last executing test programs: 9m23.55762689s ago: executing program 1 (id=98): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x44, 0x24048005, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10003, 0x0) 9m23.422742314s ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x240000, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x108, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 9m21.967797458s ago: executing program 1 (id=104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9m20.823683562s ago: executing program 1 (id=108): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9m20.648967458s ago: executing program 1 (id=111): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) 9m15.217384781s ago: executing program 1 (id=132): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x11) 9m14.791587634s ago: executing program 32 (id=132): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x11) 8.933365561s ago: executing program 2 (id=1631): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1}, 0x2c) 8.932966601s ago: executing program 2 (id=1633): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.688867418s ago: executing program 2 (id=1634): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1, @loopback, 0x3}, {0xa, 0x4e20, 0x80000001, @mcast1, 0x8}, 0xffffffffffffffff, 0x4}}, 0x48) write$sndseq(0xffffffffffffffff, &(0x7f0000000780)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0xaa, 0xf}}, {0x6, 0x7, 0x2a, 0x5, @time={0x80, 0x9}, {0x4}, {0x1, 0x80}, @ext={0x0, &(0x7f0000000300)}}], 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)}, 0x120) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 7.987102098s ago: executing program 2 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x7ff, 0x2200) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 6.799904432s ago: executing program 2 (id=1641): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='uid_map\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) dup3(r4, r3, 0x80000) 6.625824887s ago: executing program 5 (id=1643): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) listen(r3, 0x802) socket$inet(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) 6.111468453s ago: executing program 3 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 5.621578317s ago: executing program 3 (id=1647): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x10, 0x1, 0x0, 0x6}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004000)={0x2020}, 0x2020) accept4(r1, 0x0, 0x0, 0x0) 5.619101127s ago: executing program 4 (id=1648): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5ab879ca62cdab2a0a00000086d85ba5665a3247e500f61681905db882d2a2ed6e91626f068881e50f6853770721a100efb76cba37ff3111d6847e8b9398a6c008daefba68e6222103472bc55704cdb72b4b996e5f34171113d806726615380fe65a6a0a72e1000000000000e000b6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4ac79f599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 5.320963886s ago: executing program 0 (id=1650): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x1}}, 0x18) 4.629469815s ago: executing program 3 (id=1651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x20044000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 4.614079276s ago: executing program 4 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x7ff, 0x2200) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 4.608804926s ago: executing program 5 (id=1653): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0xfffffffffffffffe}, {0x0}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2004, 0x80) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000540)=r5, 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) 4.336831344s ago: executing program 0 (id=1654): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0xfffffffffffffffe}, {0x0}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2004, 0x80) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000540), 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) 3.521794408s ago: executing program 5 (id=1655): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.521643748s ago: executing program 4 (id=1656): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fcntl$getflags(r1, 0x401) 3.405851091s ago: executing program 0 (id=1657): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='uid_map\x00') sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) dup3(0xffffffffffffffff, r4, 0x80000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000040)={[], [], 0x2f}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x18, 0x0, 0x211, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.982008843s ago: executing program 5 (id=1658): clock_nanosleep(0xa, 0x1, 0x0, 0xfffffffffffffffe) 2.975819644s ago: executing program 3 (id=1659): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) 2.924885665s ago: executing program 4 (id=1660): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x23, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0xf, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x8, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x2, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0xb, 0x7fff, 0x9, 0x420, 0x20000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x400004, 0x8, 0x3, 0x3, 0x9, 0x81, 0x4, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x7, 0x5, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0x9, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d01, 0xa, 0x3d, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xae, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x8, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x1, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x4, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x6, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x0, 0x7, 0x7f800000, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xf7ff343e, 0xfff]}, 0x45c) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=""/2, 0x3d, 0x0, 0x22, 0xa1, &(0x7f0000000a00)="054c38c372a2665a3f1b9c64fd783aec9e18f06b4828f83c701997f5ad06fb0ea93d", &(0x7f0000000a80)="7e5f68d27396122711adadb6c318ea1a17526b04ceea82752fed967868c258ece4556b3ccad8ca5fc5d7b9d5b4eaa69ef31412269a644d8fafe0606de6479593fd0783aeb91e7f0757a9010b4baddae6102bbf14ca293021a2fdafd098b93a568c078e277670131505079086cc4779582149aa779bfe7181bd09e2944b0ab71857c25887eb7b1e951daff52221ef9d1422413c0e55bbd99bca242b58138b6ebf6e", 0x4, 0x0, 0x5a}, 0x50) 2.440226229s ago: executing program 0 (id=1661): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x32315258, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0x1}, {0x7, 0x4}, {0x6, 0x2}], 0xf2, 0x10, 0x1, 0x0, 0x6}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x8) r8 = openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004000)={0x2020}, 0x2020) accept4(r1, 0x0, 0x0, 0x0) 2.100723999s ago: executing program 5 (id=1662): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5ab879ca62cdab2a0a00000086d85ba5665a3247e500f61681905db882d2a2ed6e91626f068881e50f6853770721a100efb76cba37ff3111d6847e8b9398a6c008daefba68e6222103472bc55704cdb72b4b996e5f34171113d806726615380fe65a6a0a72e1000000000000e000b6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4ac79f599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.006598611s ago: executing program 3 (id=1663): openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x31, "f56ff1e962fc9cfb0a1cc093630374b04a778e4d912f15da62b8b863859a9a20557b42367b42f4eb35d2f160b913278f9a"}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 965.053792ms ago: executing program 4 (id=1664): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001200)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @local}], 0x30) 958.689282ms ago: executing program 0 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r4, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0xfffffffffffffc01, 0x0) 750.654218ms ago: executing program 5 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x7ff, 0x2200) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 696.9414ms ago: executing program 2 (id=1667): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0xfffffffffffffffe}, {0x0}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2004, 0x80) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000540)=r5, 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) 696.69948ms ago: executing program 4 (id=1668): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, 0x0, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r1, 0x7}, 0x80, 0x0}, 0x4000011) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r6, &(0x7f0000000240), 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffe6c, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x4004000) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) 32.382879ms ago: executing program 0 (id=1669): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x20044000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 0s ago: executing program 3 (id=1670): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 57.386613][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.394306][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.420511][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.432167][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.439111][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.465163][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.491813][ T4187] device hsr_slave_0 entered promiscuous mode [ 57.498528][ T4187] device hsr_slave_1 entered promiscuous mode [ 57.505116][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.512767][ T4187] Cannot create hsr debugfs directory [ 57.518577][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.525594][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.551650][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.642401][ T4192] device hsr_slave_0 entered promiscuous mode [ 57.649341][ T4192] device hsr_slave_1 entered promiscuous mode [ 57.655977][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.663712][ T4192] Cannot create hsr debugfs directory [ 57.681631][ T4200] device hsr_slave_0 entered promiscuous mode [ 57.688222][ T4200] device hsr_slave_1 entered promiscuous mode [ 57.694802][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.702462][ T4200] Cannot create hsr debugfs directory [ 57.870867][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 57.878360][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 57.881242][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 57.891626][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 57.897686][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.928807][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.939104][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.958316][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.967819][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.015437][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.024292][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.035304][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.044394][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.106938][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.119256][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.134302][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.154301][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.183496][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.206821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.217589][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.237789][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.247918][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.271704][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.278522][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.290407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.298396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.311464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.320088][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.327336][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.345233][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.358499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.367193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.376123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.386701][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.393809][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.409892][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.429707][ T4200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.442385][ T4200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.452143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.459784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.487654][ T4200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.499256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.508530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.517475][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.524605][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.534185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.543904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.552253][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.559287][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.567024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.575791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.584785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.593675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.604013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.621271][ T4200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.637158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.646593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.655782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.665651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.674152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.682742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.692206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.700934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.709437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.717404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.743846][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.755228][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.767947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.776638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.786030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.794968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.803732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.812199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.820625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.828940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.838000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.861104][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.877075][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.919064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.929219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.946669][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.981842][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.005564][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.016388][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.031990][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.045635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.066204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.091172][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.098258][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.114755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.123524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.133162][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.140298][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.178703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.187102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.198816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.207522][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.214632][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.222918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.232400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.241537][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.248584][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.256341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.265303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.274570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.284863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.294055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.304302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.314448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.323485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.332395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.340786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.348905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.357675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.367015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.375382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.388621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.397926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.406564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.417387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.427022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.447624][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.458909][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.485064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.494506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.522338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.535691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.549728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.567835][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.598987][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.611220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.618644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.633311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.644122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.658073][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.700717][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.707609][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.718788][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.732979][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.744928][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.780673][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.789563][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.798778][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.809032][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.817693][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.824801][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.833551][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.842393][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.851467][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.858502][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.866419][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.895387][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.903174][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.913862][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.923054][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.930869][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.938280][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.946562][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.951017][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 59.956134][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 59.970250][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 59.970509][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 59.988164][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 60.000729][ T4188] device veth0_vlan entered promiscuous mode [ 60.007688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.021067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.029504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.043290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.052313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.060638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.068272][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.089492][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.099694][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.108412][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.120021][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.131355][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.143024][ T4188] device veth1_vlan entered promiscuous mode [ 60.153454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.162601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.174281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.189818][ T4194] device veth0_vlan entered promiscuous mode [ 60.203503][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.225438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.234518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.249032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.257702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.267354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.277201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.286097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.308495][ T4194] device veth1_vlan entered promiscuous mode [ 60.327875][ T4188] device veth0_macvtap entered promiscuous mode [ 60.356392][ T4192] device veth0_vlan entered promiscuous mode [ 60.365271][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.373924][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.388374][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.401139][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.409403][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.426046][ T4188] device veth1_macvtap entered promiscuous mode [ 60.445695][ T4192] device veth1_vlan entered promiscuous mode [ 60.460648][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.468651][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.478092][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.509278][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.538564][ T4194] device veth0_macvtap entered promiscuous mode [ 60.552839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.561936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.571471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.580103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.590643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.598784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.609479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.619936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.635285][ T4192] device veth0_macvtap entered promiscuous mode [ 60.646214][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.656332][ T4187] device veth0_vlan entered promiscuous mode [ 60.665566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.675447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.683573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.691995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.701129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.709554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.718313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.728437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.738453][ T4192] device veth1_macvtap entered promiscuous mode [ 60.747827][ T4194] device veth1_macvtap entered promiscuous mode [ 60.771347][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.780437][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.789246][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.798582][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.807756][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.824246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.835077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.843128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.851001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.864625][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.876578][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.887797][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.902564][ T4187] device veth1_vlan entered promiscuous mode [ 