last executing test programs: 10m16.087911105s ago: executing program 3 (id=21): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000000)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0xf}, {0x0, 0xfffffffd, 0xffeffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0xfffffffe, 0xd613, 0x0, 0x0, 0x48000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x9}) 10m9.89831759s ago: executing program 3 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20202, 0xa4) setpriority(0x2, 0x0, 0x3) 10m7.583903396s ago: executing program 3 (id=35): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x11, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6c, 0x9, 0x4, 0x400001, 0x3, 0x5, 0x8, 0xffc, 0x4, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x12, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x2, 0x5, 0x79b, 0x1, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x1000, 0x4007, 0x8b, 0x5, 0x4, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x1, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x3, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0x9, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0xf, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 10m7.399901072s ago: executing program 3 (id=39): r0 = syz_open_dev$vim2m(&(0x7f0000000d40), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000002d40)={0x1, @sliced={0x2fad, [0x3, 0x2, 0x0, 0x8000, 0x7fff, 0x7, 0x7, 0x7f, 0x2, 0xa082, 0xc000, 0x4, 0x667e, 0x0, 0x6, 0x9, 0x5, 0x3, 0xd, 0x9, 0x80, 0x8000, 0xc06d, 0x4, 0xa9ca, 0x8, 0x5, 0x400, 0x10, 0x9, 0x8, 0x0, 0x5, 0x7, 0x4, 0x1, 0xdad, 0x800, 0x7, 0x4, 0xb, 0xe, 0xffff, 0xffff, 0x737, 0x1000], 0x6}}) 10m7.360168083s ago: executing program 3 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000122, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x246, &(0x7f0000000680)={@remote, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "627bfe", 0x210, 0x21, 0xff, @mcast1, @mcast2, {[@dstopts={0x8, 0x35, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @generic={0x7, 0x7d, "d45888d64ab0f0701c2efbe6c338d7da01bf56d550a5aefaa80485d75e84653c8fbc38e7fbd7cfe576984b870738e6bef773b1125d1c8b8b3a2c774dbf453da2404ce02c39d4f717676d4d8d53eeb1909f4b679b2c6b0f70b153c6280085669bca8a592b79bd0908d47634ae7f134f41b9e0597e5fd1bd23e0390fda85"}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x48, {0x0, 0x10, 0x80, 0x100, [0x9, 0x8001, 0xfffffffffffffffc, 0x0, 0x8000, 0x3, 0x2, 0x7fff]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0xa, 0x8, [0xfffffffffffffffe]}}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xa}, @generic={0x8, 0xb1, "2ccfc7e9b9ad0e8b18033eec57a74a1de3bf0a84aea59b86c5478527f9aecc67f5912c902227a0afc9c5d9691cd58c037291f6d6f5164f6a7cdd3fdbb893ac07df0db1fd542946b8ea515bc2a71a56312bcbbe1166d6054ee0f331cf0d5ce19668ad7a6cada5ed6dbf348fe9f091cd2eeb7ba9b01d4f463eb0826afe77f3b39dcb78e91e8cb92ff9db9e20b18ebc27f8afafa393f64fec2057c3630448c4b1cddca998e08e1007bbd1a828b0b9c36a1f09"}]}, @routing={0x5c, 0x6, 0x0, 0x0, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}, @fragment={0x36, 0x0, 0x4, 0x1, 0x0, 0x0, 0x65}, @fragment={0xc, 0x0, 0x40, 0x1, 0x0, 0x4, 0x66}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x4, "6f86ac", 0xbb, "26fe73"}}}}}}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 10m5.794629954s ago: executing program 3 (id=43): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read(r4, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m48.716564456s ago: executing program 32 (id=43): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read(r4, &(0x7f00000001c0)=""/47, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.07508495s ago: executing program 4 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x81, 0x1b, "0062ba7d820700000d0000efffffffff086304"}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) 40.504483059s ago: executing program 4 (id=1240): socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r0, 0x544c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 39.424480274s ago: executing program 4 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) 38.575370141s ago: executing program 4 (id=1245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) 36.788516638s ago: executing program 4 (id=1249): socket(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xff, &(0x7f00000194c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x5, 0x46c0c2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpriority(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, &(0x7f0000019380)={0x2, 0xe25, @loopback}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsmount(r3, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe6) 35.063802013s ago: executing program 4 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000040392ab03f400001020301090269000301053009080b000101b56807208c09040000000101200009"], 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3400) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'cpu'}]}, 0x5) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 29.875965948s ago: executing program 2 (id=1261): syz_open_dev$video4linux(&(0x7f00000001c0), 0x1000000000000401, 0x100) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x80, 0x0, 0x1ff, 0x7d, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x40000000004, 0xf, 0x80000006}, 0x0, 0x0) 27.752690906s ago: executing program 2 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x7fc0, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 23.722588954s ago: executing program 2 (id=1268): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 18.101518483s ago: executing program 2 (id=1273): socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x8, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 17.87519039s ago: executing program 33 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000040392ab03f400001020301090269000301053009080b000101b56807208c09040000000101200009"], 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3400) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'cpu'}]}, 0x5) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 15.877659054s ago: executing program 2 (id=1276): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f00000006c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = getuid() r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@md0, r4, 0x0) 15.876952884s ago: executing program 5 (id=1277): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x65, 0x101282) ioctl$int_in(r3, 0x5452, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) write$P9_RSTAT(r4, &(0x7f0000000140)=ANY=[], 0x42) timer_create(0x2, 0x0, &(0x7f0000002440)) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x700, 0x7, 0x8, 0x7, {{0x8, 0x4, 0x1, 0xb, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @broadcast, {[@rr={0x7, 0xb, 0x6b, [@private=0xa010102, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f0000000d80)={0xc8, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4001}, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 14.667354693s ago: executing program 5 (id=1278): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.320247753s ago: executing program 5 (id=1280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) 11.29189542s ago: executing program 1 (id=1285): socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x8, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 8.954083104s ago: executing program 2 (id=1288): socket(0x8, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fbdbdf2515090100000001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) 8.794352349s ago: executing program 1 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80020, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x103e}}, 0x1006) 6.764720474s ago: executing program 0 (id=1291): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x0) 6.463834074s ago: executing program 0 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200580e4) 6.397526236s ago: executing program 0 (id=1293): socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r0, 0x544c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x9, 0x400) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) 5.215004934s ago: executing program 0 (id=1294): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(0x0, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 5.088228487s ago: executing program 5 (id=1295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x802) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = dup2(r3, r3) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 4.240708174s ago: executing program 1 (id=1296): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) execve(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 3.856850027s ago: executing program 0 (id=1297): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x5, 0x4, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x2000000000000010, &(0x7f00000006c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = getuid() r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@md0, r4, 0x0) 2.745119242s ago: executing program 5 (id=1298): socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x8, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2.728304163s ago: executing program 1 (id=1299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000240)="33e3e995b1fd7f5160db9df48acea0f4", 0x10) 1.802340063s ago: executing program 5 (id=1300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) 1.759841404s ago: executing program 1 (id=1301): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x544c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) 720.478227ms ago: executing program 1 (id=1302): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3004408c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=1303): socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r0, 0x544c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x9, 0x400) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.059343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.071308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.127270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.138446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.147813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.157520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.167068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.176287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.185696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.195362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.205399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.216168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.246107][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.262436][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.288862][ T4198] device veth0_vlan entered promiscuous mode [ 71.301344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.315674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.325068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.338167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.347362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.358156][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365004][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.372072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.381059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.389654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.398772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.407982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.417471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.426372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.435858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.446810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.463280][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.485633][ T4198] device veth1_vlan entered promiscuous mode [ 71.531358][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.538866][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.593618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.602648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.628617][ T4198] device veth0_macvtap entered promiscuous mode [ 71.651674][ T4192] device veth0_vlan entered promiscuous mode [ 71.669466][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.687295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.700351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.720696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.737383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.747070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.764831][ T4192] device veth1_vlan entered promiscuous mode [ 71.786455][ T4198] device veth1_macvtap entered promiscuous mode [ 71.820813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.829798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.837996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.847821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.856996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.865107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.874742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.890315][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.916377][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.944202][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.955307][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.965854][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.973806][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.981743][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.993122][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.008122][ T4192] device veth0_macvtap entered promiscuous mode [ 72.020918][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.033676][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.047824][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.061590][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.075783][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.090797][ T4192] device veth1_macvtap entered promiscuous mode [ 72.099541][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.109362][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.118650][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.133284][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.145556][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.156256][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.174512][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.201672][ T4191] device veth0_vlan entered promiscuous mode [ 72.216934][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.225090][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.241774][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.255081][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.286654][ T4191] device veth1_vlan entered promiscuous mode [ 