0 entered promiscuous mode [ 180.342385][ T4225] usb 2-1: Product: syz [ 180.393265][ T4225] usb 2-1: Manufacturer: syz [ 180.403026][ T5457] tipc: Resetting bearer [ 180.411414][ T4225] usb 2-1: SerialNumber: syz [ 180.457311][ T4225] usb 2-1: config 0 descriptor?? [ 180.510893][ T5456] tipc: Resetting bearer [ 180.544892][ T5456] tipc: Disabling bearer [ 180.564985][ T4225] smsc75xx v1.0.0 [ 180.569259][ T4225] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 180.611974][ T4225] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 180.901364][ T5465] loop4: detected capacity change from 0 to 1024 [ 180.954226][ T5465] EXT4-fs (loop4): inline encryption not supported [ 180.964154][ T5465] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.322151][ T5465] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 183.256297][ T5483] tipc: Enabled bearer , priority 0 [ 183.327488][ T5483] tipc: Resetting bearer [ 183.408762][ T5475] tipc: Disabling bearer [ 185.624671][ T2855] usb 2-1: USB disconnect, device number 5 [ 185.709505][ T5498] device dummy0 entered promiscuous mode [ 185.739663][ T5498] device netdevsim0 entered promiscuous mode [ 185.792926][ T5502] input: syz0 as /devices/virtual/input/input5 [ 185.926874][ T5511] loop4: detected capacity change from 0 to 1024 [ 187.182744][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 187.202482][ T5511] EXT4-fs (loop4): inline encryption not supported [ 187.212640][ T5511] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.422044][ T5511] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 188.469850][ T5532] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.018436][ T5548] loop4: detected capacity change from 0 to 1024 [ 190.624820][ T5548] EXT4-fs (loop4): inline encryption not supported [ 190.632104][ T5548] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.390119][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 191.637119][ T2855] Bluetooth: hci3: command 0x0406 tx timeout [ 191.644443][ T2855] Bluetooth: hci2: command 0x0406 tx timeout [ 191.650905][ T2855] Bluetooth: hci0: command 0x0406 tx timeout [ 191.658266][ T2855] Bluetooth: hci1: command 0x0406 tx timeout [ 191.664520][ T2855] Bluetooth: hci4: command 0x0406 tx timeout [ 192.179998][ T5561] device syzkaller0 entered promiscuous mode [ 192.286365][ T5561] tipc: Enabled bearer , priority 0 [ 192.383857][ T5561] tipc: Resetting bearer [ 192.390301][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.505497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.526933][ T5559] tipc: Resetting bearer [ 192.545500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.648656][ T5559] tipc: Disabling bearer [ 193.792365][ T26] audit: type=1326 audit(1772138241.247:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab75b3799 code=0x7ffc0000 [ 193.952430][ T26] audit: type=1326 audit(1772138241.257:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab75b3799 code=0x7ffc0000 [ 193.976027][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.030394][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 194.090455][ T5586] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.138851][ T26] audit: type=1326 audit(1772138241.277:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7faab75b3799 code=0x7ffc0000 [ 194.303279][ T26] audit: type=1326 audit(1772138241.277:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab75b3799 code=0x7ffc0000 [ 194.327675][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.423955][ T5588] device syzkaller0 entered promiscuous mode [ 194.463453][ T26] audit: type=1326 audit(1772138241.277:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab75b3799 code=0x7ffc0000 [ 194.501619][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.510158][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.347185][ T5605] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 195.713225][ T4229] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.763034][ T5613] tipc: Enabled bearer , priority 0 [ 195.817060][ T5613] device syzkaller0 entered promiscuous mode [ 195.882382][ T5613] tipc: Resetting bearer [ 195.923663][ T5612] tipc: Resetting bearer [ 195.994181][ T5612] tipc: Disabling bearer [ 196.003662][ T4229] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 196.105635][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.149182][ T4229] usb 2-1: config 0 has no interfaces? [ 196.245238][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.289019][ T4229] usb 2-1: config 0 has no interfaces? [ 196.703321][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.753308][ T4229] usb 2-1: config 0 has no interfaces? [ 196.842047][ T5619] device syzkaller0 entered promiscuous mode [ 