60.926264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.935449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.944578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.958100][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.969067][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.979846][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.991132][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.003667][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.012074][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.022744][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.034656][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.054789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.065286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.076653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.085860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.094806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.103834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.115309][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.126049][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.136160][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.146807][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.159613][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.171887][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.181224][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.189928][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.198997][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.243115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.252782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.265058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.274858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.283794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.309719][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.321526][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.330846][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.339560][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.357267][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.365977][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.376276][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.384432][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.393395][ T4187] device veth0_macvtap entered promiscuous mode [ 61.407846][ T4200] device veth0_vlan entered promiscuous mode [ 61.439014][ T4187] device veth1_macvtap entered promiscuous mode [ 61.457859][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.466481][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.504306][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.543502][ T4200] device veth1_vlan entered promiscuous mode [ 61.562369][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.581532][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.586404][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.603643][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.615285][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.625973][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.637726][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.648430][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.659952][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.679034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.688921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.698432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.711488][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.724154][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.734323][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.744994][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.756147][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.766830][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.777963][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.796693][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.808139][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.817795][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.826665][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.846905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.856026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.888085][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.897244][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.926265][ T4200] device veth0_macvtap entered promiscuous mode [ 61.939896][ T4200] device veth1_macvtap entered promiscuous mode [ 61.947877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.958535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.967656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.976567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.984940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.010554][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.018707][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.030801][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 62.039785][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 62.043409][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 62.052259][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 62.073173][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.091557][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.107058][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 62.110669][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.128911][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.139055][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.150308][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.160920][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.171697][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.185001][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.198699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.213290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.223035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.247963][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.275088][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.283637][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.300955][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.317723][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.336723][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.348557][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.366034][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.376113][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.392062][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.406954][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.436995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.455740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.469360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.490565][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.501615][ T4200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.511096][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.512982][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.518922][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.538217][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.547406][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.556603][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.594483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.607096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.689915][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.700459][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.768568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.852482][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.868401][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.901411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.929486][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.955307][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.965939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.349078][ T4287] ======================================================= [ 63.349078][ T4287] WARNING: The mand mount option has been deprecated and [ 63.349078][ T4287] and is ignored by this kernel. Remove the mand [ 63.349078][ T4287] option from the mount to silence this warning. [ 63.349078][ T4287] ======================================================= [ 66.492947][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 66.506181][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 66.820065][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 66.842013][ T4287] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.863196][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 66.894161][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 67.951001][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.360250][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 68.550681][ T4267] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 68.692075][ T4267] usb 3-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 68.929956][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.394599][ T4351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.414802][ T4353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.433892][ T4267] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 69.458568][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.485567][ T4267] usb 3-1: Product: syz [ 69.503549][ T4267] usb 3-1: Manufacturer: syz [ 69.530184][ T4267] usb 3-1: SerialNumber: syz [ 69.558298][ T4267] usb 3-1: config 0 descriptor?? [ 69.589922][ T4359] netlink: 'syz.1.23': attribute type 14 has an invalid length. [ 69.610739][ T4306] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.675943][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 69.932981][ T4306] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.028231][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 70.107970][ T4360] syz.4.25 (4360) used greatest stack depth: 20624 bytes left [ 70.244650][ T4235] usb 3-1: USB disconnect, device number 2 [ 70.790229][ T4305] syz.2.14 (4305) used greatest stack depth: 20440 bytes left [ 70.864889][ T4404] loop2: detected capacity change from 0 to 7 [ 70.883915][ T4404] Dev loop2: unable to read RDB block 7 [ 70.899886][ T4404] loop2: unable to read partition table [ 70.918076][ T4404] loop2: partition table beyond EOD, truncated [ 70.933218][ T4404] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 71.076564][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.083138][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.380175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.400185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.410169][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.420186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.430174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.440170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.450173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.460172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.470179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 72.611004][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 72.656250][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 73.432224][ T4390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.020179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.080025][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 75.241529][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 76.198572][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 76.220752][ T4464] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.229814][ T4464] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.238882][ T4464] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.247718][ T4464] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.311539][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 76.344648][ T4464] Zero length message leads to an empty skb [ 76.367407][ T4464] syz.4.57 (4464) used greatest stack depth: 19984 bytes left [ 76.462128][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.559393][ T4475] tmpfs: Unknown parameter 'usrquota' [ 77.310370][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 77.969639][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 78.255556][ T4517] loop2: detected capacity change from 0 to 512 [ 78.424254][ T4517] EXT4-fs (loop2): Unrecognized mount option "context=system_u" or missing value [ 79.008642][ T4522] binder_alloc: 4521: binder_alloc_buf size 1024 failed, no address space [ 79.035636][ T4522] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 79.280305][ T4235] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 81.020612][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 81.041564][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 81.055735][ T4235] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 81.090483][ T4235] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 81.104044][ T4235] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.111247][ T4235] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 81.126781][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.177380][ T4235] usb 4-1: config 0 descriptor?? [ 81.211069][ T4524] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.322215][ T1108] cfg80211: failed to load regulatory.db [ 81.347696][ T4571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.586754][ T4578] loop4: detected capacity change from 0 to 512 [ 82.136860][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.801874][ T4235] usbhid 4-1:0.0: can't add hid device: -71 [ 82.813852][ T4235] usbhid: probe of 4-1:0.0 failed with error -71 [ 82.871473][ T4235] usb 4-1: USB disconnect, device number 2 [ 82.981073][ T4578] EXT4-fs (loop4): Unrecognized mount option "context=system_u" or missing value [ 