72.311638][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.342648][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.355419][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.364242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.373339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.383001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.396539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.411335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.422314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.431462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.448577][ T4190] device veth0_vlan entered promiscuous mode [ 72.461675][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.475165][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.486953][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.511443][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.526101][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536115][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.545223][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.562499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.571588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.608924][ T4190] device veth1_vlan entered promiscuous mode [ 72.637803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.647947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.682919][ T1649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.691513][ T1649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.727130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.736831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.746105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.758391][ T4191] device veth0_macvtap entered promiscuous mode [ 72.782288][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.801741][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.811251][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.831313][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.835284][ T4191] device veth1_macvtap entered promiscuous mode [ 72.845768][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.864927][ T4190] device veth0_macvtap entered promiscuous mode [ 72.881533][ T4189] device veth0_vlan entered promiscuous mode [ 72.892475][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.901330][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.913230][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.921916][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.930705][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.939363][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.948534][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.956701][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 72.964209][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 72.971082][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 72.987032][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 72.996544][ T4190] device veth1_macvtap entered promiscuous mode [ 73.017357][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.031224][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.042642][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 73.048741][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.059408][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.076610][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.088367][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.104249][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.115953][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.132499][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.148096][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.164265][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.173893][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.184460][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193891][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.204887][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.214153][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.223150][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.232706][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.244004][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.254361][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.266601][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.282431][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.295826][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.332433][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.345454][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.365676][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.378395][ T4189] device veth1_vlan entered promiscuous mode [ 73.391025][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.405366][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.416646][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.436383][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.447991][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.458321][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.470691][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.484106][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.497297][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511219][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.522034][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.533955][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.560157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.573980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.586144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.611840][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.626417][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.635420][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.650274][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.727855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.754246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.766964][ T4189] device veth0_macvtap entered promiscuous mode [ 73.811464][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.819330][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.854950][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.870859][ T4189] device veth1_macvtap entered promiscuous mode [ 73.888739][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.898771][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.916977][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.927138][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.940113][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.007251][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.028510][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.038865][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.050560][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.068171][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.081426][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.097045][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.121453][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.146392][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.167692][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.184857][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.193987][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.205507][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.222167][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.234507][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.247155][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.258245][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.269099][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.280718][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.293389][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.304671][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.324189][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.337550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.370281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.405787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.428265][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.447961][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458218][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.468778][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.521841][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.537353][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.649450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.777765][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.797771][ T1324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.868132][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.868174][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.892881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.492417][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 76.509236][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 76.515432][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 76.521535][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 76.528894][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 76.661531][ T1324] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 76.715511][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.745465][ T1324] usb 4-1: Product: syz [ 76.755802][ T1324] usb 4-1: Manufacturer: syz [ 76.765646][ T1324] usb 4-1: SerialNumber: syz [ 76.794206][ T1324] usb 4-1: config 0 descriptor?? [ 76.817254][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.007200][ T1324] hub 4-1:0.0: bad descriptor, ignoring hub [ 77.010250][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.022069][ T1324] hub: probe of 4-1:0.0 failed with error -5 [ 77.046777][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.020372][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.030789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.489740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 78.509732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 78.519717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 78.529708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.539707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.549709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.559713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.569708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.579727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.589716][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.629918][ T1324] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 78.683247][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.700317][ T1324] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 78.727448][ T1324] dib0700: firmware download failed at 7 with -22 [ 78.964014][ T1324] usb 4-1: USB disconnect, device number 2 [ 79.572238][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.927106][ T4312] xt_time: unknown flags 0xc [ 82.458787][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 82.625794][ T4236] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 82.634074][ T4236] usb 2-1: config 0 has no interface number 0 [ 82.703959][ T4239] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.812370][ T4236] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 82.821567][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.869811][ T4236] usb 2-1: Product: syz [ 82.875878][ T4236] usb 2-1: Manufacturer: syz [ 82.882468][ T4236] usb 2-1: SerialNumber: syz [ 82.909314][ T4236] usb 2-1: config 0 descriptor?? [ 82.962359][ T4236] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.176298][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.187033][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 83.198016][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 83.209260][ T4239] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 83.218445][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.233208][ T4239] usb 5-1: config 0 descriptor?? [ 83.419990][ T4236] usb 2-1: qt2_attach - failed to power on unit: -71 [ 83.947697][ T4236] quatech2: probe of 2-1:0.51 failed with error -71 [ 83.983697][ T4236] usb 2-1: USB disconnect, device number 2 [ 84.062231][ T4239] usb 5-1: can't set config #0, error -71 [ 84.075423][ T4239] usb 5-1: USB disconnect, device number 2 [ 84.804511][ T4356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.386269][ T13] cfg80211: failed to load regulatory.db [ 87.499699][ T4373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.098480][ T13] Bluetooth: hci0: command 0x0c20 tx timeout [ 96.372415][ T4465] capability: warning: `syz.2.42' uses 32-bit capabilities (legacy support in use) [ 96.465387][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.485797][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.929521][ T4234] Bluetooth: hci4: command 0x0411 tx timeout [ 98.399683][ T13] usb 1-1: device descriptor read/all, error -71 [ 98.541481][ T4474] process 'syz.0.46' launched './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.010744][ T4485] loop4: detected capacity change from 0 to 256 [ 99.702139][ T4474] xt_time: unknown flags 0xc [ 99.746938][ T4484] loop2: detected capacity change from 0 to 4096 [ 99.850676][ T4490] futex_wake_op: syz.1.50 tries to shift op by 144; fix this program [ 100.667965][ T4485] FAT-fs (loop4): Directory bread(block 64) failed [ 100.675031][ T4485] FAT-fs (loop4): Directory bread(block 65) failed [ 100.681654][ T4485] FAT-fs (loop4): Directory bread(block 66) failed [ 100.688329][ T4485] FAT-fs (loop4): Directory bread(block 67) failed [ 100.695008][ T4485] FAT-fs (loop4): Directory bread(block 68) failed [ 100.701565][ T4485] FAT-fs (loop4): Directory bread(block 69) failed [ 100.708414][ T4485] FAT-fs (loop4): Directory bread(block 70) failed [ 100.714998][ T4485] FAT-fs (loop4): Directory bread(block 71) failed [ 100.721597][ T4485] FAT-fs (loop4): Directory bread(block 72) failed [ 100.728797][ T4485] FAT-fs (loop4): Directory bread(block 73) failed [ 100.785064][ T4484] EXT4-fs (loop2): inline encryption not supported [ 101.219711][ T4484] EXT4-fs (loop2): Test dummy encryption mode enabled [ 101.291398][ T4484] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 101.311646][ T4484] System zones: 0-5 [ 101.371983][ T4484] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 103.478848][ T4523] ======================================================= [ 103.478848][ T4523] WARNING: The mand mount option has been deprecated and [ 103.478848][ T4523] and is ignored by this kernel. Remove the mand [ 103.478848][ T4523] option from the mount to silence this warning. [ 103.478848][ T4523] ======================================================= [ 103.530617][ T4523] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.608263][ T4523] overlayfs: failed to look up (tracing) for ino (-66) [ 103.741382][ T4522] loop3: detected capacity change from 0 to 