196.863444][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.897835][ T4229] usb 2-1: config 0 has no interfaces? [ 196.975620][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 196.993635][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.009250][ T4229] usb 2-1: config 0 has no interfaces? [ 197.103422][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.134547][ T4229] usb 2-1: config 0 has no interfaces? [ 197.313319][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.326538][ T4229] usb 2-1: config 0 has no interfaces? [ 198.117613][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 198.176836][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.336900][ T4229] usb 2-1: config 0 has no interfaces? [ 198.773349][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 198.781369][ T4229] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 198.803163][ T4229] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 198.824139][ T4229] usb 2-1: config 0 descriptor?? [ 198.843248][ T4229] usb 2-1: can't set config #0, error -71 [ 198.853585][ T4229] usb 2-1: USB disconnect, device number 6 [ 198.864265][ T4258] udevd[4258]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 199.493374][ T5378] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.830285][ T26] audit: type=1326 audit(1772138248.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 200.836273][ T5378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 200.855817][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.914584][ T26] audit: type=1326 audit(1772138248.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 200.941372][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.958018][ T5378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 201.095458][ T26] audit: type=1326 audit(1772138248.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.121554][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.193444][ T5378] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 201.223360][ T26] audit: type=1326 audit(1772138248.357:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.243300][ T5378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.298612][ T26] audit: type=1326 audit(1772138248.357:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.321210][ T5378] usb 4-1: Product: syz [ 201.321872][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.332023][ T5378] usb 4-1: Manufacturer: syz [ 201.367805][ T5378] usb 4-1: SerialNumber: syz [ 201.402714][ T26] audit: type=1326 audit(1772138248.357:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.426122][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.434489][ T5378] usb 4-1: config 0 descriptor?? [ 201.453573][ T5669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.471303][ T5669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.493720][ T26] audit: type=1326 audit(1772138248.357:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.590615][ T26] audit: type=1326 audit(1772138248.357:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.686356][ T26] audit: type=1326 audit(1772138248.357:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.739535][ T5669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.741283][ T26] audit: type=1326 audit(1772138248.357:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcaf2c799 code=0x7ffc0000 [ 201.784737][ T5669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.253465][ T5378] Error reading MAC address [ 202.281987][ T5378] usb 4-1: USB disconnect, device number 7 [ 202.883440][ T2855] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 202.937135][ T5718] device syzkaller0 entered promiscuous mode [ 203.014725][ T5718] tipc: Enabled bearer , priority 0 [ 203.082189][ T5718] tipc: Resetting bearer [ 203.113584][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.149212][ T5717] tipc: Resetting bearer [ 203.173646][ T2855] usb 5-1: Using ep0 maxpacket: 32 [ 203.202382][ T5717] tipc: Disabling bearer [ 203.323410][ T2855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.426837][ T5738] device syzkaller0 entered promiscuous mode [ 204.433354][ T2855] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 204.453443][ T2855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.471558][ T2855] usb 5-1: Product: syz [ 204.482337][ T2855] usb 5-1: Manufacturer: syz [ 204.487602][ T2855] usb 5-1: SerialNumber: syz [ 204.521850][ T2855] usb 5-1: config 0 descriptor?? [ 205.818106][ T5765] tipc: Enabled bearer , priority 0 [ 205.838615][ T5765] device syzkaller0 entered promiscuous mode [ 205.879347][ T5765] tipc: Resetting bearer [ 205.916214][ T5764] tipc: Resetting bearer [ 205.974233][ T5764] tipc: Disabling bearer [ 206.113306][ T4266] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.573386][ T4266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 206.638808][ T4266] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 206.668729][ T5378] usb 5-1: USB disconnect, device number 6 [ 206.860061][ T5775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.441'. [ 206.893561][ T4266] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 206.940351][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.991929][ T4266] usb 2-1: Product: syz [ 207.192615][ T4266] usb 2-1: Manufacturer: syz [ 207.659761][ T4266] usb 2-1: SerialNumber: syz [ 207.704866][ T4266] usb 2-1: config 0 descriptor?? [ 207.743573][ T5767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.791895][ T5767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.084529][ T5767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.213853][ T5767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.701292][ T4266] Error reading MAC address [ 208.762007][ T4266] usb 2-1: USB disconnect, device number 7 [ 208.928697][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 208.953530][ T5799] tipc: Enabled bearer , priority 0 [ 208.962002][ T5799] device syzkaller0 entered promiscuous mode [ 209.016516][ T5799] tipc: Resetting bearer [ 209.035019][ T5798] tipc: Resetting bearer [ 209.064647][ T5798] tipc: Disabling bearer [ 209.221249][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 210.230301][ T5831] loop2: detected capacity change from 0 to 4096 [ 211.112936][ T5849] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.145597][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 211.145613][ T26] audit: type=1800 audit(1772138258.607:28): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 212.463689][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 212.577571][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.783296][ T5863] device bridge_slave_1 left promiscuous mode [ 212.818885][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.848655][ T5865] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 213.160281][ T5881] loop2: detected capacity change from 0 to 1024 [ 215.175588][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 215.187378][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.226748][ T5881] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.276787][ T5881] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 216.320743][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.634535][ T5908] loop0: detected capacity change from 0 to 1024 [ 216.726162][ T5908] EXT4-fs (loop0): inline encryption not supported [ 216.734258][ T5908] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.873707][ T5908] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 219.126551][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 220.123574][ T5944] vivid-003: kernel_thread() failed [ 221.379573][ T5968] loop4: detected capacity change from 0 to 1024 [ 223.827119][ T5965] loop0: detected capacity change from 0 to 4096 [ 223.910862][ T5965] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 223.972678][ T5968] EXT4-fs (loop4): inline encryption not supported [ 223.992434][ T5968] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.150281][ T5965] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 224.358604][ T5968] EXT4-fs: error -4 creating inode table initialization thread [ 224.384472][ T5965] ntfs3: loop0: Failed to load $Extend. [ 225.198488][ T5968] EXT4-fs (loop4): mount failed [ 228.186383][ T6001] loop1: detected capacity change from 0 to 4096 [ 229.156678][ T4187] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 229.203170][ T4187] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 229.511377][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 230.702662][ T6018] loop3: detected capacity change from 0 to 1024 [ 230.755234][ T6018] EXT4-fs (loop3): inline encryption not supported [ 230.762979][ T6018] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.555955][ T6018] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 231.581862][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.809247][ T6024] loop2: detected capacity change from 0 to 4096 [ 232.099128][ T6036] tipc: Enabled bearer , priority 0 [ 232.176654][ T6035] tipc: Disabling bearer [ 232.342390][ T6039] loop3: detected capacity change from 0 to 128 [ 232.815388][ T6039] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 232.863719][ T6039] hpfs: filesystem error: improperly stopped [ 232.872318][ T6039] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 232.923267][ T6039] hpfs: You really don't want any checks? You are crazy... [ 232.973905][ T6039] hpfs: hpfs_map_sector(): read error [ 232.998342][ T6039] hpfs: code page