82.990276][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 83.220278][ T4234] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 83.228492][ T4234] usb 3-1: config 0 has no interface number 0 [ 83.238759][ T4234] usb 3-1: config 0 interface 184 has no altsetting 0 [ 84.131112][ T4234] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.144670][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.152846][ T4234] usb 3-1: Product: syz [ 84.157109][ T4234] usb 3-1: Manufacturer: syz [ 84.162153][ T4234] usb 3-1: SerialNumber: syz [ 84.169082][ T4234] usb 3-1: config 0 descriptor?? [ 84.220383][ T4234] usb 3-1: can't set config #0, error -71 [ 84.235253][ T4234] usb 3-1: USB disconnect, device number 3 [ 85.650322][ T4622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.029946][ T1240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.250543][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.580330][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 88.765550][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.820865][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.846802][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.932472][ T4232] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.941881][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.956456][ T1240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.976068][ T4232] usb 3-1: config 0 descriptor?? [ 89.092160][ T4665] syz.0.120 uses obsolete (PF_INET,SOCK_PACKET) [ 89.135392][ T1240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.248673][ T1240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.637459][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 89.814673][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 89.912813][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 89.920058][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 89.954928][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 89.970184][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 90.009971][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 90.024382][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 90.034038][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 90.045267][ T4232] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 90.069827][ T4232] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 90.098747][ T4665] device syzkaller1 entered promiscuous mode [ 90.169132][ T4232] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 90.312684][ T4232] usb 3-1: USB disconnect, device number 4 [ 90.431925][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.562852][ T4688] fido_id[4688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 91.661020][ T4297] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.791442][ T4297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.867188][ T4297] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.340794][ T4297] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 92.380213][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.388369][ T4297] usb 4-1: Product: syz [ 92.393030][ T4297] usb 4-1: Manufacturer: syz [ 92.397700][ T4297] usb 4-1: SerialNumber: syz [ 92.483294][ T4681] chnl_net:caif_netlink_parms(): no params data found [ 92.498649][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 93.226055][ T4297] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 93.319337][ T4205] udevd[4205]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.337394][ T4297] usb 4-1: USB disconnect, device number 3 [ 93.402576][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.470963][ T4741] futex_wake_op: syz.4.148 tries to shift op by 144; fix this program [ 93.668970][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.887835][ T4681] device bridge_slave_0 entered promiscuous mode [ 94.104559][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.135714][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.144081][ T4681] device bridge_slave_1 entered promiscuous mode [ 94.166708][ T4681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.191281][ T4681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.310406][ T4267] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.339190][ T4681] team0: Port device team_slave_0 added [ 94.365146][ T4681] team0: Port device team_slave_1 added [ 94.440093][ T4681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.447118][ T4681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.510191][ T4681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.539419][ T4681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.550288][ T4267] usb 3-1: Using ep0 maxpacket: 8 [ 94.564264][ T4681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.591329][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 94.604682][ T4681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.690537][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.729016][ T4267] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.756052][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.838164][ T4267] usb 3-1: config 0 descriptor?? [ 94.847240][ T4681] device hsr_slave_0 entered promiscuous mode [ 94.869834][ T4681] device hsr_slave_1 entered promiscuous mode [ 94.910046][ T4681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.942566][ T4681] Cannot create hsr debugfs directory [ 95.060269][ T4297] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 95.138246][ T4267] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.259647][ T1240] device hsr_slave_0 left promiscuous mode [ 95.286150][ T1240] device hsr_slave_1 left promiscuous mode [ 95.299651][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.331220][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.342267][ T4266] usb 3-1: USB disconnect, device number 5 [ 95.351419][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.359972][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.376394][ T1240] device bridge_slave_1 left promiscuous mode [ 95.386268][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.514184][ T1240] device bridge_slave_0 left promiscuous mode [ 95.524239][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.551213][ T4297] usb 1-1: config 5 has an invalid interface number: 202 but max is 1 [ 95.601301][ T4297] usb 1-1: config 5 has an invalid interface number: 178 but max is 1 [ 95.681359][ T4297] usb 1-1: config 5 has no interface number 0 [ 95.763777][ T4297] usb 1-1: config 5 has no interface number 1 [ 95.820440][ T4297] usb 1-1: config 5 interface 178 altsetting 11 endpoint 0x8E has invalid maxpacket 512, setting to 8 [ 96.083421][ T4297] usb 1-1: config 5 interface 178 altsetting 11 endpoint 0xC has invalid maxpacket 16, setting to 8 [ 96.200453][ T4297] usb 1-1: config 5 interface 202 has no altsetting 0 [ 96.212846][ T4297] usb 1-1: config 5 interface 178 has no altsetting 0 [ 96.254048][ T1240] device veth1_macvtap left promiscuous mode [ 96.270751][ T1240] device veth0_macvtap left promiscuous mode [ 96.278687][ T1240] device veth1_vlan left promiscuous mode [ 96.290788][ T1240] device veth0_vlan left promiscuous mode [ 96.520557][ T4297] usb 1-1: string descriptor 0 read error: -22 [ 96.670715][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 97.228232][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 97.390267][ T4297] usb 1-1: New USB device found, idVendor=083a, idProduct=5501, bcdDevice=ec.0d [ 97.399350][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.400455][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 97.440349][ T4297] usb 1-1: can't set config #5, error -71 [ 97.454331][ T4297] usb 1-1: USB disconnect, device number 2 [ 97.489296][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.513695][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.635399][ T1240] bond0 (unregistering): Released all slaves [ 97.698558][ T4788] device syz_tun entered promiscuous mode [ 97.804779][ T4681] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.829125][ T4681] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.853869][ T4681] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.908240][ T4681] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.040338][ T4297] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 98.067756][ T4681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.084389][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.103968][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.134518][ T4681] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.204216][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.225675][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.325936][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.333126][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.450755][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 98.798935][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.822953][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.847261][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.864939][ T4297] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 98.864981][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.865001][ T4297] usb 1-1: Product: syz [ 98.865015][ T4297] usb 1-1: Manufacturer: syz [ 98.865037][ T4297] usb 1-1: SerialNumber: syz [ 98.885938][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.885994][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.901042][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.902039][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.910620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.911525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.912128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.923027][ T4297] usb 1-1: config 0 descriptor?? [ 98.935185][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.935925][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.943332][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.943816][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.955445][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 98.955574][ T4808] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.972027][ T4297] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 99.030428][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.031122][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.047522][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.769461][ T1325] usb 1-1: USB disconnect, device number 3 [ 100.349357][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.360389][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.482981][ T4681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.659908][ T4883] netlink: 68 bytes leftover after parsing attributes in process `syz.0.183'. [ 101.965945][ T4897] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 102.129920][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.152175][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.227664][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.246411][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.271741][ T4681] device veth0_vlan entered promiscuous mode [ 102.291480][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.310891][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.342806][ T4681] device veth1_vlan entered promiscuous mode [ 102.527219][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.553098][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.607843][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.691892][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.737843][ T4681] device veth0_macvtap entered promiscuous mode [ 102.781195][ T4681] device veth1_macvtap entered promiscuous mode [ 102.843491][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.038842][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.293955][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.570572][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.610655][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.640717][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.657814][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.689038][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.791571][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.820802][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.861315][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.891608][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.902829][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.975784][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.016090][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.026351][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.037333][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.286515][ T4938] futex_wake_op: syz.3.192 tries to shift op by 144; fix this program [ 