512 [ 104.028333][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.100402][ T4522] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.991452][ C1] sched: RT throttling activated [ 106.565999][ T4547] loop8: detected capacity change from 0 to 7 [ 106.622406][ T4547] Dev loop8: unable to read RDB block 7 [ 106.651740][ T4547] loop8: unable to read partition table [ 106.677514][ T4547] loop8: partition table beyond EOD, truncated [ 106.691854][ T4547] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 107.691330][ T4557] futex_wake_op: syz.1.61 tries to shift op by 144; fix this program [ 108.471944][ T4549] ODEBUG: Out of memory. ODEBUG disabled [ 108.765493][ T4564] loop0: detected capacity change from 0 to 256 [ 108.854307][ T4564] FAT-fs (loop0): Directory bread(block 64) failed [ 108.861003][ T4564] FAT-fs (loop0): Directory bread(block 65) failed [ 108.867622][ T4564] FAT-fs (loop0): Directory bread(block 66) failed [ 108.874731][ T4564] FAT-fs (loop0): Directory bread(block 67) failed [ 108.881406][ T4564] FAT-fs (loop0): Directory bread(block 68) failed [ 108.887956][ T4564] FAT-fs (loop0): Directory bread(block 69) failed [ 108.894656][ T4564] FAT-fs (loop0): Directory bread(block 70) failed [ 108.901459][ T4564] FAT-fs (loop0): Directory bread(block 71) failed [ 108.908072][ T4564] FAT-fs (loop0): Directory bread(block 72) failed [ 108.914711][ T4564] FAT-fs (loop0): Directory bread(block 73) failed [ 114.185882][ T4614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'. [ 116.611607][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 117.070451][ T4206] Bluetooth: hci4: link tx timeout [ 117.075864][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.084988][ T4206] Bluetooth: hci4: link tx timeout [ 117.090285][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.253036][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 118.277116][ T4536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.600448][ T4617] chnl_net:caif_netlink_parms(): no params data found [ 118.699396][ T4536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.743798][ T4674] futex_wake_op: syz.4.84 tries to shift op by 144; fix this program [ 118.780064][ T4674] loop4: detected capacity change from 0 to 512 [ 118.904273][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 119.559963][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 120.135375][ T4674] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 120.147494][ T4674] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.181619][ T4536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.468749][ T4536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.556243][ T4687] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 121.758484][ T1324] Bluetooth: hci5: command 0x040f tx timeout [ 122.048770][ T4693] loop1: detected capacity change from 0 to 4096 [ 122.078529][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.278427][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.526253][ T4617] device bridge_slave_0 entered promiscuous mode [ 122.806465][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.819407][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.829222][ T4693] EXT4-fs (loop1): inline encryption not supported [ 122.843782][ T4617] device bridge_slave_1 entered promiscuous mode [ 122.851349][ T4693] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.962821][ T4693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 123.036714][ T4693] System zones: 0-5 [ 123.114752][ T4693] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 123.137460][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.158889][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.371082][ T4617] team0: Port device team_slave_0 added [ 123.380491][ T4617] team0: Port device team_slave_1 added [ 123.401920][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.415695][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.015520][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 124.315210][ T4617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.720003][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.727608][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.787221][ T4724] input: syz1 as /devices/virtual/input/input5 [ 124.806062][ T4617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.875581][ T4735] futex_wake_op: syz.0.102 tries to shift op by 144; fix this program [ 125.969102][ T4617] device hsr_slave_0 entered promiscuous mode [ 126.010448][ T4617] device hsr_slave_1 entered promiscuous mode [ 126.037708][ T4617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.070326][ T4617] Cannot create hsr debugfs directory [ 126.470436][ T4239] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.649732][ T4767] futex_wake_op: syz.0.110 tries to shift op by 144; fix this program [ 126.827013][ T4617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.913205][ T4617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.532222][ T4617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.546579][ T4617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.596776][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 127.625635][ T4772] device syzkaller0 entered promiscuous mode [ 127.741471][ T4239] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 127.768390][ T4239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.813259][ T4239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.834508][ T4239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.938781][ T4239] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.974172][ T4239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.990942][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.206264][ T4777] loop4: detected capacity change from 0 to 4096 [ 128.710505][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.712986][ T4239] usb 2-1: usb_control_msg returned -32 [ 128.795172][ T4239] usbtmc 2-1:16.0: can't read capabilities [ 129.062770][ T4777] EXT4-fs (loop4): inline encryption not supported [ 129.445758][ T4777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 129.496757][ T4536] device hsr_slave_0 left promiscuous mode [ 129.527567][ T4777] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 129.538131][ T4777] System zones: 0-5 [ 129.545985][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 129.580531][ T4536] device hsr_slave_1 left promiscuous mode [ 129.777902][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.329785][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.340227][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.347705][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.381328][ T4536] device bridge_slave_1 left promiscuous mode [ 130.388915][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.422461][ T4274] usb 2-1: USB disconnect, device number 4 [ 130.569945][ T4536] device bridge_slave_0 left promiscuous mode [ 130.629929][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.848020][ T4536] device veth1_macvtap left promiscuous mode [ 130.854472][ T4536] device veth0_macvtap left promiscuous mode [ 130.871661][ T4536] device veth1_vlan left promiscuous mode [ 130.877697][ T4536] device veth0_vlan left promiscuous mode [ 131.555809][ T4820] syz.4.121 uses obsolete (PF_INET,SOCK_PACKET) [ 131.852237][ T4824] loop2: detected capacity change from 0 to 4096 [ 131.932809][ T4824] EXT4-fs (loop2): inline encryption not supported [ 131.957363][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 131.975686][ T4824] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.022656][ T4824] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 132.039934][ T4824] System zones: 0-5 [ 132.045018][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 132.092262][ T4824] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 132.115817][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.132480][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.227939][ T4536] bond0 (unregistering): Released all slaves [ 132.438457][ T4617] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.462148][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.487390][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.139134][ T4206] Bluetooth: hci4: link tx timeout [ 133.144375][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.182679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.238486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.289365][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.296560][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.351198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.369696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.389872][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.397079][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.438523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.466224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.497435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.530321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.554754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.578418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.609380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.630780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.663481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.683064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.719919][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.734737][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.794368][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.475019][ T4234] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 134.697596][ T4846] loop2: detected capacity change from 0 to 4096 [ 134.844188][ T4846] EXT4-fs (loop2): inline encryption not supported [ 134.935295][ T4846] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.065691][ T4846] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 135.203793][ T4846] System zones: 0-5 [ 135.326969][ T4846] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 135.446667][ T4858] sctp: failed to load transform for md5: -2 [ 135.474979][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.484870][ T4856] sctp: failed to load transform for md5: -2 [ 135.662390][ T4852] sctp: failed to load transform for md5: -2 [ 135.684118][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.707563][ T4876] loop4: detected capacity change from 0 to 1024 [ 136.103436][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.146899][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.285271][ T4234] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 136.307233][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.315287][ T4234] usb 1-1: Product: syz [ 136.354368][ T4234] usb 1-1: Manufacturer: syz [ 136.359040][ T4234] usb 1-1: SerialNumber: syz [ 136.382091][ T4234] usb 1-1: config 0 descriptor?? [ 136.421120][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 136.442036][ T4234] hub 1-1:0.0: bad descriptor, ignoring hub [ 136.452256][ T4234] hub: probe of 1-1:0.0 failed with error -5 [ 136.584105][ T4876] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.598500][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.598577][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.891087][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.909476][ T4876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.128: bg 0: block 112: padding at end of block bitmap is not set [ 136.929442][ T4876] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 136.942360][ T4876] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.942360][ T4876] [ 136.952132][ T4876] EXT4-fs (loop4): Total free blocks count 0 [ 136.958165][ T4876] EXT4-fs (loop4): Free/Dirty block details [ 136.964136][ T4876] EXT4-fs (loop4): free_blocks=0 [ 136.965606][ T4907] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.128: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.969178][ T4876] EXT4-fs (loop4): dirty_blocks=64 [ 136.987810][ T4876] EXT4-fs (loop4): Block reservation details [ 136.994267][ T4876] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 137.032295][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.108594][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.127563][ T4905] loop2: detected capacity change from 0 to 4096 [ 137.142895][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.176148][ T4617] device veth0_vlan entered promiscuous mode [ 137.194283][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.213389][ T1649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.229389][ T4617] device veth1_vlan entered promiscuous mode [ 137.255270][ T21] usb 1-1: USB disconnect, device number 4 [ 137.301702][ T4911] loop4: detected capacity change from 0 to 1024 [ 137.314084][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.322156][ T4905] EXT4-fs (loop2): inline encryption not supported [ 137.345148][ T4905] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.353370][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.399142][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.409929][ T4905] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 137.420105][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.432689][ T4617] device veth0_macvtap entered promiscuous mode [ 137.445268][ T4911] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 137.448448][ T4905] System zones: 0-5 [ 137.501559][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 137.523958][ T4617] device veth1_macvtap entered promiscuous mode [ 137.531685][ T4911] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.550809][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.566372][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.578561][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.600328][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.838107][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.267795][ T4924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.133: bg 0: block 112: padding at end of block bitmap is not set [ 139.503302][ T4924] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 139.515888][ T4924] EXT4-fs (loop4): This should not happen!! Data will be lost [ 139.515888][ T4924] [ 139.525912][ T4924] EXT4-fs (loop4): Total free blocks count 0 [ 139.531928][ T4924] EXT4-fs (loop4): Free/Dirty block details [ 139.537914][ T4924] EXT4-fs (loop4): free_blocks=0 [ 139.543415][ T4924] EXT4-fs (loop4): dirty_blocks=64 [ 139.548583][ T4924] EXT4-fs (loop4): Block reservation details [ 139.554610][ T4924] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 