support is disabled [ 233.018672][ T6039] hpfs: hpfs_map_4sectors(): unaligned read [ 233.046476][ T6039] hpfs: hpfs_map_4sectors(): unaligned read [ 233.066554][ T6039] hpfs: filesystem error: unable to find root dir [ 233.130190][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 233.143316][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 233.324318][ T6048] tipc: Enabled bearer , priority 0 [ 233.359256][ T6048] device syzkaller0 entered promiscuous mode [ 234.424038][ T6046] tipc: Resetting bearer [ 234.498377][ T6046] tipc: Disabling bearer [ 234.557940][ T6059] netlink: 92 bytes leftover after parsing attributes in process `syz.2.523'. [ 234.568242][ T6059] netlink: 'syz.2.523': attribute type 1 has an invalid length. [ 237.477478][ T6077] device syzkaller0 entered promiscuous mode [ 237.526552][ T6077] tipc: Enabled bearer , priority 0 [ 237.554476][ T6074] tipc: Resetting bearer [ 237.596349][ T6087] loop0: detected capacity change from 0 to 2048 [ 237.649843][ T6074] tipc: Disabling bearer [ 237.678296][ T6087] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 237.717719][ T6088] tipc: Enabled bearer , priority 0 [ 237.821200][ T6087] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 237.844141][ T4172] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.887586][ T6084] tipc: Disabling bearer [ 237.948793][ T6087] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.531: bg 0: block 234: padding at end of block bitmap is not set [ 237.968536][ T6087] EXT4-fs (loop0): Remounting filesystem read-only [ 238.119808][ T6109] tipc: Enabling of bearer rejected, failed to enable media [ 238.204047][ T4172] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.258115][ T4172] usb 3-1: config 0 has no interface number 0 [ 238.372204][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 238.382062][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 238.392428][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 239.303362][ T4172] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 239.361090][ T4172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.633205][ T2855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.283927][ T4172] usb 3-1: Product: syz [ 240.288323][ T4172] usb 3-1: Manufacturer: syz [ 240.301526][ T4172] usb 3-1: SerialNumber: syz [ 240.321445][ T4172] usb 3-1: config 0 descriptor?? [ 240.493983][ T6139] device syzkaller0 entered promiscuous mode [ 240.503236][ T2855] usb 2-1: Using ep0 maxpacket: 32 [ 240.503647][ T4172] dvb_usb_ec168: probe of 3-1:0.1 failed with error -71 [ 240.568800][ T4172] usb 3-1: USB disconnect, device number 4 [ 240.589285][ T6139] tipc: Enabled bearer , priority 0 [ 240.626905][ T6138] tipc: Resetting bearer [ 240.667254][ T2855] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.720545][ T6138] tipc: Disabling bearer [ 240.737434][ T6142] tipc: Enabled bearer , priority 0 [ 240.765644][ T6140] tipc: Disabling bearer [ 240.893471][ T2855] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.931846][ T2855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.006241][ T2855] usb 2-1: Product: syz [ 241.020881][ T2855] usb 2-1: Manufacturer: syz [ 241.189469][ T2855] usb 2-1: SerialNumber: syz [ 241.211889][ T2855] usb 2-1: config 0 descriptor?? [ 241.579696][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.227934][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.542765][ T6174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.551'. [ 242.552511][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 242.561778][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 243.391209][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 243.666352][ T6175] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 243.676257][ T6175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 243.685855][ T6175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 243.726187][ T26] audit: type=1800 audit(1772138291.127:29): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.554" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 244.086436][ T6186] loop0: detected capacity change from 0 to 1024 [ 245.379202][ T6186] EXT4-fs (loop0): inline encryption not supported [ 245.386691][ T6186] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.519794][ T6186] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 245.545996][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.782361][ T6193] tipc: Enabled bearer , priority 0 [ 245.804198][ T6192] device syzkaller0 entered promiscuous mode [ 245.819214][ T6185] tipc: Disabling bearer [ 245.849899][ T6192] tipc: Enabled bearer , priority 0 [ 246.159106][ T6187] tipc: Resetting bearer [ 246.864824][ T2855] usb 2-1: can't set config #0, error -110 [ 