104.991251][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.259655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.280055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.289441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.298141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.307054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.334506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.369190][ T4681] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.391520][ T4681] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405790][ T4947] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.415481][ T4681] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.429064][ T4681] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.716563][ T4954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.812931][ T4954] overlayfs: failed to look up (tracing) for ino (-66) [ 106.913495][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.937259][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.950133][ C0] sched: RT throttling activated [ 107.521062][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.550547][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.558386][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.706663][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.349304][ T4997] futex_wake_op: syz.5.205 tries to shift op by 144; fix this program [ 111.389290][ T5008] loop5: detected capacity change from 0 to 512 [ 112.767213][ T5013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.207'. [ 112.788233][ T5013] device bridge_slave_0 left promiscuous mode [ 112.795452][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.566827][ T5008] EXT4-fs (loop5): Unrecognized mount option "context=system_u" or missing value [ 113.578376][ T4236] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.640712][ T5013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.952972][ T5049] futex_wake_op: syz.3.220 tries to shift op by 144; fix this program [ 116.730204][ T4233] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 117.290292][ T4233] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.303827][ T4233] usb 6-1: config 0 has no interface number 0 [ 117.314441][ T4233] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.352069][ T4233] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 117.560996][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.888043][ T4233] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.897774][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.919071][ T4233] usb 6-1: config 0 descriptor?? [ 117.940417][ T5040] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.980187][ T4233] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.000283][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 118.230745][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.249089][ T4235] usb 6-1: USB disconnect, device number 2 [ 118.340393][ T23] usb 1-1: config 10 has an invalid interface number: 45 but max is 0 [ 118.368923][ T23] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 118.423522][ T23] usb 1-1: config 10 has no interface number 0 [ 118.541165][ T5085] loop2: detected capacity change from 0 to 512 [ 118.586272][ T5086] kernel profiling enabled (shift: 9) [ 118.962664][ T23] usb 1-1: config 10 interface 45 altsetting 248 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 118.985854][ T5085] EXT4-fs (loop2): Unrecognized mount option "context=system_u" or missing value [ 119.286870][ T23] usb 1-1: config 10 interface 45 altsetting 248 endpoint 0xA has invalid wMaxPacketSize 0 [ 119.480567][ T23] usb 1-1: config 10 interface 45 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 119.610166][ T23] usb 1-1: config 10 interface 45 has no altsetting 0 [ 119.810333][ T23] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41 [ 119.819537][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.810214][ T23] usb 1-1: Product: syz [ 120.819065][ T23] usb 1-1: Manufacturer: syz [ 120.830254][ T23] usb 1-1: SerialNumber: syz [ 120.902867][ T23] usb 1-1: can't set config #10, error -71 [ 120.931564][ T23] usb 1-1: USB disconnect, device number 5 [ 123.036117][ T5158] netlink: 68 bytes leftover after parsing attributes in process `syz.5.241'. [ 123.740298][ T4189] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.720226][ T4189] usb 6-1: Using ep0 maxpacket: 32 [ 126.640260][ T4189] usb 6-1: unable to read config index 0 descriptor/all [ 126.655739][ T4189] usb 6-1: can't read configurations, error -71 [ 126.924183][ T4201] Bluetooth: Unknown LE signaling command 0x1d [ 126.930767][ T4201] Bluetooth: Wrong link type (-22) [ 127.009095][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'. [ 127.018443][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.253'. [ 127.040739][ T5193] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.049602][ T5193] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.058497][ T5193] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.067366][ T5193] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.105853][ T5190] syz.0.252 (5190) used greatest stack depth: 16304 bytes left [ 129.099601][ T5211] binder: 5209:5211 ioctl 4018620d 0 returned -22 [ 129.200603][ T5218] usb usb8: usbfs: process 5218 (syz.5.260) did not claim interface 0 before use [ 129.889272][ T4233] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 130.453688][ T5233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.264'. [ 130.475490][ T4233] usb 5-1: device descriptor read/64, error -71 [ 130.994012][ T5234] Can't find ip_set type ha [ 131.200301][ T4233] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.410253][ T4233] usb 5-1: device descriptor read/64, error -71 [ 131.540864][ T4233] usb usb5-port1: attempt power cycle [ 132.751513][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757954][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137709][ T4233] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 133.670255][ T4233] usb 5-1: device not accepting address 4, error -71 [ 134.780348][ T4297] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 135.020193][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.050329][ T4297] usb 6-1: Using ep0 maxpacket: 32 [ 135.091474][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.280404][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 135.420465][ T4297] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 135.429561][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.460170][ T4297] usb 6-1: Product: syz [ 135.470716][ T4297] usb 6-1: Manufacturer: syz [ 135.475359][ T4297] usb 6-1: SerialNumber: syz [ 135.481941][ T4297] usb 6-1: config 0 descriptor?? [ 135.490362][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.600389][ T4235] usb 4-1: config 10 has an invalid interface number: 45 but max is 0 [ 135.612683][ T4235] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 135.627354][ T4235] usb 4-1: config 10 has no interface number 0 [ 135.633926][ T4235] usb 4-1: config 10 interface 45 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 135.648699][ T4235] usb 4-1: config 10 interface 45 has no altsetting 0 [ 137.058529][ T4235] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=66.41 [ 137.108617][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.127234][ T4235] usb 4-1: Product: syz [ 137.137504][ T4235] usb 4-1: Manufacturer: syz [ 137.142492][ T4235] usb 4-1: SerialNumber: syz [ 137.152058][ T4297] airspy 6-1:0.0: usb_control_msg() failed -110 request 0a [ 137.160268][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 137.166430][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 137.175021][ T4297] airspy 6-1:0.0: Could not detect board [ 137.194524][ T4297] airspy: probe of 6-1:0.0 failed with error -110 [ 137.473249][ T4235] s2255 4-1:10.45: Could not find bulk-in endpoint [ 137.532914][ T4235] Sensoray 2255 driver load failed: 0xfffffff4 [ 137.609579][ T4235] s2255: probe of 4-1:10.45 failed with error -12 [ 137.711937][ T4235] usb 4-1: USB disconnect, device number 4 [ 138.155832][ T5294] usb 6-1: USB disconnect, device number 5 [ 138.526323][ T5311] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 139.241422][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 139.247526][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 142.278974][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 144.139126][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 145.324153][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 145.382748][ T5386] loop4: detected capacity change from 0 to 512 [ 150.210405][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.478684][ T5459] netlink: 'syz.4.319': attribute type 13 has an invalid length. [ 150.488085][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 150.565685][ T5459] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 150.740801][ T23] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 150.749070][ T23] usb 1-1: config 2 has no interface number 0 [ 150.759351][ T23] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 150.881175][ T23] usb 1-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 151.174350][ T23] usb 1-1: config 2 interface 43 has no altsetting 0 [ 153.592472][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.324'. [ 153.608593][ T5489] loop5: detected capacity change from 0 to 512 [ 154.480692][ T23] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 154.543104][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 154.549216][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 154.555884][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.634796][ T23] usb 1-1: Product: syz [ 154.639012][ T23] usb 1-1: Manufacturer: syz [ 154.704850][ T23] usb 1-1: can't set config #2, error -71 [ 154.724905][ T23] usb 1-1: USB disconnect, device number 6 [ 155.513042][ T5516] netlink: 'syz.0.333': attribute type 13 has an invalid length. [ 155.529569][ T5516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 155.610284][ T5516] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 155.965284][ T23] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 156.035371][ T5533] netlink: 64 bytes leftover after parsing attributes in process `syz.4.337'. [ 156.350424][ T23] usb 6-1: config 246 has an invalid interface number: 166 but max is 0 [ 156.358981][ T23] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 156.375086][ T23] usb 6-1: config 246 has no interface number 0 [ 156.381806][ T23] usb 6-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 156.397667][ T23] usb 6-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.416718][ T23] usb 6-1: config 246 interface 166 has no altsetting 0 [ 156.637654][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 156.651609][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 157.080408][ T23] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 157.089780][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.160625][ T23] usb 6-1: Product: syz [ 157.180860][ T23] usb 6-1: Manufacturer: syz [ 157.193567][ T23] usb 6-1: SerialNumber: syz [ 158.841656][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 158.970240][ T23] usb 6-1: can't set config #246, error -71 [ 158.984695][ T23] usb 6-1: USB disconnect, device number 6 [ 159.144083][ T5576] netlink: 'syz.5.346': attribute type 13 has an invalid length. [ 159.223292][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.346'. [ 159.233702][ T5577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.285369][ T5576] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 160.500996][ T5599] netlink: 64 bytes leftover after parsing attributes in process `syz.0.351'. [ 163.511349][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 163.544675][ T5627] loop3: detected capacity change from 0 to 512 [ 164.378431][ T5627] EXT4-fs (loop3): Unrecognized mount option "context=system_u" or missing value [ 164.666931][ T4267] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.704451][ T5650] netlink: 'syz.2.362': attribute type 13 has an invalid length. [ 165.896815][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 166.100782][ T5661] capability: warning: `syz.4.363' uses 32-bit capabilities (legacy support in use) [ 166.112684][ T5661] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.357460][ T5650] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 167.160442][ T4267] usb 6-1: Using ep0 maxpacket: 16 [ 167.492356][ T4267] usb 6-1: device descriptor read/all, error -71 [ 168.357571][ T5675] mmap: syz.4.367 (5675) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 171.768061][ T5712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.934207][ T5715] program syz.0.