139.605085][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.637244][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.670576][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.685573][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.819620][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.857158][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.858015][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.880135][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.906875][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.906935][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.906946][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.906958][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.906967][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.906980][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.906990][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.907001][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.908010][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.910658][ T4617] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.910719][ T4617] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.910746][ T4617] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.910773][ T4617] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.934636][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.935355][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.135097][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.135121][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.135356][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.234446][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.234478][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.234671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.988998][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.272121][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 141.431868][ T21] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 141.440801][ T1324] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 141.451173][ T21] usb 1-1: config 0 has no interface number 0 [ 141.457329][ T21] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 141.491779][ T4978] loop5: detected capacity change from 0 to 4096 [ 141.498571][ T21] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 141.549784][ T4978] EXT4-fs (loop5): inline encryption not supported [ 141.563405][ T4978] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.571331][ T21] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 141.588320][ T21] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.598801][ T21] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.627063][ T4978] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 141.640294][ T4978] System zones: 0-5 [ 141.656796][ T4978] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 141.684885][ T4981] loop4: detected capacity change from 0 to 1024 [ 141.743405][ T4981] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 141.895332][ T4981] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.974996][ T21] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 141.997137][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.035238][ T21] usb 1-1: Product: syz [ 142.353895][ T21] usb 1-1: Manufacturer: syz [ 142.358752][ T21] usb 1-1: SerialNumber: syz [ 142.739908][ T21] usb 1-1: config 0 descriptor?? [ 142.745090][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 142.772582][ T4959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.773374][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.806046][ T21] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 142.978470][ T4981] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.146: bg 0: block 112: padding at end of block bitmap is not set [ 143.000865][ T4981] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 143.013956][ T4981] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.013956][ T4981] [ 143.023706][ T4981] EXT4-fs (loop4): Total free blocks count 0 [ 143.029733][ T4981] EXT4-fs (loop4): Free/Dirty block details [ 143.031187][ T4995] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.146: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.035708][ T4981] EXT4-fs (loop4): free_blocks=0 [ 143.035728][ T4981] EXT4-fs (loop4): dirty_blocks=64 [ 143.035744][ T4981] EXT4-fs (loop4): Block reservation details [ 143.035757][ T4981] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 143.178785][ T1324] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 143.188271][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.225662][ T1324] usb 2-1: Product: syz [ 143.233229][ T1324] usb 2-1: Manufacturer: syz [ 143.242944][ T1324] usb 2-1: SerialNumber: syz [ 143.257793][ T21] usb 1-1: USB disconnect, device number 5 [ 143.273980][ T1324] usb 2-1: config 0 descriptor?? [ 143.348729][ T1324] hub 2-1:0.0: bad descriptor, ignoring hub [ 143.360682][ T1324] hub: probe of 2-1:0.0 failed with error -5 [ 143.377505][ T1324] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 143.394676][ T5005] device syzkaller0 entered promiscuous mode [ 143.612502][ T5012] device syzkaller0 entered promiscuous mode [ 145.718769][ T2240] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.426825][ T2240] usb 1-1: device descriptor read/all, error -71 [ 148.886546][ T5059] device syzkaller0 entered promiscuous mode [ 150.960996][ T5078] loop2: detected capacity change from 0 to 4096 [ 151.045104][ T5078] EXT4-fs (loop2): inline encryption not supported [ 151.058682][ T2240] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 151.174921][ T5078] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.228848][ T5078] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 151.275305][ T5078] System zones: 0-5 [ 151.290405][ T5078] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 151.337199][ T4994] usb 2-1: USB disconnect, device number 5 [ 151.925438][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 151.961260][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.174609][ T2240] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 152.228194][ T2240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.266436][ T2240] usb 1-1: Product: syz [ 152.281739][ T2240] usb 1-1: Manufacturer: syz [ 152.333380][ T2240] usb 1-1: SerialNumber: syz [ 152.370234][ T2240] usb 1-1: config 0 descriptor?? [ 152.462669][ T2240] hub 1-1:0.0: bad descriptor, ignoring hub [ 152.575572][ T2240] hub: probe of 1-1:0.0 failed with error -5 [ 153.024676][ T2240] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 153.182617][ T2240] usb 1-1: USB disconnect, device number 8 [ 153.523270][ T5125] device syzkaller0 entered promiscuous mode [ 156.933811][ T5155] loop5: detected capacity change from 0 to 4096 [ 157.043510][ T5155] EXT4-fs (loop5): inline encryption not supported [ 157.085345][ T5155] EXT4-fs (loop5): Test dummy encryption mode enabled [ 157.281771][ T5155] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 157.304450][ T5155] System zones: 0-5 [ 157.551184][ T5155] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 160.635670][ T5192] Zero length message leads to an empty skb [ 160.781445][ T5205] device syzkaller0 entered promiscuous mode [ 160.851984][ T2240] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 162.789697][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.806589][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 163.053200][ T2240] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 163.066643][ T5226] loop5: detected capacity change from 0 to 4096 [ 163.082027][ T2240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.101150][ T2240] usb 1-1: Product: syz [ 163.122351][ T2240] usb 1-1: Manufacturer: syz [ 163.149338][ T5226] EXT4-fs (loop5): inline encryption not supported [ 163.156656][ T5226] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.164240][ T2240] usb 1-1: SerialNumber: syz [ 163.180485][ T2240] usb 1-1: config 0 descriptor?? [ 163.209188][ T5226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 163.234576][ T2240] hub 1-1:0.0: bad descriptor, ignoring hub [ 163.241442][ T5226] System zones: 0-5 [ 163.245762][ T2240] hub: probe of 1-1:0.0 failed with error -5 [ 163.258250][ T2240] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 163.269817][ T5226] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 164.282919][ T7] usb 1-1: USB disconnect, device number 9 [ 164.968603][ T5266] device syzkaller0 entered promiscuous mode [ 167.406050][ T5299] loop4: detected capacity change from 0 to 1024 [ 167.543154][ T5299] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 167.577500][ T5299] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.227452][ T5311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.206: bg 0: block 112: padding at end of block bitmap is not set [ 168.245224][ T5303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 168.848364][ T5311] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 168.860898][ T5311] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.860898][ T5311] [ 168.870612][ T5311] EXT4-fs (loop4): Total free blocks count 0 [ 168.876608][ T5311] EXT4-fs (loop4): Free/Dirty block details [ 168.882528][ T5311] EXT4-fs (loop4): free_blocks=0 [ 168.887491][ T5311] EXT4-fs (loop4): dirty_blocks=64 [ 168.892660][ T5311] EXT4-fs (loop4): Block reservation details [ 168.898802][ T5311] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 169.178133][ T4206] Bluetooth: hci4: link tx timeout [ 169.183414][ T4206] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 169.191593][ T4206] Bluetooth: hci4: link tx timeout [ 169.196749][ T4206] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.994940][ T4239] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 171.390238][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 171.409188][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.422717][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 171.595936][ T4239] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 171.616229][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.625048][ T4239] usb 5-1: Product: syz [ 171.629586][ T4239] usb 5-1: Manufacturer: syz [ 171.639464][ T4239] usb 5-1: SerialNumber: syz [ 171.651999][ T4239] usb 5-1: config 0 descriptor?? [ 171.697370][ T4239] hub 5-1:0.0: bad descriptor, ignoring hub [ 171.703352][ T4239] hub: probe of 5-1:0.0 failed with error -5 [ 171.723496][ T4239] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 176.512031][ T5441] device syzkaller0 entered promiscuous mode [ 177.357230][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.890941][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 178.051967][ T21] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 178.073715][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.399094][ T21] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 178.409807][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.418171][ T21] usb 6-1: Product: syz [ 178.422627][ T21] usb 6-1: Manufacturer: syz [ 178.427593][ T21] usb 6-1: SerialNumber: syz [ 178.441214][ T21] usb 6-1: config 0 descriptor?? [ 178.719149][ T5448] udc-core: couldn't find an available UDC or it's busy [ 178.734139][ T5448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.790412][ T21] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 178.929444][ T21] usb 6-1: USB disconnect, device number 2 [ 179.833801][ T5491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 181.318501][ T4239] usb 5-1: USB disconnect, device number 3 [ 181.603731][ T5504] device syzkaller0 entered promiscuous mode [ 181.691038][ T5511] futex_wake_op: syz.2.237 tries to shift op by 144; fix this program [ 189.176042][ T1324] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 189.508726][ T5570] device syzkaller0 entered promiscuous mode [ 190.649246][ T1324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 190.667685][ T1324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 191.786611][ T1324] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 191.807089][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.861279][ T1324] usb 6-1: Product: syz [ 191.872225][ T1324] usb 6-1: Manufacturer: syz [ 191.894120][ T1324] usb 6-1: SerialNumber: syz [ 192.033720][ T1324] usb 6-1: config 0 descriptor?? [ 192.915705][ T1324] usb 6-1: can't set config #0, error -71 [ 192.936250][ T1324] usb 6-1: USB disconnect, device number 3 [ 193.578005][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.259'. [ 193.899249][ T5606] loop5: detected capacity change from 0 to 4096 [ 193.980020][ T5615] device syzkaller0 entered promiscuous mode [ 194.014074][ T5606] EXT4-fs (loop5): inline encryption not supported [ 194.029172][ T5606] EXT4-fs (loop5): Test dummy encryption mode enabled [ 194.053459][ T5606] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 194.135154][ T5606] System zones: 0-5 [ 194.191390][ T5606] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 194.503968][ T5628] loop4: detected capacity change from 0 to 1024 [ 195.232035][ T5628] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 195.486950][ T5628] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.340176][ T5661] loop5: detected capacity change from 0 to 4096 [ 199.370466][ T5661] EXT4-fs (loop5): inline encryption not supported [ 199.412557][ T5661] EXT4-fs (loop5): Test dummy encryption mode enabled [ 199.435542][ T5661] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 199.450937][ T5661] System zones: 0-5 [ 199.463950][ T5661] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 199.563862][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 199.788016][ T5027] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.266999][ T5668] netlink: 32 bytes leftover after parsing attributes in process `syz.4.272'. [ 201.072489][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 201.121715][ T13] usb 3-1: can't read configurations, error -71 [ 201.479713][ T5674] device syzkaller0 entered promiscuous mode [ 201.486057][ T4239] Bluetooth: hci1: command 0x0406 tx timeout [ 201.516482][ T4239] Bluetooth: hci0: command 0x0406 tx timeout [ 201.546095][ T4239] Bluetooth: hci2: command 0x0406 tx timeout [ 201.578623][ T5027] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.686961][ T5027] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.695311][ T5027] usb 1-1: can't read configurations, error -71 [ 201.708391][ T5676] loop4: detected capacity change from 0 to 4096 [ 201.938861][ T5676] EXT4-fs (loop4): inline encryption not supported [ 203.141693][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.148061][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.325885][ T5676] EXT4-fs (loop4): Test dummy encryption mode enabled [ 203.382731][ T5676] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 203.622349][ T5676] System zones: 0-5 [ 204.530678][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 208.879376][ T1324] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 209.358959][ T5718] device syzkaller0 entered promiscuous mode [ 209.616021][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 209.680809][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 210.607346][ T1324] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 210.627525][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.662981][ T1324] usb 1-1: Product: syz [ 210.678431][ T1324] usb 1-1: Manufacturer: syz [ 210.692718][ T1324] usb 1-1: SerialNumber: syz [ 210.709111][ T1324] usb 1-1: config 0 descriptor?? [ 210.775543][ T1324] hub 1-1:0.0: bad descriptor, ignoring hub [ 210.781519][ T1324] hub: probe of 1-1:0.0 failed with error -5 [ 210.807406][ T1324] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 213.849775][ T5773] device syzkaller0 entered promiscuous mode [ 213.994161][ T5780] futex_wake_op: syz.5.301 tries to shift op by 144; fix this program [ 214.166057][ T5784] loop4: detected capacity change from 0 to 4096 [ 214.205628][ T5784] EXT4-fs (loop4): inline encryption not supported [ 214.225310][ T5784] EXT4-fs (loop4): Test dummy encryption mode enabled [ 214.271963][ T5784] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 214.329170][ T5784] System zones: 0-5 [ 214.335704][ T5784] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 216.107377][ T4274] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 217.225324][ T4274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 217.247525][ T4274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.566540][ T4274] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 217.585177][ T4274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.865274][ T4274] usb 6-1: Product: syz [ 217.890298][ T4274] usb 6-1: Manufacturer: syz [ 217.903176][ T4274] usb 6-1: SerialNumber: syz [ 217.927404][ T4274] usb 6-1: config 0 descriptor?? [ 217.978864][ T4274] hub 6-1:0.0: bad descriptor, ignoring hub [ 217.993942][ T4274] hub: probe of 6-1:0.0 failed with error -5 [ 218.018361][ T4274] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 220.504166][ T5845] futex_wake_op: syz.0.317 tries to shift op by 144; fix this program [ 220.664575][ T4274] usb 6-1: USB disconnect, device number 4 [ 220.699959][ T13] usb 1-1: USB disconnect, device number 12 [ 221.760402][ T5860] gfs2: path_lookup on syz4 returned error -2 [ 222.155666][ T5863] device syzkaller0 entered promiscuous mode [ 225.447511][ T5891] futex_wake_op: syz.1.332 tries to shift op by 144; fix this program [ 225.636431][ T4994] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 226.528707][ T4994] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 226.549709][ T4994] usb 1-1: can't read configurations, error -71 [ 228.525869][ T5926] device syzkaller0 entered promiscuous mode [ 229.427452][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.109956][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.130696][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 230.157965][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 230.170439][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 230.179890][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.198856][ T7] usb 2-1: config 0 descriptor?? [ 230.532408][ T7] ath6kl: Failed to submit usb control message: -71 [ 230.541307][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 230.548875][ T7] ath6kl: Unable to send get target info: -71 [ 230.561596][ T7] ath6kl: Failed to init ath6kl core: -71 [ 230.580547][ T7] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 230.610700][ T7] usb 2-1: USB disconnect, device number 6 [ 231.998331][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 233.738464][ T4239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 234.415835][ T6011] device syzkaller0 entered promiscuous mode [ 234.578135][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.604929][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 234.628809][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 234.647489][ T4239] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 234.676508][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.701330][ T4239] usb 5-1: config 0 descriptor?? [ 234.984125][ T4239] ath6kl: Failed to submit usb control message: -71 [ 234.991000][ T4239] ath6kl: unable to send the bmi data to the device: -71 [ 234.998983][ T4239] ath6kl: Unable to send get target info: -71 [ 235.006321][ T4239] ath6kl: Failed to init ath6kl core: -71 [ 235.038900][ T4239] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 235.060644][ T4239] usb 5-1: USB disconnect, device number 4 [ 237.941719][ T6059] device syzkaller0 entered promiscuous mode [ 238.585719][ T4193] Bluetooth: hci4: link tx timeout [ 238.592577][ T4193] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 238.600824][ T4193] Bluetooth: hci4: link tx timeout [ 238.606704][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.776605][ T4239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 248.243570][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.591396][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 248.668070][ T6115] netlink: 240 bytes leftover after parsing attributes in process `syz.0.392'. [ 248.695243][ T6117] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 248.702969][ T6117] ALSA: mixer_oss: invalid index 1374389 [ 248.717708][ T6117] ALSA: mixer_oss: invalid OSS volume '",aOTPqk+a1oOFb' [ 249.299502][ T6118] netlink: 608 bytes leftover after parsing attributes in process `syz.0.392'. [ 249.777973][ T4239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 249.789447][ T4239] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 249.799395][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.817396][ T4239] usb 6-1: config 0 descriptor?? [ 251.177334][ T4237] Bluetooth: hci5: command 0x0406 tx timeout [ 251.243053][ T4239] usb 6-1: can't set config #0, error -71 [ 251.259689][ T4239] usb 6-1: USB disconnect, device number 5 [ 254.780986][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.397'. [ 254.796785][ T6137] device macvtap1 entered promiscuous mode [ 258.948030][ T6179] futex_wake_op: syz.0.405 tries to shift op by 144; fix this program [ 259.355856][ T4237] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.768824][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 260.883524][ T4237] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.908003][ T4237] usb 5-1: config 0 has no interface number 0 [ 260.992239][ T6198] device syzkaller0 entered promiscuous mode [ 261.110781][ T4237] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 261.143110][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.153620][ T4237] usb 5-1: Product: syz [ 261.173091][ T4237] usb 5-1: Manufacturer: syz [ 261.184004][ T4237] usb 5-1: SerialNumber: syz [ 261.207423][ T4237] usb 5-1: config 0 descriptor?? [ 261.264214][ T4237] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 261.442782][ T4237] usb 5-1: selecting invalid altsetting 1 [ 261.448978][ T4237] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 261.508770][ T4237] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.519495][ T4237] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 261.541495][ T4237] usb 5-1: media controller created [ 261.573407][ T4237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.517976][ T6222] futex_wake_op: syz.1.419 tries to shift op by 144; fix this program [ 263.877753][ T6178] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 263.992402][ T4237] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 264.008310][ T4237] zl10353_read_register: readreg error (reg=127, ret==-71) [ 264.058311][ T4237] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 264.112505][ T1324] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 264.201829][ T4237] usb 5-1: USB disconnect, device number 5 [ 264.397100][ T6231] overlayfs: failed to resolve './file0': -2 [ 265.226744][ T1324] usb 1-1: Using ep0 maxpacket: 32 [ 265.356993][ T1324] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 265.375602][ T6237] device syzkaller0 entered promiscuous mode [ 265.660555][ T1324] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.669835][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.703350][ T1324] usb 1-1: Product: syz [ 265.707694][ T1324] usb 1-1: Manufacturer: syz [ 265.713050][ T1324] usb 1-1: SerialNumber: syz [ 265.756067][ T1324] usb 1-1: config 0 descriptor?? [ 266.299419][ T1324] usb 1-1: can't set config #0, error -71 [ 266.450872][ T1324] usb 1-1: USB disconnect, device number 15 [ 266.481173][ T6253] futex_wake_op: syz.2.430 tries to shift op by 144; fix this program [ 267.405714][ T6268] overlayfs: failed to resolve './file0': -2 [ 268.641391][ T6283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.683174][ T6281] device syzkaller0 entered promiscuous mode [ 269.681240][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.687803][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.098517][ T6300] futex_wake_op: syz.1.443 tries to shift op by 144; fix this program [ 271.630916][ T6315] overlayfs: failed to resolve './file0': -2 [ 273.780841][ T6329] device syzkaller0 entered promiscuous mode [ 274.884297][ T6334] syz.0.454 (6334): drop_caches: 2 [ 275.421535][ T6344] overlayfs: failed to resolve './file0': -2 [ 277.983130][ T6360] overlayfs: failed to resolve './file0': -2 [ 284.750851][ T6394] overlayfs: failed to resolve './file0': -2 [ 288.927177][ T6414] overlayfs: failed to resolve './file0': -2 [ 289.127935][ T6417] device syzkaller0 entered promiscuous mode [ 293.842857][ T6445] overlayfs: failed to resolve './file0': -2 [ 297.374563][ T6460] overlayfs: failed to resolve './file0': -2 [ 299.655579][ T6481] device syzkaller0 entered promiscuous mode [ 301.946189][ T6489] overlayfs: failed to resolve './file0': -2 [ 304.134594][ T6519] input: syz1 as /devices/virtual/input/input12 [ 304.161028][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'. [ 306.352604][ T6531] overlayfs: failed to resolve './file0': -2 [ 309.020487][ T4193] Bluetooth: hci4: link tx timeout [ 309.026415][ T4193] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 309.034442][ T4193] Bluetooth: hci4: link tx timeout [ 309.039747][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 312.596327][ T6585] overlayfs: failed to resolve './file0': -2 [ 312.732507][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 316.221047][ T6626] overlayfs: failed to resolve './file1': -2 [ 318.125023][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 318.251642][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'. [ 321.219690][ T6668] overlayfs: failed to resolve './file1': -2 [ 324.227992][ T2240] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 324.542117][ T23] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 324.693981][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 324.725353][ T2240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 324.989977][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'. [ 325.032907][ T23] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 325.049138][ T23] usb 5-1: config 1 has no interface number 0 [ 325.075116][ T23] usb 5-1: config 1 interface 82 has no altsetting 0 [ 325.087767][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 325.097820][ T2240] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 325.116580][ T2240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.133830][ T2240] usb 1-1: Product: syz [ 325.148342][ T2240] usb 1-1: Manufacturer: syz [ 325.159627][ T2240] usb 1-1: SerialNumber: syz [ 325.176096][ T2240] usb 1-1: config 0 descriptor?? [ 325.248970][ T2240] hub 1-1:0.0: bad descriptor, ignoring hub [ 325.253400][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 325.258846][ T2240] hub: probe of 1-1:0.0 failed with error -5 [ 325.273814][ T2240] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 325.287912][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.479308][ T23] usb 5-1: Product: syz [ 325.489422][ T23] usb 5-1: Manufacturer: syz [ 325.504526][ T23] usb 5-1: SerialNumber: syz [ 326.622127][ T4239] usb 1-1: USB disconnect, device number 16 [ 327.409420][ T23] hub 5-1:1.82: bad descriptor, ignoring hub [ 327.415929][ T23] hub: probe of 5-1:1.82 failed with error -5 [ 327.423111][ T23] sierra 5-1:1.82: Sierra USB modem converter detected [ 327.484386][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 328.586979][ T6714] No such timeout policy "syz0" [ 330.164779][ T23] usb 5-1: USB disconnect, device number 6 [ 330.181306][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 330.206118][ T23] sierra 5-1:1.82: device disconnected [ 330.260834][ T6726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.550'. [ 330.360016][ T6726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 330.379931][ T6726] VFS: Can't find a romfs filesystem on dev nullb0. [ 330.379931][ T6726] [ 331.875473][ T6734] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 333.684442][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 335.004187][ T4251] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 335.395931][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 336.846820][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.853234][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.868818][ T23] usb 5-1: device descriptor read/all, error -71 [ 337.020601][ T4251] usb 3-1: device descriptor read/all, error -71 [ 339.165981][ T6786] bridge0: port 3(syz_tun) entered blocking state [ 339.173008][ T6786] bridge0: port 3(syz_tun) entered disabled state [ 339.188605][ T6786] device syz_tun entered promiscuous mode [ 339.196949][ T6786] bridge0: port 3(syz_tun) entered blocking state [ 339.203770][ T6786] bridge0: port 3(syz_tun) entered forwarding state [ 340.355486][ T4239] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 343.422371][ T4239] usb 1-1: unable to get BOS descriptor or descriptor too short [ 343.488297][ T4239] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 343.592806][ T4239] usb 1-1: can't read configurations, error -71 [ 345.580728][ T6826] autofs4:pid:6826:autofs_fill_super: called with bogus options [ 346.757873][ T6839] comedi comedi1: das16m1: I/O port conflict (0x8f,16) [ 348.119935][ T5027] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 349.423053][ T5027] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.498841][ T5027] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 349.506493][ T5027] usb 3-1: can't read configurations, error -71 [ 351.114722][ T6866] xt_l2tp: unknown flags: 17 [ 351.121137][ T6866] tmpfs: Unknown parameter 'quota' [ 355.831117][ T4282] Bluetooth: hci5: command 0x0405 tx timeout [ 357.448945][ T6916] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 357.530021][ T6921] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 357.617551][ T6926] bridge0: port 3(syz_tun) entered blocking state [ 357.624086][ T6926] bridge0: port 3(syz_tun) entered disabled state [ 357.631659][ T6926] device syz_tun entered promiscuous mode [ 357.637970][ T6926] bridge0: port 3(syz_tun) entered blocking state [ 357.644503][ T6926] bridge0: port 3(syz_tun) entered forwarding state [ 358.613668][ T6931] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 359.317490][ T4282] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 360.536594][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 360.560143][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 360.872352][ T4282] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 361.990044][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.998135][ T4282] usb 1-1: Product: syz [ 362.263410][ T4282] usb 1-1: Manufacturer: syz [ 362.271009][ T4282] usb 1-1: SerialNumber: syz [ 362.278606][ T4282] usb 1-1: config 0 descriptor?? [ 362.334858][ T4282] usb 1-1: can't set config #0, error -71 [ 362.486187][ T4282] usb 1-1: USB disconnect, device number 19 [ 362.662870][ T6968] bridge0: port 3(syz_tun) entered blocking state [ 362.669599][ T6968] bridge0: port 3(syz_tun) entered disabled state [ 362.685496][ T6968] device syz_tun entered promiscuous mode [ 362.693404][ T6968] bridge0: port 3(syz_tun) entered blocking state [ 362.699898][ T6968] bridge0: port 3(syz_tun) entered forwarding state [ 365.023472][ T6979] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 365.387521][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 366.418288][ T21] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 248, changing to 11 [ 367.323485][ T21] usb 2-1: config 1 interface 0 has no altsetting 0 [ 367.482024][ T21] usb 2-1: string descriptor 0 read error: -71 [ 367.521108][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 367.535867][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.577567][ T21] usb 2-1: can't set config #1, error -71 [ 367.609904][ T21] usb 2-1: USB disconnect, device number 7 [ 370.346998][ T4238] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 370.400341][ T7035] xt_l2tp: unknown flags: 17 [ 370.412628][ T7037] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 370.664251][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 372.029294][ T4238] usb 1-1: device descriptor read/all, error -71 [ 374.051455][ T7072] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 374.060509][ T7072] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 374.072357][ T7072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.029377][ T7105] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 378.500201][ T4193] Bluetooth: hci4: link tx timeout [ 378.505457][ T4193] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 378.513408][ T4193] Bluetooth: hci4: link tx timeout [ 378.518700][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.478381][ T7156] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 386.014971][ T7175] bridge0: port 3(syz_tun) entered blocking state [ 386.021765][ T7175] bridge0: port 3(syz_tun) entered disabled state [ 386.035316][ T7175] device syz_tun entered promiscuous mode [ 386.042807][ T7175] bridge0: port 3(syz_tun) entered blocking state [ 386.049334][ T7175] bridge0: port 3(syz_tun) entered forwarding state [ 387.301858][ T26] audit: type=1326 audit(1778952103.074:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 387.356157][ T26] audit: type=1326 audit(1778952103.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 387.398404][ T26] audit: type=1326 audit(1778952103.074:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 388.342097][ T26] audit: type=1326 audit(1778952103.083:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 388.370120][ T26] audit: type=1326 audit(1778952103.083:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 388.733316][ T26] audit: type=1326 audit(1778952103.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 388.811151][ T7190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.917389][ T26] audit: type=1326 audit(1778952103.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 389.018330][ T7194] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 389.130504][ T26] audit: type=1326 audit(1778952103.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 389.518403][ T26] audit: type=1326 audit(1778952103.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 389.603721][ T26] audit: type=1326 audit(1778952103.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.689" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5627bfe59 code=0x7ffc0000 [ 392.460489][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 393.972197][ T7248] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 396.557008][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'. [ 397.848719][ T7288] overlayfs: failed to resolve './file0': -2 [ 399.451287][ T4239] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 400.822163][ T4239] usb 6-1: string descriptor 0 read error: -71 [ 400.828468][ T4239] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 401.227052][ T4239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.393760][ T4239] usb 6-1: config 0 descriptor?? [ 401.426970][ T4239] usb 6-1: can't set config #0, error -71 [ 401.524219][ T4239] usb 6-1: USB disconnect, device number 6 [ 402.785629][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.785700][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.138178][ T1108] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 404.568270][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 404.585247][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 404.669880][ T7330] overlayfs: failed to resolve './file0': -2 [ 405.380763][ T1108] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 405.390065][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.270131][ T1108] usb 6-1: Product: syz [ 406.296190][ T1108] usb 6-1: Manufacturer: syz [ 406.320876][ T1108] usb 6-1: SerialNumber: syz [ 406.855637][ T1108] usb 6-1: config 0 descriptor?? [ 406.876046][ T1108] usb 6-1: can't set config #0, error -71 [ 406.905880][ T1108] usb 6-1: USB disconnect, device number 7 [ 407.842996][ T4282] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 410.915603][ T4282] usb 6-1: device descriptor read/all, error -71 [ 411.174882][ T7386] futex_wake_op: syz.1.750 tries to shift op by 144; fix this program [ 413.501107][ T7399] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.508660][ T7399] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.841229][ T7405] device macvlan2 entered promiscuous mode [ 413.848143][ T7405] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 416.588214][ T7433] overlayfs: failed to resolve './file1': -2 [ 420.727249][ T7465] futex_wake_op: syz.0.768 tries to shift op by 144; fix this program [ 428.980127][ T7517] overlayfs: failed to resolve './file1': -2 [ 430.581710][ T7530] futex_wake_op: syz.0.784 tries to shift op by 144; fix this program [ 431.398651][ T2240] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 431.919093][ T2240] usb 6-1: unable to get BOS descriptor or descriptor too short [ 432.263426][ T2240] usb 6-1: not running at top speed; connect to a high speed hub [ 433.814297][ T2240] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 433.835422][ T2240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.868379][ T2240] usb 6-1: Product: syz [ 433.882332][ T2240] usb 6-1: Manufacturer: syz [ 434.951546][ T2240] usb 6-1: can't set config #61, error -71 [ 435.328463][ T2240] usb 6-1: USB disconnect, device number 10 [ 435.949864][ T7576] overlayfs: missing 'lowerdir' [ 436.197089][ T2240] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 436.912089][ T2240] usb 6-1: Using ep0 maxpacket: 16 [ 437.086239][ T2240] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 437.620232][ T2240] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 438.361749][ T7611] syz.2.806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 438.450238][ T2240] usb 6-1: string descriptor 0 read error: -71 [ 438.456548][ T2240] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 439.551861][ T2240] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 439.609277][ T2240] usb 6-1: can't set config #254, error -71 [ 439.618145][ T2240] usb 6-1: USB disconnect, device number 11 [ 446.775676][ T4193] Bluetooth: hci4: link tx timeout [ 446.780924][ T4193] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 446.788942][ T4193] Bluetooth: hci4: link tx timeout [ 446.794307][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.960814][ T1324] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 449.501422][ T1324] usb 5-1: Using ep0 maxpacket: 16 [ 449.882875][ T1324] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 449.892068][ T1324] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 449.900638][ T1324] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 449.908965][ T1324] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 449.917544][ T1324] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 449.944038][ T1324] usb 5-1: config 0 has no interface number 0 [ 450.016583][ T1324] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 450.029642][ T1324] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 450.039544][ T1324] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.052127][ T1324] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.191923][ T1324] usb 5-1: config 0 interface 125 has no altsetting 0 [ 450.208160][ T1324] usb 5-1: config 0 interface 125 has no altsetting 2 [ 451.199357][ T1324] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 451.230755][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.309948][ T1324] usb 5-1: Product: syz [ 451.314271][ T1324] usb 5-1: Manufacturer: syz [ 451.368406][ T1324] usb 5-1: config 0 descriptor?? [ 451.407421][ T1324] usb 5-1: can't set config #0, error -71 [ 451.429820][ T1324] usb 5-1: USB disconnect, device number 9 [ 452.318466][ T7712] futex_wake_op: syz.2.833 tries to shift op by 144; fix this program [ 455.459442][ T7729] overlayfs: missing 'lowerdir' [ 460.482420][ T4239] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 461.398229][ T7768] futex_wake_op: syz.1.845 tries to shift op by 144; fix this program [ 462.812497][ T4239] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 462.821648][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.865244][ T4239] usb 1-1: Product: syz [ 462.886907][ T4239] usb 1-1: Manufacturer: syz [ 462.891582][ T4239] usb 1-1: SerialNumber: syz [ 462.930907][ T4239] usb 1-1: config 0 descriptor?? [ 462.997604][ T4239] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 463.580247][ T4239] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 463.588663][ T4239] sq905c 1-1:0.0: Reading version command failed [ 463.599895][ T4239] sq905c: probe of 1-1:0.0 failed with error -71 [ 463.608514][ T4239] usb 1-1: USB disconnect, device number 22 [ 463.634363][ T4994] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 463.718614][ T7781] overlayfs: missing 'lowerdir' [ 463.905182][ T4994] usb 2-1: Using ep0 maxpacket: 8 [ 464.101221][ T4994] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.111128][ T4994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.120916][ T4994] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.131462][ T4994] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.145089][ T4994] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.154621][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.499704][ T4994] usb 2-1: GET_CAPABILITIES returned 0 [ 465.360718][ T7794] vivid-004: ================= START STATUS ================= [ 465.369213][ T7794] vivid-004: Radio HW Seek Mode: Bounded [ 465.376458][ T7794] vivid-004: Radio Programmable HW Seek: false [ 465.382883][ T7794] vivid-004: RDS Rx I/O Mode: Block I/O [ 465.388653][ T7794] vivid-004: Generate RBDS Instead of RDS: false [ 465.395259][ T7794] vivid-004: RDS Reception: true [ 465.400666][ T7794] vivid-004: RDS Program Type: 0 inactive [ 465.406625][ T7794] vivid-004: RDS PS Name: inactive [ 465.412030][ T7794] vivid-004: RDS Radio Text: inactive [ 465.418035][ T7794] vivid-004: RDS Traffic Announcement: false inactive [ 465.425548][ T7794] vivid-004: RDS Traffic Program: false inactive [ 465.432345][ T7794] vivid-004: RDS Music: false inactive [ 465.438056][ T7794] vivid-004: ================== END STATUS ================== [ 465.693800][ T4994] usbtmc 2-1:16.0: can't read capabilities [ 465.715743][ T4994] usb 2-1: USB disconnect, device number 8 [ 468.878433][ T7820] comedi comedi2: pcl730: I/O port conflict (0x100,4) [ 469.249802][ T7824] netlink: 240 bytes leftover after parsing attributes in process `syz.0.863'. [ 469.334816][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.341519][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.454815][ T7827] netlink: 608 bytes leftover after parsing attributes in process `syz.0.863'. [ 474.338589][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.876'. [ 474.615430][ T7880] overlayfs: missing 'lowerdir' [ 476.047203][ T7900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.884'. [ 484.103836][ T7946] sd 0:0:1:0: device reset [ 486.737743][ T7950] xt_time: unknown flags 0xc [ 492.973767][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 492.986461][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 493.130171][ T8000] bridge0: port 3(syz_tun) entered blocking state [ 493.136833][ T8000] bridge0: port 3(syz_tun) entered disabled state [ 493.150064][ T8000] device syz_tun entered promiscuous mode [ 493.158093][ T8000] bridge0: port 3(syz_tun) entered blocking state [ 493.164616][ T8000] bridge0: port 3(syz_tun) entered forwarding state [ 494.180057][ T8012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 494.189079][ T8012] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 496.720655][ T8037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 496.729872][ T8037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 497.667691][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.921'. [ 497.712597][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.921'. [ 501.406220][ T8057] sctp: failed to load transform for md5: -2 [ 503.920203][ T8085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.929505][ T8085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.357855][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 505.577030][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 513.078569][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 513.263857][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 515.292694][ T4193] Bluetooth: hci4: link tx timeout [ 515.297926][ T4193] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 515.305647][ T4193] Bluetooth: hci4: link tx timeout [ 515.310780][ T4193] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 518.527153][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 521.719881][ T8214] IPVS: Scheduler module ip_vs_sip not found [ 525.095906][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 525.127525][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 528.344014][ T4237] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 528.701502][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 528.746781][ T8296] netlink: 608 bytes leftover after parsing attributes in process `syz.4.984'. [ 529.719857][ T4237] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 529.741902][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.773960][ T4237] usb 3-1: config 0 descriptor?? [ 530.977408][ T4238] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 531.712933][ T4238] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.211145][ T4238] usb 6-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 532.221528][ T4238] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.611928][ T4238] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 532.622177][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.654137][ T4238] usb 6-1: Product: syz [ 532.668474][ T4238] usb 6-1: Manufacturer: syz [ 532.676256][ T4238] usb 6-1: SerialNumber: syz [ 532.709390][ T4237] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 532.754294][ T4237] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 534.132889][ T4237] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 534.413215][ T4238] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 534.508140][ T4238] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 534.840769][ T4238] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 534.902464][ T4238] usb 6-1: USB disconnect, device number 12 [ 535.513415][ T8336] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 535.725150][ T8339] udevd[8339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.885685][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 535.892257][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.088987][ T4251] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 536.359575][ T4251] usb 6-1: Using ep0 maxpacket: 16 [ 536.490185][ T4251] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.518805][ T4251] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.540128][ T4251] usb 6-1: config 0 interface 0 has no altsetting 0 [ 536.547158][ T4251] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 536.636177][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.665847][ T4251] usb 6-1: config 0 descriptor?? [ 537.624049][ T4251] usbhid 6-1:0.0: can't add hid device: -71 [ 537.631072][ T4251] usbhid: probe of 6-1:0.0 failed with error -71 [ 537.652147][ T4251] usb 6-1: USB disconnect, device number 13 [ 540.214678][ T8371] sctp: failed to load transform for md5: -2 [ 546.055835][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 546.067000][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 546.074611][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.085059][ T4193] Workqueue: hci2 hci_rx_work [ 546.089800][ T4193] Call Trace: [ 546.093115][ T4193] [ 546.096074][ T4193] dump_stack_lvl+0x188/0x250 [ 546.100793][ T4193] ? show_regs_print_info+0x20/0x20 [ 546.106041][ T4193] ? load_image+0x400/0x400 [ 546.110600][ T4193] sysfs_create_dir_ns+0x26a/0x290 [ 546.115761][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 546.120475][ T4193] ? process_one_work+0x85f/0x1010 [ 546.125647][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 546.130985][ T4193] kobject_add_internal+0x6e0/0xd90 [ 546.136236][ T4193] kobject_add+0x160/0x230 [ 546.140702][ T4193] ? kobject_init+0x1d0/0x1d0 [ 546.145437][ T4193] ? klist_children_get+0x50/0x50 [ 546.150496][ T4193] ? get_device_parent+0x121/0x3f0 [ 546.155642][ T4193] device_add+0x483/0xfb0 [ 546.160017][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 546.164998][ T4193] le_conn_complete_evt+0xc48/0x15c0 [ 546.170335][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 546.175492][ T4193] ? __mutex_trylock_common+0x155/0x260 [ 546.181079][ T4193] hci_le_meta_evt+0x285/0x3c90 [ 546.185984][ T4193] ? hci_event_packet+0x37b/0x1370 [ 546.191220][ T4193] ? __lock_acquire+0x7d10/0x7d10 [ 546.196290][ T4193] ? hci_remote_host_features_evt+0x280/0x280 [ 546.202401][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 546.208072][ T4193] ? mark_lock+0x94/0x320 [ 546.212409][ T4193] ? mutex_unlock+0x10/0x10 [ 546.216916][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 546.222908][ T4193] ? lock_chain_count+0x20/0x20 [ 546.227766][ T4193] ? __rwlock_init+0x140/0x140 [ 546.232532][ T4193] hci_event_packet+0xe48/0x1370 [ 546.237523][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 546.242751][ T4193] ? rcu_lock_release+0x20/0x20 [ 546.247621][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 546.252839][ T4193] hci_rx_work+0x255/0xa10 [ 546.257290][ T4193] process_one_work+0x85f/0x1010 [ 546.262248][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 546.267913][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 546.273223][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 546.278261][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 546.283814][ T4193] ? wq_worker_running+0x97/0x170 [ 546.288846][ T4193] worker_thread+0xaa6/0x1290 [ 546.293565][ T4193] kthread+0x436/0x520 [ 546.297694][ T4193] ? rcu_lock_release+0x20/0x20 [ 546.302593][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 546.307208][ T4193] ret_from_fork+0x1f/0x30 [ 546.311634][ T4193] [ 546.320543][ T4193] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 546.333817][ T4193] Bluetooth: hci2: failed to register connection device [ 548.470641][ T8434] netlink: 608 bytes leftover after parsing attributes in process `syz.5.1022'. [ 552.553665][ T8447] xt_bpf: check failed: parse error [ 552.571078][ T8447] xt_connbytes: Forcing CT accounting to be enabled [ 552.577923][ T8447] Cannot find set identified by id 0 to match [ 556.660015][ T8479] netlink: 608 bytes leftover after parsing attributes in process `syz.4.1037'. [ 563.370904][ T8530] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1050'. [ 566.451551][ T8550] futex_wake_op: syz.1.1054 tries to shift op by 144; fix this program [ 567.929692][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 568.216287][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 568.963950][ T1108] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 568.985303][ T1108] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 569.202485][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 569.213710][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 569.237539][ T1108] usb 5-1: Product: syz [ 569.429758][ T1108] usb 5-1: Manufacturer: syz [ 569.434424][ T1108] usb 5-1: SerialNumber: syz [ 571.860929][ T1108] usb 5-1: USB disconnect, device number 10 [ 572.165773][ T8587] netlink: 608 bytes leftover after parsing attributes in process `syz.0.1064'. [ 574.165358][ T8601] futex_wake_op: syz.0.1069 tries to shift op by 144; fix this program [ 579.684061][ T8637] netlink: 608 bytes leftover after parsing attributes in process `syz.4.1079'. [ 583.448047][ T8656] futex_wake_op: syz.4.1083 tries to shift op by 144; fix this program [ 584.295407][ T8420] Bluetooth: hci4: link tx timeout [ 584.300599][ T8420] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 584.311631][ T8420] Bluetooth: hci4: link tx timeout [ 584.316794][ T8420] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 592.278066][ T8703] futex_wake_op: syz.0.1095 tries to shift op by 144; fix this program [ 593.351194][ T8705] netlink: 608 bytes leftover after parsing attributes in process `syz.5.1094'. [ 599.195216][ T8755] futex_wake_op: syz.5.1108 tries to shift op by 144; fix this program [ 601.762561][ T8764] xt_time: unknown flags 0xc [ 602.456086][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 602.462466][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 602.470763][ T4237] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 602.488006][ T4237] dvb_usb_az6027: probe of 3-1:0.0 failed with error -110 [ 602.497962][ T4237] usb 3-1: USB disconnect, device number 8 [ 603.413312][ T8770] netlink: 608 bytes leftover after parsing attributes in process `syz.0.1114'. [ 607.986453][ T8807] futex_wake_op: syz.4.1121 tries to shift op by 144; fix this program [ 614.520933][ T8840] xt_time: unknown flags 0xc [ 615.601477][ T8861] vivid-004: ================= START STATUS ================= [ 615.601623][ T8861] vivid-004: Radio HW Seek Mode: Bounded [ 615.601814][ T8861] vivid-004: Radio Programmable HW Seek: false [ 615.601919][ T8861] vivid-004: RDS Rx I/O Mode: Block I/O [ 615.601990][ T8861] vivid-004: Generate RBDS Instead of RDS: false [ 615.602060][ T8861] vivid-004: RDS Reception: true [ 615.602126][ T8861] vivid-004: RDS Program Type: 0 inactive [ 615.602289][ T8861] vivid-004: RDS PS Name: inactive [ 615.602403][ T8861] vivid-004: RDS Radio Text: inactive [ 615.602577][ T8861] vivid-004: RDS Traffic Announcement: false inactive [ 615.602690][ T8861] vivid-004: RDS Traffic Program: false inactive [ 615.602802][ T8861] vivid-004: RDS Music: false inactive [ 615.602914][ T8861] vivid-004: ================== END STATUS ================== [ 619.673548][ T8892] xt_time: unknown flags 0xc [ 619.961337][ T8898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1149'. [ 620.870988][ T8898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1149'. [ 621.875765][ T8909] vivid-002: ================= START STATUS ================= [ 621.883732][ T8909] vivid-002: Radio HW Seek Mode: Bounded [ 621.890019][ T8909] vivid-002: Radio Programmable HW Seek: false [ 621.896576][ T8909] vivid-002: RDS Rx I/O Mode: Block I/O [ 621.903140][ T8909] vivid-002: Generate RBDS Instead of RDS: false [ 621.909898][ T8909] vivid-002: RDS Reception: true [ 621.915065][ T8909] vivid-002: RDS Program Type: 0 inactive [ 621.921136][ T8909] vivid-002: RDS PS Name: inactive [ 621.926670][ T8909] vivid-002: RDS Radio Text: inactive [ 621.932838][ T8909] vivid-002: RDS Traffic Announcement: false inactive [ 621.940314][ T8909] vivid-002: RDS Traffic Program: false inactive [ 621.947259][ T8909] vivid-002: RDS Music: false inactive [ 622.125200][ T8909] vivid-002: ================== END STATUS ================== [ 622.613926][ T4235] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 623.632196][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 623.762795][ T4235] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 624.336927][ T4235] usb 1-1: config 0 has no interface number 0 [ 624.362236][ T4235] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 624.384692][ T4235] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 624.421688][ T4235] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.661200][ T4235] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 624.693164][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.725428][ T4235] usb 1-1: Product: syz [ 624.733307][ T4235] usb 1-1: Manufacturer: syz [ 624.743723][ T8938] xt_time: unknown flags 0xc [ 624.751772][ T4235] usb 1-1: SerialNumber: syz [ 624.774178][ T4235] usb 1-1: config 0 descriptor?? [ 624.817098][ T8916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 624.837887][ T4235] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input14 [ 625.457512][ T8426] usb 1-1: USB disconnect, device number 23 [ 626.873786][ T8953] vivid-002: ================= START STATUS ================= [ 626.881905][ T8953] vivid-002: Radio HW Seek Mode: Bounded [ 626.887841][ T8953] vivid-002: Radio Programmable HW Seek: false [ 626.894800][ T8953] vivid-002: RDS Rx I/O Mode: Block I/O [ 626.900651][ T8953] vivid-002: Generate RBDS Instead of RDS: false [ 626.907322][ T8953] vivid-002: RDS Reception: true [ 626.912522][ T8953] vivid-002: RDS Program Type: 0 inactive [ 626.919137][ T8953] vivid-002: RDS PS Name: inactive [ 626.924557][ T8953] vivid-002: RDS Radio Text: inactive [ 626.931263][ T8953] vivid-002: RDS Traffic Announcement: false inactive [ 626.938505][ T8953] vivid-002: RDS Traffic Program: false inactive [ 626.945328][ T8953] vivid-002: RDS Music: false inactive [ 626.951271][ T8953] vivid-002: ================== END STATUS ================== [ 627.097798][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1166'. [ 627.170177][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1166'. [ 628.794270][ T8977] xt_time: unknown flags 0xc [ 630.241302][ T8974] syz.5.1169 (8974) used greatest stack depth: 16752 bytes left [ 631.519376][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1181'. [ 631.583649][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1181'. [ 634.912269][ T4237] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 635.233192][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 635.366336][ T4237] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 635.865372][ T4237] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 636.056560][ T4237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 636.172254][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 636.181316][ T4237] usb 1-1: Product: syz [ 636.185517][ T4237] usb 1-1: Manufacturer: syz [ 636.190523][ T4237] usb 1-1: SerialNumber: syz [ 637.877309][ T9048] xt_time: unknown flags 0xc [ 642.068831][ T6535] usb 1-1: USB disconnect, device number 24 [ 642.495811][ T9078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 642.518316][ T9078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 646.120572][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1215'. [ 646.185928][ T9107] device syzkaller0 entered promiscuous mode [ 646.212267][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1215'. [ 647.256443][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1217'. [ 647.505838][ T6535] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 649.099676][ T9134] tipc: Started in network mode [ 649.105251][ T9134] tipc: Node identity b2e1b3241f3f, cluster identity 4711 [ 649.113048][ T9134] tipc: Enabled bearer , priority 0 [ 649.124149][ T9134] netlink: 'syz.0.1221': attribute type 33 has an invalid length. [ 649.132357][ T9134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1221'. [ 649.161615][ T9134] tipc: Disabling bearer [ 649.179389][ T6535] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 649.198647][ T6535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 649.390978][ T6535] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 649.400885][ T6535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.409788][ T6535] usb 3-1: Product: syz [ 649.414797][ T6535] usb 3-1: Manufacturer: syz [ 649.419817][ T6535] usb 3-1: SerialNumber: syz [ 649.477140][ T6535] usb 3-1: config 0 descriptor?? [ 649.622538][ T9140] xt_time: unknown flags 0xc [ 649.899561][ T6535] usb 3-1: can't set config #0, error -71 [ 649.913828][ T6535] usb 3-1: USB disconnect, device number 9 [ 650.213589][ T4279] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 653.814735][ T8420] Bluetooth: hci4: link tx timeout [ 653.819957][ T8420] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 653.828023][ T8420] Bluetooth: hci4: link tx timeout [ 653.833203][ T8420] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.301890][ T9180] tmpfs: Bad value for 'mpol' [ 657.146931][ T9179] netlink: 'syz.5.1232': attribute type 2 has an invalid length. [ 657.631006][ T9181] netlink: 'syz.5.1232': attribute type 2 has an invalid length. [ 658.287110][ T9191] futex_wake_op: syz.4.1235 tries to shift op by 144; fix this program [ 659.843110][ T4279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 659.908167][ T4279] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 659.932384][ T4279] usb 1-1: chopping to 0 config(s) [ 659.937655][ T4279] usb 1-1: can't read configurations, error -32 [ 660.863734][ T4279] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 660.913769][ T9206] xt_time: unknown flags 0xc [ 661.641300][ T4279] usb 1-1: device descriptor read/64, error -32 [ 662.480145][ T4279] usb usb1-port1: attempt power cycle [ 664.425266][ T9235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1245'. [ 669.630927][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 669.642057][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 670.414925][ T6535] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 672.018332][ T6535] usb 5-1: device descriptor read/all, error -61 [ 672.091812][ T9285] vivid-000: ================= START STATUS ================= [ 672.099684][ T9285] vivid-000: Radio HW Seek Mode: Bounded [ 672.105646][ T9285] vivid-000: Radio Programmable HW Seek: false [ 672.111976][ T9285] vivid-000: RDS Rx I/O Mode: Block I/O [ 672.117810][ T9285] vivid-000: Generate RBDS Instead of RDS: false [ 672.124227][ T9285] vivid-000: RDS Reception: true [ 672.129362][ T9285] vivid-000: RDS Program Type: 0 inactive [ 672.135260][ T9285] vivid-000: RDS PS Name: inactive [ 672.140659][ T9285] vivid-000: RDS Radio Text: inactive [ 672.146699][ T9285] vivid-000: RDS Traffic Announcement: false inactive [ 672.153780][ T9285] vivid-000: RDS Traffic Program: false inactive [ 672.160535][ T9285] vivid-000: RDS Music: false inactive [ 672.166383][ T9285] vivid-000: ================== END STATUS ================== [ 673.209650][ T6535] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 675.537262][ T9298] xt_bpf: check failed: parse error [ 676.478317][ T9300] xt_connbytes: Forcing CT accounting to be enabled [ 676.485271][ T9300] set match dimension is over the limit! [ 678.864123][ T6535] usb 5-1: device descriptor read/64, error -110 [ 679.297845][ T6535] usb usb5-port1: attempt power cycle [ 680.716274][ T6535] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 680.900321][ T6535] usb 5-1: device descriptor read/8, error -32 [ 681.658573][ T6535] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 681.896800][ T6535] usb 5-1: device descriptor read/8, error -32 [ 682.081616][ T6535] usb usb5-port1: unable to enumerate USB device [ 682.883116][ T9331] vivid-002: ================= START STATUS ================= [ 682.890911][ T9331] vivid-002: Radio HW Seek Mode: Bounded [ 682.896801][ T9331] vivid-002: Radio Programmable HW Seek: false [ 682.903130][ T9331] vivid-002: RDS Rx I/O Mode: Block I/O [ 682.908928][ T9331] vivid-002: Generate RBDS Instead of RDS: false [ 682.915350][ T9331] vivid-002: RDS Reception: true [ 682.920438][ T9331] vivid-002: RDS Program Type: 0 inactive [ 682.926439][ T9331] vivid-002: RDS PS Name: inactive [ 682.932288][ T9331] vivid-002: RDS Radio Text: inactive [ 682.938713][ T9331] vivid-002: RDS Traffic Announcement: false inactive [ 682.946136][ T9331] vivid-002: RDS Traffic Program: false inactive [ 682.952919][ T9331] vivid-002: RDS Music: false inactive [ 682.958726][ T9331] vivid-002: ================== END STATUS ================== [ 684.033769][ T9333] capability: warning: `syz.5.1270' uses deprecated v2 capabilities in a way that may be insecure [ 687.331717][ T9351] binder: 9349:9351 ioctl 4018620d 0 returned -22 [ 690.591836][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 690.627649][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 690.759873][ T9381] vivid-000: ================= START STATUS ================= [ 690.767662][ T9381] vivid-000: Radio HW Seek Mode: Bounded [ 690.774069][ T9381] vivid-000: Radio Programmable HW Seek: false [ 690.780640][ T9381] vivid-000: RDS Rx I/O Mode: Block I/O [ 690.786419][ T9381] vivid-000: Generate RBDS Instead of RDS: false [ 690.793022][ T9381] vivid-000: RDS Reception: true [ 690.798672][ T9381] vivid-000: RDS Program Type: 0 inactive [ 690.805385][ T9381] vivid-000: RDS PS Name: inactive [ 690.811462][ T9381] vivid-000: RDS Radio Text: inactive [ 690.817412][ T9381] vivid-000: RDS Traffic Announcement: false inactive [ 690.824584][ T9381] vivid-000: RDS Traffic Program: false inactive [ 690.831255][ T9381] vivid-000: RDS Music: false inactive [ 690.837295][ T9381] vivid-000: ================== END STATUS ================== [ 691.132302][ T9273] bridge0: port 3(syz_tun) entered disabled state [ 691.728378][ T9273] device syz_tun left promiscuous mode [ 691.746678][ T9273] bridge0: port 3(syz_tun) entered disabled state [ 692.815400][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 692.806090][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.873911][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.939759][ T9353] device bridge_slave_0 entered promiscuous mode [ 693.128072][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.975793][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.984846][ T9353] device bridge_slave_1 entered promiscuous mode [ 694.062951][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.207261][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.411177][ T9353] team0: Port device team_slave_0 added [ 694.430785][ T9353] team0: Port device team_slave_1 added [ 694.547357][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.554905][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.584594][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.701763][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.768864][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.010053][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.068530][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 695.123403][ T9353] device hsr_slave_0 entered promiscuous mode [ 695.182436][ T9353] device hsr_slave_1 entered promiscuous mode [ 695.231525][ T9353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.279220][ T9353] Cannot create hsr debugfs directory [ 696.622844][ T9353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 696.655079][ T9353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 696.679112][ T9353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 696.771259][ T9353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 697.977000][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 698.146343][ T9429] vivid-000: ================= START STATUS ================= [ 698.154170][ T9429] vivid-000: Radio HW Seek Mode: Bounded [ 698.160050][ T9429] vivid-000: Radio Programmable HW Seek: false [ 698.166404][ T9429] vivid-000: RDS Rx I/O Mode: Block I/O [ 698.172103][ T9429] vivid-000: Generate RBDS Instead of RDS: false [ 698.178613][ T9429] vivid-000: RDS Reception: true [ 698.183771][ T9429] vivid-000: RDS Program Type: 0 inactive [ 698.189706][ T9429] vivid-000: RDS PS Name: inactive [ 698.195164][ T9429] vivid-000: RDS Radio Text: inactive [ 698.201166][ T9429] vivid-000: RDS Traffic Announcement: false inactive [ 698.208229][ T9429] vivid-000: RDS Traffic Program: false inactive [ 698.214909][ T9429] vivid-000: RDS Music: false inactive [ 698.220886][ T9429] vivid-000: ================== END STATUS ================== [ 699.119362][ T9424] xt_time: unknown flags 0xc [ 701.422149][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.049600][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 816.056614][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4248/1:b..l P4536/2:b..l [ 816.066105][ C1] (detected by 1, t=10502 jiffies, g=36825, q=164) [ 816.072703][ C1] task:kworker/u4:13 state:R running task stack:23152 pid: 4536 ppid: 2 flags:0x00004000 [ 816.084606][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 816.090875][ C1] Call Trace: [ 816.094157][ C1] [ 816.097133][ C1] __schedule+0x11ef/0x43c0 [ 816.101654][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 816.106715][ C1] ? release_firmware_map_entry+0x190/0x190 [ 816.112618][ C1] ? verify_lock_unused+0x140/0x140 [ 816.117836][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 816.123164][ C1] preempt_schedule_irq+0xbb/0x160 [ 816.128293][ C1] ? __cond_resched+0xd0/0xd0 [ 816.132978][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 816.138795][ C1] irqentry_exit+0x63/0x70 [ 816.143319][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 816.148806][ C1] RIP: 0010:sta_info_hash_lookup+0x38/0x580 [ 816.154712][ C1] Code: 48 89 74 24 20 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 6b b2 37 f8 49 8d 9e 90 0a 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 1e d1 7c f8 4c 8b 3b e8 96 4b 7b 00 89 c5 31 ff [ 816.174327][ C1] RSP: 0018:ffffc90003c6f898 EFLAGS: 00000246 [ 816.180397][ C1] RAX: 1ffff11005305312 RBX: ffff888029829890 RCX: ffff888022a28000 [ 816.188371][ C1] RDX: 0000000000000000 RSI: ffff888147b5045a RDI: ffff888029828e00 [ 816.196341][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff203ac18 [ 816.204313][ C1] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: dffffc0000000000 [ 816.212311][ C1] R13: 1ffff9200078df48 R14: ffff888029828e00 R15: ffff888029828e00 [ 816.220301][ C1] ? sta_info_hash_lookup+0x25/0x580 [ 816.226467][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 816.232695][ C1] sta_info_get+0xcc/0x230 [ 816.237139][ C1] ieee80211_ibss_rx_queued_mgmt+0xf1a/0x2ab0 [ 816.243243][ C1] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 816.248977][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 816.254904][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 816.260120][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 816.266018][ C1] ? _raw_spin_unlock+0x40/0x40 [ 816.270885][ C1] ? kcov_remote_start+0x6f/0x4a0 [ 816.275918][ C1] ? kcov_remote_start+0xea/0x4a0 [ 816.280998][ C1] ieee80211_iface_work+0x70e/0xc60 [ 816.286301][ C1] cfg80211_wiphy_work+0x221/0x260 [ 816.291424][ C1] process_one_work+0x85f/0x1010 [ 816.296381][ C1] ? worker_detach_from_pool+0x240/0x240 [ 816.302014][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 816.307303][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 816.312463][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 816.318120][ C1] ? wq_worker_running+0x97/0x170 [ 816.323149][ C1] worker_thread+0xaa6/0x1290 [ 816.327881][ C1] kthread+0x436/0x520 [ 816.332099][ C1] ? rcu_lock_release+0x20/0x20 [ 816.336963][ C1] ? kthread_blkcg+0xd0/0xd0 [ 816.341565][ C1] ret_from_fork+0x1f/0x30 [ 816.346019][ C1] [ 816.349303][ C1] task:kworker/u4:5 state:R running task stack:23184 pid: 4248 ppid: 2 flags:0x00004000 [ 816.360087][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 816.367910][ C1] Call Trace: [ 816.371196][ C1] [ 816.374134][ C1] __schedule+0x11ef/0x43c0 [ 816.378662][ C1] ? __mod_timer+0x91e/0xd00 [ 816.383266][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 816.388484][ C1] ? lock_chain_count+0x20/0x20 [ 816.393353][ C1] ? release_firmware_map_entry+0x190/0x190 [ 816.399254][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 816.404889][ C1] ? preempt_schedule+0xbc/0xd0 [ 816.409739][ C1] ? batadv_iv_ogm_schedule+0xae2/0xec0 [ 816.415378][ C1] preempt_schedule_common+0x82/0xd0 [ 816.420692][ C1] preempt_schedule+0xbc/0xd0 [ 816.425379][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 816.431053][ C1] ? lock_chain_count+0x20/0x20 [ 816.435917][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 816.441902][ C1] preempt_schedule_thunk+0x16/0x18 [ 816.447109][ C1] __local_bh_enable_ip+0x147/0x1c0 [ 816.452394][ C1] ? _local_bh_enable+0xa0/0xa0 [ 816.457263][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 816.462458][ C1] ? batadv_iv_ogm_schedule+0xae2/0xec0 [ 816.468004][ C1] batadv_iv_ogm_schedule+0xae2/0xec0 [ 816.473423][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 816.480723][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 816.486370][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 816.493429][ C1] process_one_work+0x85f/0x1010 [ 816.498647][ C1] ? worker_detach_from_pool+0x240/0x240 [ 816.504281][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 816.509571][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 816.514610][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 816.520158][ C1] ? wq_worker_running+0x97/0x170 [ 816.525200][ C1] worker_thread+0xaa6/0x1290 [ 816.529893][ C1] kthread+0x436/0x520 [ 816.533960][ C1] ? rcu_lock_release+0x20/0x20 [ 816.538810][ C1] ? kthread_blkcg+0xd0/0xd0 [ 816.543396][ C1] ret_from_fork+0x1f/0x30 [ 816.547818][ C1] [ 816.550888][ C1] rcu: rcu_preempt kthread starved for 10045 jiffies! g36825 f0x0 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=0 [ 816.562282][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 816.572277][ C1] rcu: RCU grace-period kthread stack dump: [ 816.578159][ C1] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 816.588939][ C1] Call Trace: [ 816.592245][ C1] [ 816.595214][ C1] __schedule+0x11ef/0x43c0 [ 816.599730][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 816.605624][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 816.610826][ C1] ? _raw_spin_unlock+0x40/0x40 [ 816.615689][ C1] ? release_firmware_map_entry+0x190/0x190 [ 816.621589][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 816.626877][ C1] preempt_schedule_irq+0xbb/0x160 [ 816.631992][ C1] ? __cond_resched+0xd0/0xd0 [ 816.636671][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 816.642484][ C1] irqentry_exit+0x63/0x70 [ 816.646902][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 816.652376][ C1] RIP: 0010:rcu_gp_fqs_loop+0xef/0x11d0 [ 816.657926][ C1] Code: 48 89 4c 24 68 48 c7 c0 c4 2b 8a 8d 48 c1 e8 03 48 89 44 24 28 48 c7 c0 28 f9 89 8d 48 c1 e8 03 48 89 44 24 50 4c 89 6c 24 58 <48> 89 d8 48 c1 e8 03 80 3c 10 00 74 12 48 89 df e8 3c 69 58 00 48 [ 816.677628][ C1] RSP: 0018:ffffc90000d47ca0 EFLAGS: 00000246 [ 816.683706][ C1] RAX: 0000000100008bd2 RBX: ffffffff8c3232c0 RCX: 1b0f9449c6e29300 [ 816.691772][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b43a0 RDI: ffffffff8a7a0700 [ 816.699767][ C1] RBP: ffffc90000d47df0 R08: ffffffff8c323783 R09: 1ffffffff18646f0 [ 816.707851][ C1] R10: dffffc0000000000 R11: fffffbfff18646f1 R12: 1ffff11027fc4801 [ 816.715915][ C1] R13: 1ffffffff1801e30 R14: ffff88813fe2400c R15: 0000000000000000 [ 816.723904][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 816.729285][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 816.735462][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 816.740402][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 816.745603][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 816.750806][ C1] rcu_gp_kthread+0x9b/0x370 [ 816.755396][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 816.761383][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 816.766501][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 816.772394][ C1] ? __kthread_parkme+0x157/0x1b0 [ 816.777423][ C1] kthread+0x436/0x520 [ 816.781500][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 816.786607][ C1] ? kthread_blkcg+0xd0/0xd0 [ 816.791432][ C1] ret_from_fork+0x1f/0x30 [ 816.795872][ C1] [ 816.798918][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 816.805292][ C1] Sending NMI from CPU 1 to CPUs 0: [ 816.811151][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10