247.269026][ T6187] tipc: Disabling bearer [ 247.564170][ T2855] usb 2-1: USB disconnect, device number 8 [ 247.677110][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.565'. [ 247.686420][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 247.695742][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 248.388696][ T6218] tipc: Enabled bearer , priority 0 [ 248.434079][ T6218] device syzkaller0 entered promiscuous mode [ 248.541289][ T6218] tipc: Resetting bearer [ 248.594847][ T6216] tipc: Resetting bearer [ 248.663701][ T6216] tipc: Disabling bearer [ 248.824375][ T6225] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 248.834159][ T6225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 248.844149][ T6225] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 248.884856][ T26] audit: type=1800 audit(1772138296.287:30): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.568" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 249.604213][ T6240] tipc: Enabling of bearer rejected, failed to enable media [ 250.849670][ T6257] device syzkaller0 entered promiscuous mode [ 250.916866][ T6257] tipc: Enabled bearer , priority 0 [ 251.028799][ T6257] tipc: Resetting bearer [ 251.160149][ T6256] tipc: Resetting bearer [ 251.247219][ T6271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'. [ 251.257911][ T6271] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 252.059786][ T6256] tipc: Disabling bearer [ 252.105725][ T4224] tipc: Node number set to 3131307575 [ 252.628033][ T6280] tipc: Enabled bearer , priority 0 [ 252.637728][ T6280] device syzkaller0 entered promiscuous mode [ 252.706448][ T6280] tipc: Resetting bearer [ 252.771515][ T6278] tipc: Resetting bearer [ 252.818280][ T6278] tipc: Disabling bearer [ 252.938191][ T6290] loop0: detected capacity change from 0 to 1024 [ 253.002755][ T6290] EXT4-fs (loop0): inline encryption not supported [ 253.010392][ T6290] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.850553][ T6290] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 256.007571][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014985][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.286575][ T6301] tipc: Enabling of bearer rejected, failed to enable media [ 257.234054][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.593'. [ 257.245221][ T6321] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 258.132752][ T6326] device syzkaller0 entered promiscuous mode [ 258.734565][ T6326] tipc: Enabled bearer , priority 0 [ 259.123815][ T6326] tipc: Resetting bearer [ 260.738052][ T6325] tipc: Resetting bearer [ 260.830785][ T6325] tipc: Disabling bearer [ 261.153435][ T2855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 261.234224][ T6354] loop2: detected capacity change from 0 to 1024 [ 261.281864][ T6354] EXT4-fs (loop2): inline encryption not supported [ 261.289213][ T6354] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.417939][ T6354] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 262.307589][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.321329][ T6363] device bridge_slave_0 left promiscuous mode [ 262.327990][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.346570][ T2855] usb 2-1: Using ep0 maxpacket: 16 [ 262.353424][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 262.457932][ T6368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.605'. [ 262.467539][ T6368] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 262.544396][ T2855] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.571703][ T2855] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 262.630264][ T2855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.843387][ T6363] bond0: (slave bond_slave_1): Releasing backup interface [ 263.076028][ T2855] usb 2-1: config 0 descriptor?? [ 263.248959][ T6363] team0: Port device team_slave_0 removed [ 263.336347][ T6363] team0: Port device team_slave_1 removed [ 263.353936][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.362063][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.391892][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.411013][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.647257][ T2855] hid (null): report_id 0 is invalid [ 263.874730][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.291280][ T4229] usb 2-1: USB disconnect, device number 9 [ 264.614557][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.632407][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.813440][ T1108] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 264.998947][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.195739][ T1108] usb 4-1: Product: syz [ 265.219774][ T1108] usb 4-1: Manufacturer: syz [ 265.578693][ T1108] usb 