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.618045][ T5727] futex_wake_op: syz.4.380 tries to shift op by 144; fix this program [ 174.494880][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 174.533155][ T5750] loop0: detected capacity change from 0 to 512 [ 174.613377][ T5750] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 176.261368][ T5774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.694941][ T5786] futex_wake_op: syz.4.397 tries to shift op by 144; fix this program [ 180.990206][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 180.996394][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 181.790523][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 181.799200][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 185.412286][ T5844] futex_wake_op: syz.0.413 tries to shift op by 144; fix this program [ 185.900186][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.250404][ T4266] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 186.630240][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.690768][ T4266] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.774696][ T5880] netlink: 'syz.5.424': attribute type 13 has an invalid length. [ 186.782612][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 186.791744][ T5880] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 187.031140][ T4266] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 187.055741][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 187.086562][ T4266] usb 3-1: Product: syz [ 187.097629][ T4266] usb 3-1: Manufacturer: syz [ 187.125393][ T4266] usb 3-1: SerialNumber: syz [ 187.152310][ T4233] usb 5-1: device not accepting address 6, error -71 [ 187.190519][ T4266] usb 3-1: config 0 descriptor?? [ 187.539311][ T5867] udc-core: couldn't find an available UDC or it's busy [ 187.647822][ T5867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.989405][ T4266] usb 3-1: USB disconnect, device number 6 [ 189.945793][ T5925] netlink: 'syz.3.435': attribute type 12 has an invalid length. [ 190.025210][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 190.140391][ T4265] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.581067][ T4265] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.630631][ T4265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.792536][ T4265] usb 6-1: config 0 descriptor?? [ 190.911322][ T4265] cp210x 6-1:0.0: cp210x converter detected [ 191.318227][ T5936] program syz.0.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.008852][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 192.180582][ T4265] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 192.212880][ T4265] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 192.361337][ T4265] usb 6-1: cp210x converter now attached to ttyUSB0 [ 192.552389][ T4265] usb 6-1: USB disconnect, device number 9 [ 192.615301][ T5943] program syz.4.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.811635][ T4265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.921232][ T4265] cp210x 6-1:0.0: device disconnected [ 193.954775][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.961234][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.197521][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 196.270255][ T4266] Bluetooth: hci5: command 0x1001 tx timeout [ 196.277428][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 196.399811][ T5960] netlink: 544 bytes leftover after parsing attributes in process `syz.3.447'. [ 197.734818][ T5981] program syz.3.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.351800][ T4297] Bluetooth: hci5: command 0x1009 tx timeout [ 200.415157][ T4265] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 200.422813][ T4236] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.830343][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.830759][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.851669][ T4236] usb 5-1: config 0 has no interfaces? [ 200.857708][ T4236] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 200.967299][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.040600][ T4265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.219343][ T4236] usb 5-1: config 0 descriptor?? [ 201.400419][ T4265] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 201.413632][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.425772][ T4265] usb 4-1: Product: syz [ 201.430715][ T4265] usb 4-1: Manufacturer: syz [ 201.439458][ T4265] usb 4-1: SerialNumber: syz [ 201.466642][ T4265] usb 4-1: config 0 descriptor?? [ 201.560430][ T6010] futex_wake_op: syz.2.460 tries to shift op by 144; fix this program [ 202.240065][ T4265] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 202.296786][ T4265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.340740][ T4265] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 202.353773][ T4265] usb 4-1: media controller created [ 202.409208][ T4265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.546787][ T4265] DVB: Unable to find symbol tda10046_attach() [ 202.557722][ T4265] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 202.587442][ T4265] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 203.022472][ T4265] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 203.040450][ T4265] usb 4-1: USB disconnect, device number 5 [ 203.289450][ T4297] usb 5-1: USB disconnect, device number 8 [ 204.342240][ T6036] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.829651][ T6059] futex_wake_op: syz.2.472 tries to shift op by 144; fix this program [ 214.117441][ T6114] futex_wake_op: syz.5.490 tries to shift op by 144; fix this program [ 217.116522][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 217.762217][ T4235] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.010143][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 219.090229][ T4235] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 219.098748][ T4235] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 219.123164][ T4235] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 219.134449][ T4235] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 219.147798][ T4235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.447193][ T4235] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 219.476203][ T4235] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 219.489586][ T4235] usb 5-1: Product: syz [ 219.504476][ T4235] usb 5-1: Manufacturer: syz [ 219.522544][ T4235] usb 5-1: SerialNumber: syz [ 219.537209][ T4235] usb 5-1: config 0 descriptor?? [ 219.603037][ T4235] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 219.646585][ T4235] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 219.917970][ T4235] usb 5-1: USB disconnect, device number 9 [ 219.930404][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 219.937461][ T6139] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 219.979418][ T4235] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 220.327030][ T6168] program syz.2.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.830955][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 220.864391][ T6169] loop0: detected capacity change from 0 to 512 [ 221.074743][ T6169] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 224.757298][ T6232] program syz.4.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.484281][ T26] audit: type=1326 audit(2000000008.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 225.664490][ T26] audit: type=1326 audit(2000000008.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 226.286993][ T26] audit: type=1326 audit(2000000008.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 226.652719][ T26] audit: type=1326 audit(2000000008.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 226.795663][ T26] audit: type=1326 audit(2000000008.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe42bd9c68e code=0x7ffc0000 [ 227.724171][ T26] audit: type=1326 audit(2000000008.230:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 227.833927][ T26] audit: type=1326 audit(2000000008.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 227.960432][ T26] audit: type=1326 audit(2000000008.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 227.984623][ T26] audit: type=1326 audit(2000000008.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 228.009378][ T26] audit: type=1326 audit(2000000008.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.4.526" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe42bddbe59 code=0x7ffc0000 [ 228.244335][ T6255] netlink: 68 bytes leftover after parsing attributes in process `syz.3.533'. [ 231.776154][ T6312] futex_wake_op: syz.2.550 tries to shift op by 144; fix this program [ 233.933685][ T6324] program syz.5.553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.803295][ T6365] program syz.0.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.473630][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 239.892218][ T6395] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 241.785089][ T6410] program syz.2.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.991693][ T6412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.694101][ T6430] netlink: 'syz.2.590': attribute type 13 has an invalid length. [ 243.765033][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 243.820485][ T6430] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 244.352161][ T6447] futex_wake_op: syz.4.595 tries to shift op by 144; fix this program [ 247.290816][ T6467] 9p: Unknown Cache mode readahead [ 249.725870][ T6503] netlink: 'syz.0.616': attribute type 13 has an invalid length. [ 249.744650][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 249.766552][ T6503] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 249.983877][ T6510] program syz.4.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.771536][ T6547] netlink: 64 bytes leftover after parsing attributes in process `syz.0.628'. [ 252.845430][ T6549] futex_wake_op: syz.2.627 tries to shift op by 144; fix this program [ 252.881564][ T4189] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 253.270386][ T4189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.367391][ T4189] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.545586][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.697446][ T4189] usb 4-1: config 0 descriptor?? [ 253.796660][ T4189] pwc: Askey VC010 type 2 USB webcam detected. [ 254.891120][ T4189] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.930289][ T4189] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.970305][ T4189] pwc: recv_control_msg error -32 req 02 val 2c00 [ 255.040889][ T6560] loop2: detected capacity change from 0 to 40427 [ 255.176532][ T6560] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x1ffff [ 255.393373][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.393866][ T4189] pwc: recv_control_msg error -71 req 04 val 1300 [ 255.403551][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.420243][ T4189] pwc: recv_control_msg error -71 req 04 val 1400 [ 255.450572][ T4189] pwc: recv_control_msg error -71 req 02 val 2000 [ 255.500951][ T4189] pwc: recv_control_msg error -71 req 02 val 2100 [ 255.560744][ T4189] pwc: recv_control_msg error -71 req 04 val 1500 [ 256.952854][ T4189] pwc: recv_control_msg error -71 req 02 val 2500 [ 256.990232][ T4189] pwc: recv_control_msg error -71 req 02 val 2400 [ 257.510967][ T4189] pwc: recv_control_msg error -71 req 02 val 2600 [ 258.075842][ T4189] pwc: recv_control_msg error -71 req 02 val 2900 [ 258.140448][ T4189] pwc: recv_control_msg error -71 req 02 val 2800 [ 258.392206][ T4189] pwc: recv_control_msg error -71 req 04 val 1100 [ 258.466539][ T4189] pwc: recv_control_msg error -71 req 04 val 1200 [ 258.507374][ T4189] pwc: Registered as video103. [ 258.528731][ T4189] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 258.740883][ T4189] usb 4-1: USB disconnect, device number 6 [ 258.819827][ T6582] program syz.0.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.885398][ T6583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.639'. [ 259.131647][ T6581] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 260.149197][ T6605] program syz.0.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.440082][ C0] hrtimer: interrupt took 37794 ns [ 261.175676][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 262.056253][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.160890][ T6634] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 264.062460][ T6646] futex_wake_op: syz.3.658 tries to shift op by 144; fix this program [ 266.432719][ T6674] autofs4:pid:6674:autofs_fill_super: called with bogus options [ 266.676443][ T6680] program syz.0.