4-1: SerialNumber: syz [ 265.611704][ T1108] usb 4-1: config 0 descriptor?? [ 265.644638][ T6372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 265.652169][ T6372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 266.747146][ T6410] loop4: detected capacity change from 0 to 1024 [ 268.030031][ T6410] EXT4-fs (loop4): inline encryption not supported [ 268.037271][ T6410] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.226575][ T6410] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 268.423544][ T6409] loop0: detected capacity change from 0 to 512 [ 268.483332][ T1108] dm9601: probe of 4-1:0.0 failed with error -71 [ 268.530682][ T1108] usb 4-1: USB disconnect, device number 8 [ 268.899293][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 268.908785][ T6418] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 273.202458][ T6446] tipc: Enabled bearer , priority 0 [ 273.232830][ T6446] device syzkaller0 entered promiscuous mode [ 273.310676][ T6445] tipc: Resetting bearer [ 273.409649][ T6445] tipc: Disabling bearer [ 273.523161][ T2855] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 273.752452][ T6457] loop3: detected capacity change from 0 to 1024 [ 273.790615][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 273.810145][ T6457] EXT4-fs (loop3): inline encryption not supported [ 273.817595][ T6457] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.893284][ T2855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 274.131624][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 274.528669][ T2855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 274.693251][ T2855] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 274.713176][ T2855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.731933][ T2855] usb 1-1: Product: syz [ 274.746873][ T2855] usb 1-1: Manufacturer: syz [ 274.760776][ T2855] usb 1-1: SerialNumber: syz [ 274.791642][ T2855] usb 1-1: config 0 descriptor?? [ 274.823424][ T6450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 274.831066][ T6450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 275.308875][ T6479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 275.601156][ T6479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 277.713783][ T2855] Error reading MAC address [ 277.835064][ T2855] usb 1-1: USB disconnect, device number 4 [ 278.782746][ T6496] loop0: detected capacity change from 0 to 8192 [ 278.916021][ T6496] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.223495][ T6496] loop0: detected capacity change from 8192 to 0 [ 279.392051][ T4183] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 279.431749][ T4183] FAT-fs (loop0): Filesystem has been set read-only [ 279.671366][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 279.983347][ T2855] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 280.234425][ T2855] usb 3-1: Using ep0 maxpacket: 32 [ 280.404003][ T2855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.996062][ T6539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 284.843254][ T2855] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 284.922903][ T2855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.992405][ T2855] usb 3-1: config 0 descriptor?? [ 285.078644][ T2855] usb 3-1: can't set config #0, error -71 [ 285.161730][ T2855] usb 3-1: USB disconnect, device number 5 [ 285.820114][ T6555] loop3: detected capacity change from 0 to 8192 [ 285.844100][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 285.920174][ T6555] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.041293][ T6572] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 286.123185][ T6573] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 287.814326][ T4191] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 287.833630][ T4191] FAT-fs (loop3): Filesystem has been set read-only [ 291.207055][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 291.761854][ T6619] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 291.824924][ T6619] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 294.493189][ T2855] Bluetooth: hci4: command 0x0405 tx timeout [ 294.547487][ T6643] loop0: detected capacity change from 0 to 4096 [ 296.275762][ T6647] loop3: detected capacity change from 0 to 1024 [ 296.418814][ T6647] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.570522][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 296.688048][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 296.692709][ T6647] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 296.738867][ T6655] loop1: detected capacity change from 0 to 1024 [ 296.801935][ T6655] EXT4-fs (loop1): inline encryption not supported [ 296.809306][ T6655] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.911446][ T6655] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 296.937752][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.446011][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 297.503452][ T6662] device bridge_slave_1 left promiscuous mode [ 297.509953][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.617556][ T6666] tipc: Enabled bearer , priority 0 [ 297.653717][ T6664] device syzkaller0 entered promiscuous mode [ 297.756788][ T6660] tipc: Resetting bearer [ 297.811409][ T6659] tipc: Resetting bearer [ 298.864621][ T6659] tipc: Disabling bearer [ 298.992947][ T4259] tipc: Node number set to 2783820743 [ 300.464453][ T6700] loop3: detected capacity change from 0 to 4096 [ 303.153243][ T4191] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 303.173364][ T4191] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 303.372319][ T6710] device syzkaller0 entered promiscuous mode [ 303.443794][ T6710] tipc: Enabled bearer , priority 0 [ 303.483222][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 303.506066][ T6713] loop3: detected capacity change from 0 to 1024 [ 303.571640][ T6713] EXT4-fs (loop3): inline encryption not supported [ 303.579213][ T6713] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.854743][ T6713] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 305.118745][ T6710] tipc: Resetting bearer [ 305.179609][ T6709] tipc: Resetting bearer [ 305.217621][ T6709] tipc: Disabling bearer [ 305.303174][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 305.454933][ T4229] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 305.479656][ T4229] usb 1-1: config 0 has no interface number 0 [ 305.493423][ T4229] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 305.703359][ T4229] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 305.722981][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 306.528480][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.537852][ T4229] usb 1-1: Product: syz [ 306.542287][ T4229] usb 1-1: Manufacturer: syz [ 306.547480][ T4229] usb 1-1: SerialNumber: syz [ 306.587327][ T4229] usb 1-1: config 0 descriptor?? [ 306.697465][ T4229] usb 1-1: can't set config #0, error -71 [ 306.717047][ T4229] usb 1-1: USB disconnect, device number 5 [ 307.094490][ T6748] loop1: detected capacity change from 0 to 1024 [ 307.119060][ T6748] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.182498][ T6748] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 307.293217][ T4229] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 307.523879][ T6753] tipc: Enabled bearer , priority 0 [ 307.544932][ T6753] tipc: Resetting bearer [ 307.558813][ T6752] tipc: Disabling bearer [ 307.711401][ T6757] tipc: Enabled bearer , priority 0 [ 307.719048][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.737584][ T4229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.759933][ T6757] device syzkaller0 entered promiscuous mode [ 307.763935][ T4229] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 307.787846][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.808419][ T4229] usb 1-1: config 0 descriptor?? [ 307.876538][ T6757] tipc: Resetting bearer [ 307.890499][ T6756] tipc: Resetting bearer [ 307.930610][ T6756] tipc: Disabling bearer [ 308.103114][ T6764] loop4: detected capacity change from 0 to 1024 [ 309.101974][ T6764] EXT4-fs (loop4): inline encryption not supported [ 309.109460][ T6764] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 309.403243][ T4229] usb 1-1: string descriptor 0 read error: -71 [ 309.482818][ T6764] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 309.509379][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.732416][ T4229] usb 1-1: USB disconnect, device number 6 [ 310.333309][ T5378] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 310.402882][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 311.343229][ T5378] usb 4-1: Using ep0 maxpacket: 32 [ 312.929990][ T6800] tipc: Enabled bearer , priority 0 [ 313.120687][ T6800] tipc: Resetting bearer [ 313.185223][ T6799] tipc: Disabling bearer [ 313.516235][ T6811] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 313.723611][ T6813] device syzkaller0 entered promiscuous mode [ 313.763912][ T6813] tipc: Enabled bearer , priority 0 [ 313.818262][ T6813] tipc: Resetting bearer [ 313.853904][ T6812] tipc: Resetting bearer [ 313.910232][ T6812] tipc: Disabling bearer [ 314.230642][ T6818] loop2: detected capacity change from 0 to 1024 [ 315.233196][ T5378] usb 4-1: device descriptor read/all, error -71 [ 315.468760][ T6818] EXT4-fs (loop2): inline encryption not supported [ 315.476496][ T6818] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.582465][ T6818] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noquota,inlinecrypt,barrier=0x0000000000000000,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 317.377227][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383699][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.365100][ T6840] netlink: 620 bytes leftover after parsing attributes in process `syz.3.735'. [ 320.443276][ T26] audit: type=1326 audit(1772138367.907:31): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee49de799 code=0x7ffc0000 [ 320.467922][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.480210][ T26] audit: type=1326 audit(1772138367.937:32): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee49de799 code=0x7ffc0000 [ 320.695832][ T6851] device syzkaller0 entered promiscuous mode [ 320.746847][ T6851] tipc: Enabled bearer , priority 0 [ 320.780233][ T6848] tipc: Resetting bearer [ 320.975275][ T6848] tipc: Disabling bearer [ 321.411236][ T6861] INFO: trying to register non-static key. [ 321.417679][ T6861] The code is fine but needs lockdep annotation, or maybe [ 321.425272][ T6861] you didn't initialize this object before use? [ 321.431910][ T6861] turning off the locking correctness validator. [ 321.438627][ T6861] CPU: 1 PID: 6861 Comm: syz.4.741 Not tainted syzkaller #0 [ 321.446965][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.457965][ T6861] Call Trace: [ 321.461692][ T6861] [ 321.464657][ T6861] dump_stack_lvl+0x188/0x250 [ 321.469408][ T6861] ? show_regs_print_info+0x20/0x20 [ 321.474844][ T6861] ? load_image+0x400/0x400 [ 321.479972][ T6861] ? finish_lock_switch+0x12f/0x280 [ 321.485402][ T6861] ? cpumask_next+0xb3/0xd0 [ 321.490381][ T6861] ? __is_module_percpu_address+0x2a7/0x410 [ 321.496606][ T6861] ? is_kernel_percpu_address+0x143/0x160 [ 321.502741][ T6861] assign_lock_key+0x1ec/0x200 [ 321.507736][ T6861] ? SOFTIRQ_verbose+0x10/0x10 [ 321.512819][ T6861] register_lock_class+0x21d/0x890 [ 321.518159][ T6861] ? is_dynamic_key+0x1f0/0x1f0 [ 321.523069][ T6861] ? release_firmware_map_entry+0x190/0x190 [ 321.529251][ T6861] __lock_acquire+0x16f/0x7d10 [ 321.534137][ T6861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.540157][ T6861] ? lock_chain_count+0x20/0x20 [ 321.545646][ T6861] ? lockdep_hardirqs_on+0x94/0x140 [ 321.551204][ T6861] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 321.557325][ T6861] ? verify_lock_unused+0x140/0x140 [ 321.562693][ T6861] ? lock_acquire+0x208/0x400 [ 321.567773][ T6861] ? __might_sleep+0xf0/0xf0 [ 321.572719][ T6861] lock_acquire+0x19e/0x400 [ 321.577432][ T6861] ? gsmld_write+0x57/0x120 [ 321.582276][ T6861] ? read_lock_is_recursive+0x10/0x10 [ 321.587772][ T6861] ? _copy_from_iter+0x5cb/0x1170 [ 321.592857][ T6861] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 321.598625][ T6861] ? lockdep_hardirqs_off+0x70/0x100 [ 321.604212][ T6861] _raw_spin_lock_irqsave+0xb0/0x100 [ 321.609722][ T6861] ? gsmld_write+0x57/0x120 [ 321.614495][ T6861] ? _raw_spin_lock+0x40/0x40 [ 321.619305][ T6861] ? __virt_addr_valid+0x3c6/0x470 [ 321.624458][ T6861] gsmld_write+0x57/0x120 [ 321.628818][ T6861] file_tty_write+0x557/0x910 [ 321.633982][ T6861] ? gsmld_read+0x10/0x10 [ 321.638517][ T6861] do_iter_readv_writev+0x47e/0x5f0 [ 321.643922][ T6861] ? aa_path_link+0x880/0x880 [ 321.648815][ T6861] ? generic_file_rw_checks+0x280/0x280 [ 321.654530][ T6861] ? common_file_perm+0x171/0x1c0 [ 321.659846][ T6861] ? fsnotify_perm+0x5d/0x560 [ 321.664550][ T6861] ? security_file_permission+0x75/0xa0 [ 321.670475][ T6861] do_iter_write+0x205/0x7b0 [ 321.675365][ T6861] ? import_iovec+0x6f/0xa0 [ 321.679999][ T6861] do_writev+0x281/0x480 [ 321.684281][ T6861] ? do_readv+0x460/0x460 [ 321.688987][ T6861] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 321.695291][ T6861] ? lock_chain_count+0x20/0x20 [ 321.700525][ T6861] ? vtime_user_exit+0x2c8/0x3e0 [ 321.705692][ T6861] ? lockdep_hardirqs_on+0x94/0x140 [ 321.711011][ T6861] do_syscall_64+0x4c/0xa0 [ 321.715590][ T6861] ? clear_bhb_loop+0x30/0x80 [ 321.720705][ T6861] ? clear_bhb_loop+0x30/0x80 [ 321.725635][ T6861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.732075][ T6861] RIP: 0033:0x7f3010eae799 [ 321.736538][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.757151][ T6861] RSP: 002b:00007f300f0c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 321.766259][ T6861] RAX: ffffffffffffffda RBX: 00007f3011128180 RCX: 00007f3010eae799 [ 321.774928][ T6861] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 321.783206][ T6861] RBP: 00007f3010f44bd9 R08: 0000000000000000 R09: 0000000000000000 [ 321.791416][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.799856][ T6861] R13: 00007f3011128218 R14: 00007f3011128180 R15: 00007ffd49c518a8 [ 321.808887][ T6861]