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.878628][ T6682] loop2: detected capacity change from 0 to 256 [ 267.182468][ T6682] FAT-fs (loop2): Unrecognized mount option "ÿÿ" or missing value [ 267.469827][ T6689] loop2: detected capacity change from 0 to 128 [ 267.520597][ T6691] futex_wake_op: syz.4.673 tries to shift op by 144; fix this program [ 268.321405][ T6689] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.337961][ T6689] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.526031][ T1240] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.557742][ T6681] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.316450][ T6800] loop4: detected capacity change from 0 to 256 [ 285.794613][ T6800] FAT-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 285.910695][ T6816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.706'. [ 286.118483][ T6817] loop4: detected capacity change from 0 to 128 [ 286.126002][ T6817] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.142109][ T6817] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.192599][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 286.266359][ T4317] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.302875][ T6798] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.555804][ T6826] futex_wake_op: syz.4.710 tries to shift op by 144; fix this program [ 288.889124][ T6828] loop0: detected capacity change from 0 to 40427 [ 288.972863][ T6828] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x1ffff [ 291.135877][ T6854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.718'. [ 291.234296][ T6857] loop3: detected capacity change from 0 to 256 [ 291.632209][ T6857] FAT-fs (loop3): Unrecognized mount option "ÿÿ" or missing value [ 293.606174][ T6882] netlink: 'syz.5.728': attribute type 8 has an invalid length. [ 295.560356][ T4236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 295.815448][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 295.975723][ T4236] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 295.990165][ T4236] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.025529][ T4236] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.045583][ T4236] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.067444][ T4236] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.443209][ T4236] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.452438][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.986296][ T4236] usb 1-1: usb_control_msg returned -32 [ 296.992505][ T4236] usbtmc 1-1:16.0: can't read capabilities [ 303.979147][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 304.184159][ T4189] usb 1-1: USB disconnect, device number 7 [ 304.449110][ T6925] netlink: 'syz.3.741': attribute type 8 has an invalid length. [ 309.008510][ T6956] loop0: detected capacity change from 0 to 40427 [ 309.050422][ T6956] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x1ffff [ 309.680123][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 316.108078][ T6993] netlink: 'syz.0.756': attribute type 8 has an invalid length. [ 316.929622][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.943081][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.318114][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 318.334886][ T7029] loop0: detected capacity change from 0 to 512 [ 318.534317][ T7029] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 322.439557][ T7075] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 326.525817][ T7118] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 329.009693][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 329.050149][ T7135] loop0: detected capacity change from 0 to 512 [ 329.880174][ T7135] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 331.264308][ T7150] program syz.0.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.262143][ T7156] device syzkaller1 entered promiscuous mode [ 333.871427][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 334.834216][ T7189] program syz.0.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.255916][ T7225] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 339.818893][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 340.420244][ T7233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.828'. [ 342.245361][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.838'. [ 342.349102][ T7270] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 348.508709][ T7318] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 349.468772][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 349.508574][ T7319] loop0: detected capacity change from 0 to 512 [ 349.825191][ T7319] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 352.001075][ T7337] program syz.0.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.271006][ T7328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.854'. [ 352.838182][ T7347] program syz.0.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.624471][ T7360] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 354.534480][ T7372] netlink: 68 bytes leftover after parsing attributes in process `syz.2.870'. [ 355.111120][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 358.160707][ T7393] program syz.0.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.572076][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 360.676364][ T7415] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 364.880388][ T7451] netlink: 'syz.4.895': attribute type 8 has an invalid length. [ 364.988887][ T26] audit: type=1326 audit(2000000147.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31a3f9b1d9 code=0x7ffc0000 [ 365.679007][ T26] audit: type=1326 audit(2000000148.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 367.729447][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 368.040449][ T26] audit: type=1326 audit(2000000148.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.250516][ T26] audit: type=1326 audit(2000000148.060:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.404221][ T26] audit: type=1326 audit(2000000148.070:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.444397][ T26] audit: type=1326 audit(2000000148.070:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.539242][ T26] audit: type=1326 audit(2000000148.080:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.570834][ T26] audit: type=1326 audit(2000000148.080:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 371.934782][ T26] audit: type=1326 audit(2000000148.060:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31a3f9b1d9 code=0x7ffc0000 [ 372.018754][ T7493] netlink: 'syz.2.908': attribute type 8 has an invalid length. [ 372.062060][ T26] audit: type=1326 audit(2000000148.090:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 372.126098][ T26] audit: type=1326 audit(2000000148.100:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 372.269233][ T26] audit: type=1326 audit(2000000148.100:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 372.463282][ T26] audit: type=1326 audit(2000000148.110:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31a3fba68e code=0x7ffc0000 [ 375.070358][ T7516] loop0: detected capacity change from 0 to 512 [ 375.134853][ T7516] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 378.180878][ T7540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.922'. [ 378.274294][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.280636][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.617977][ T7543] Illegal XDP return value 32768, expect packet loss! [ 382.549795][ T7583] netlink: 'syz.4.931': attribute type 8 has an invalid length. [ 382.673323][ T7586] fuse: Invalid rootmode [ 389.101926][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 389.101940][ T26] audit: type=1326 audit(2000000171.770:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.203618][ T26] audit: type=1326 audit(2000000171.810:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.305565][ T26] audit: type=1326 audit(2000000171.810:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.400072][ T26] audit: type=1326 audit(2000000171.810:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.496296][ T26] audit: type=1326 audit(2000000171.810:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.587889][ T26] audit: type=1326 audit(2000000171.810:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 389.649102][ T26] audit: type=1326 audit(2000000171.810:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 391.800211][ T26] audit: type=1326 audit(2000000171.810:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 392.718836][ T26] audit: type=1326 audit(2000000171.810:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 392.955690][ T26] audit: type=1326 audit(2000000171.810:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.948" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3ff9e59 code=0x7ffc0000 [ 393.511718][ T7670] netlink: 68 bytes leftover after parsing attributes in process `syz.2.959'. [ 394.621341][ T7669] crypto_alloc_aead failed rc=-2 [ 396.413668][ T7712] IPVS: Error connecting to the multicast addr [ 397.393111][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 397.436398][ T7725] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 397.843731][ T7735] netlink: 68 bytes leftover after parsing attributes in process `syz.3.973'. [ 398.550875][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 398.595027][ T7744] loop0: detected capacity change from 0 to 512 [ 398.662924][ T7744] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 402.847795][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 406.267566][ T7814] futex_wake_op: syz.2.999 tries to shift op by 144; fix this program [ 408.521096][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1003'. [ 411.462915][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 415.420789][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 417.818547][ T7925] netlink: 'syz.3.1027': attribute type 8 has an invalid length. [ 418.590256][ T7929] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1031'. [ 420.549429][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 428.447885][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 433.500055][ T8028] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1058'. [ 438.186664][ T8070] loop0: detected capacity change from 0 to 512 [ 438.227158][ T8070] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 438.942631][ T8073] netlink: 'syz.2.1066': attribute type 8 has an invalid length. [ 440.016017][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.022405][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.347553][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1075'. [ 442.177043][ T8100] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1078'. [ 446.850312][ T8151] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1089'. [ 449.857120][ T8170] netlink: 'syz.0.1094': attribute type 8 has an invalid length. [ 451.227385][ T8185] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1100'. [ 457.381855][ T8232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1113'. [ 461.823319][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 464.578389][ T8288] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1130'. [ 470.704443][ T8335] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1143'. [ 471.752666][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 473.417146][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 476.700183][ T8387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1159'. [ 477.692904][ T8403] netlink: 'syz.2.1156': attribute type 8 has an invalid length. [ 477.992876][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 479.179403][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 482.790914][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 483.606888][ T8452] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1178'. [ 487.312180][ T8470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1182'. [ 488.741336][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 488.756525][ T8492] loop0: detected capacity change from 0 to 512 [ 489.145779][ T8492] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 497.826993][ T8532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1200'. [ 499.012065][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 500.620291][ T8556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1208'. [ 501.492185][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.498506][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.819203][ T8543] loop0: detected capacity change from 0 to 40427 [ 504.252135][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 505.546566][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1217'. [ 508.091846][ T8615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1224'. [ 509.636786][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 509.676827][ T8629] loop0: detected capacity change from 0 to 512 [ 510.345541][ T8629] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 514.677323][ T8660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1237'. [ 521.489966][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 523.678616][ T8692] ODEBUG: Out of memory. ODEBUG disabled [ 525.948340][ T8726] netlink: 'syz.0.1248': attribute type 8 has an invalid length. [ 528.769042][ T8756] process 'syz.2.1266' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 532.320194][ T7063] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 532.482844][ T8810] netlink: 'syz.5.1279': attribute type 8 has an invalid length. [ 532.529324][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1281'. [ 532.725497][ T7063] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 532.740413][ T7063] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 533.628539][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1286'. [ 533.720193][ T7063] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 533.729296][ T7063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.760160][ T7063] usb 1-1: Product: syz [ 533.764366][ T7063] usb 1-1: Manufacturer: syz [ 533.770358][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 533.780049][ T7063] usb 1-1: SerialNumber: syz [ 533.795458][ T7063] usb 1-1: config 0 descriptor?? [ 533.851273][ T8830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.868739][ T7063] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 533.893380][ T8833] device veth0_virt_wifi entered promiscuous mode [ 534.016261][ T8833] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 534.030977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 534.070851][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1288'. [ 534.080927][ T8830] device bond2 entered promiscuous mode [ 534.094350][ T8833] bond2: (slave veth0_virt_wifi): Releasing backup interface [ 534.105640][ T8840] futex_wake_op: syz.5.1291 tries to shift op by 144; fix this program [ 535.216875][ T8853] overlayfs: failed to clone upperpath [ 535.955120][ T8863] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1298'. [ 536.133881][ T7063] gspca_sunplus: reg_r err -71 [ 536.203011][ T7063] sunplus: probe of 1-1:0.0 failed with error -71 [ 536.215007][ T7063] usb 1-1: USB disconnect, device number 8 [ 536.525626][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 536.567325][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.621302][ T8884] futex_wake_op: syz.3.1303 tries to shift op by 144; fix this program [ 539.705259][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1311'. [ 539.983321][ T8916] 9pnet: Insufficient options for proto=fd [ 542.770127][ T8945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1324'. [ 544.743366][ T8960] futex_wake_op: syz.4.1330 tries to shift op by 144; fix this program [ 547.072535][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 547.161651][ T8991] fuse: Bad value for 'user_id' [ 547.227079][ T8988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.675977][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 550.155324][ T9038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1356'. [ 551.558575][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 551.575521][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.600216][ T9054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.636808][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.648829][ T9059] futex_wake_op: syz.2.1362 tries to shift op by 144; fix this program [ 551.884199][ T9054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.866646][ T9090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1372'. [ 558.149161][ T9121] comedi: valid board names for 8255 driver are: [ 558.161105][ T9121] 8255 [ 558.164040][ T9121] comedi: valid board names for vmk80xx driver are: [ 558.171560][ T9121] vmk80xx [ 558.174725][ T9121] comedi: valid board names for usbduxsigma driver are: [ 558.182351][ T9121] usbduxsigma [ 558.185799][ T9121] comedi: valid board names for usbduxfast driver are: [ 558.193213][ T9121] usbduxfast [ 558.196592][ T9121] comedi: valid board names for usbdux driver are: [ 558.203856][ T9121] usbdux [ 558.206993][ T9121] comedi: valid board names for ni6501 driver are: [ 558.263321][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 558.294116][ T9121] ni6501 [ 558.392921][ T9121] comedi: valid board names for dt9812 driver are: [ 558.690159][ T9121] dt9812 [ 558.782327][ T9121] comedi: valid board names for ni_labpc_cs driver are: [ 558.868528][ T9121] ni_labpc_cs [ 558.894720][ T9121] comedi: valid board names for ni_daq_700 driver are: [ 558.901681][ T9121] ni_daq_700 [ 558.904998][ T9121] comedi: valid board names for labpc_pci driver are: [ 558.919830][ T9121] labpc_pci [ 558.923107][ T9121] comedi: valid board names for adl_pci9118 driver are: [ 558.950424][ T9121] pci9118dg [ 558.953680][ T9121] pci9118hg [ 558.956896][ T9121] pci9118hr [ 559.016946][ T9121] comedi: valid board names for 8255_pci driver are: [ 559.123100][ T9121] 8255_pci [ 559.126260][ T9121] comedi: valid board names for s526 driver are: [ 559.132667][ T9121] s526 [ 559.135453][ T9121] comedi: valid board names for multiq3 driver are: [ 559.142159][ T9121] multiq3 [ 559.145618][ T9121] comedi: valid board names for pcmuio driver are: [ 559.169953][ T9121] pcmuio48 [ 559.173189][ T9121] pcmuio96 [ 559.176334][ T9121] comedi: valid board names for pcmmio driver are: [ 559.368225][ T9121] pcmmio [ 559.485970][ T9121] comedi: valid board names for pcmda12 driver are: [ 559.736077][ T9121] pcmda12 [ 559.850280][ T9121] comedi: valid board names for pcmad driver are: [ 559.918372][ T9121] pcmad12 [ 559.942985][ T9121] pcmad16 [ 559.946074][ T9121] comedi: valid board names for ni_labpc driver are: [ 560.019624][ T9121] lab-pc-1200 [ 560.039221][ T9121] lab-pc-1200ai [ 560.044384][ T9121] lab-pc+ [ 560.055353][ T9121] comedi: valid board names for atmio16 driver are: [ 560.066477][ T9121] atmio16 [ 560.074311][ T9121] atmio16d [ 560.077600][ T9121] comedi: valid board names for ni_at_ao driver are: [ 560.086416][ T9121] at-ao-6 [ 560.089634][ T9121] at-ao-10 [ 560.098191][ T9121] comedi: valid board names for ni_at_a2150 driver are: [ 560.105918][ T9121] ni_at_a2150 [ 560.109444][ T9121] comedi: valid board names for adq12b driver are: [ 560.121590][ T9121] adq12b [ 560.124646][ T9121] comedi: valid board names for mpc624 driver are: [ 560.143560][ T9121] mpc624 [ 560.156823][ T9121] comedi: valid board names for c6xdigio driver are: [ 560.192016][ T9121] c6xdigio [ 560.207351][ T9121] comedi: valid board names for aio_iiro_16 driver are: [ 560.231980][ T9121] aio_iiro_16 [ 560.248668][ T9121] comedi: valid board names for aio_aio12_8 driver are: [ 560.316154][ T9142] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1390'. [ 560.325277][ T9121] aio_aio12_8 [ 560.328667][ T9121] aio_ai12_8 [ 560.350257][ T9121] aio_ao12_4 [ 560.353593][ T9121] comedi: valid board names for fl512 driver are: [ 560.599694][ T9147] netlink: 'syz.4.1391': attribute type 8 has an invalid length. [ 561.268234][ T9121] fl512 [ 561.290287][ T9121] comedi: valid board names for dmm32at driver are: [ 561.296912][ T9121] dmm32at [ 561.301903][ T9121] comedi: valid board names for dt282x driver are: [ 561.308527][ T9121] dt2821 [ 561.311655][ T9121] dt2821-f [ 561.314868][ T9121] dt2821-g [ 561.318063][ T9121] dt2823 [ 561.341175][ T9121] dt2824-pgh [ 561.347873][ T9121] dt2824-pgl [ 561.389862][ T9121] dt2825 [ 561.400895][ T9121] dt2827 [ 561.407497][ T9121] dt2828 [ 561.418054][ T9121] dt2829 [ 561.425614][ T9121] dt21-ez [ 561.436458][ T9121] dt23-ez [ 561.448727][ T9121] dt24-ez [ 561.465043][ T9121] dt24-ez-pgl [ 561.477716][ T9121] comedi: valid board names for dt2817 driver are: [ 561.535035][ T9121] dt2817 [ 561.543806][ T9155] futex_wake_op: syz.5.1393 tries to shift op by 144; fix this program [ 561.552456][ T9121] comedi: valid board names for dt2815 driver are: [ 561.587547][ T9121] dt2815 [ 561.605678][ T9121] comedi: valid board names for dt2814 driver are: [ 561.629227][ T9121] dt2814 [ 561.655181][ T9121] comedi: valid board names for dt2811 driver are: [ 561.680715][ T9121] dt2811-pgh [ 561.695535][ T9121] dt2811-pgl [ 561.714449][ T9121] comedi: valid board names for dt2801 driver are: [ 561.764161][ T9121] dt2801 [ 561.767235][ T9121] comedi: valid board names for das6402 driver are: [ 561.800056][ T9121] das6402-12 [ 561.817655][ T9121] das6402-16 [ 561.842480][ T9121] comedi: valid board names for das1800 driver are: [ 561.884797][ T9121] das-1701st [ 561.888119][ T9121] das-1701st-da [ 561.912100][ T9121] das-1702st [ 561.924230][ T9121] das-1702st-da [ 561.927812][ T9121] das-1702hr [ 561.965458][ T9121] das-1702hr-da [ 561.986920][ T9121] das-1701ao [ 562.000655][ T9121] das-1702ao [ 562.022963][ T9121] das-1801st [ 562.030207][ T9121] das-1801st-da [ 562.033779][ T9121] das-1802st [ 562.077122][ T9121] das-1802st-da [ 562.090975][ T9121] das-1802hr [ 562.094379][ T9121] das-1802hr-da [ 562.175339][ T9121] das-1801hc [ 562.178819][ T9121] das-1802hc [ 562.226279][ T9121] das-1801ao [ 562.229833][ T9121] das-1802ao [ 562.625052][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.638527][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.723103][ T9121] comedi: valid board names for das800 driver are: [ 562.986990][ T9121] das-800 [ 563.012464][ T9121] cio-das800 [ 563.015789][ T9121] das-801 [ 563.018830][ T9121] cio-das801 [ 563.022457][ T9121] das-802 [ 563.025500][ T9121] cio-das802 [ 563.028801][ T9121] cio-das802/16 [ 563.032459][ T9121] comedi: valid board names for isa-das08 driver are: [ 563.039238][ T9121] isa-das08 [ 563.042564][ T9121] das08-pgm [ 563.045803][ T9121] das08-pgh [ 563.049007][ T9121] das08-pgl [ 563.119998][ T9121] das08-aoh [ 563.123245][ T9121] das08-aol [ 563.139903][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 563.165272][ T9121] das08-aom [ 563.186165][ T9121] das08/jr-ao [ 563.189672][ T9121] das08jr-16-ao [ 563.205563][ T9121] pc104-das08 [ 563.216810][ T9121] das08jr/16 [ 563.233825][ T9121] comedi: valid board names for das16m1 driver are: [ 563.246509][ T9173] team0: Port device team_slave_0 removed [ 563.258009][ T9121] das16m1 [ 563.283262][ T9121] comedi: valid board names for dac02 driver are: [ 563.289747][ T9121] dac02 [ 563.305223][ T9121] comedi: valid board names for rti802 driver are: [ 563.319084][ T9121] rti802 [ 563.324247][ T9121] comedi: valid board names for rti800 driver are: [ 563.349958][ T9121] rti800 [ 563.352991][ T9121] rti815 [ 563.355939][ T9121] comedi: valid board names for pcm3724 driver are: [ 563.378550][ T9121] pcm3724 [ 563.405490][ T9121] comedi: valid board names for pcl818 driver are: [ 563.444387][ T9121] pcl818l [ 563.454546][ T9121] pcl818h [ 563.470205][ T9121] pcl818hd [ 563.473346][ T9121] pcl818hg [ 563.521625][ T9121] pcl818 [ 563.521820][ T9180] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1404'. [ 563.535105][ T9121] pcl718 [ 563.547889][ T9121] pcm3718 [ 563.551229][ T9121] comedi: valid board names for pcl816 driver are: [ 563.557816][ T9121] pcl816 [ 563.560880][ T9121] pcl814b [ 563.564053][ T9121] comedi: valid board names for pcl812 driver are: [ 563.570819][ T9121] pcl812 [ 563.628652][ T9181] netlink: 'syz.4.1403': attribute type 8 has an invalid length. [ 563.700152][ T9121] pcl812pg [ 563.714322][ T9121] acl8112pg [ 564.246623][ T9121] acl8112dg [ 564.250020][ T9121] acl8112hg [ 564.254933][ T9121] a821pgl [ 564.258228][ T9121] a821pglnda [ 564.261744][ T9121] a821pgh [ 564.264973][ T9121] a822pgl [ 564.268164][ T9121] a822pgh [ 564.280325][ T9121] a823pgl [ 564.289271][ T9121] a823pgh [ 564.293541][ T9121] pcl813 [ 564.310124][ T9121] pcl813b [ 564.324183][ T9121] acl8113 [ 564.410135][ T9121] iso813 [ 564.413152][ T9121] acl8216 [ 564.416196][ T9121] a826pg [ 564.419149][ T9121] comedi: valid board names for pcl730 driver are: [ 564.480325][ T9121] pcl730 [ 564.483791][ T9121] iso730 [ 564.486762][ T9121] acl7130 [ 564.489799][ T9121] pcm3730 [ 564.517837][ T9121] pcl725 [ 564.520988][ T9121] p8r8dio [ 564.527445][ T9121] acl7225b [ 564.534564][ T9121] p16r16dio [ 564.537869][ T9121] pcl733 [ 564.541971][ T9121] pcl734 [ 564.547119][ T9121] opmm-1616-xt [ 564.559237][ T9121] pearl-mm-p [ 564.564750][ T9121] ir104-pbf [ 564.574234][ T9121] comedi: valid board names for pcl726 driver are: [ 564.585190][ T9121] pcl726 [ 564.594235][ T9121] pcl727 [ 564.600857][ T9121] pcl728 [ 564.607181][ T9121] acl6126 [ 564.617781][ T9121] acl6128 [ 564.624131][ T9121] comedi: valid board names for pcl724 driver are: [ 564.643397][ T9121] pcl724 [ 564.649552][ T9121] pcl722 [ 564.661890][ T9121] pcl731 [ 564.669216][ T9121] acl7122 [ 564.679794][ T9121] acl7124 [ 564.686167][ T9121] pet48dio [ 564.698339][ T9121] pcmio48 [ 564.704753][ T9121] onyx-mm-dio [ 564.722517][ T9121] comedi: valid board names for pcl711 driver are: [ 564.729112][ T9121] pcl711 [ 564.732651][ T9121] pcl711b [ 564.735701][ T9121] acl8112hg [ 564.738934][ T9121] acl8112dg [ 564.742513][ T9121] comedi: valid board names for amplc_pc263 driver are: [ 564.749670][ T9121] pc263 [ 564.755879][ T9121] comedi: valid board names for amplc_pc236 driver are: [ 564.764917][ T9121] pc36at [ 564.767939][ T9121] comedi: valid board names for amplc_dio200 driver are: [ 564.779265][ T9121] pc212e [ 564.870080][ T9121] pc214e [ 564.881276][ T9121] pc215e [ 564.892095][ T9121] pc218e [ 564.914105][ T9121] pc272e [ 564.931319][ T9121] comedi: valid board names for comedi_parport driver are: [ 565.012730][ T9121] comedi_parport [ 565.033162][ T9121] comedi: valid board names for comedi_test driver are: [ 565.050338][ T9121] comedi_test [ 565.080339][ T9121] comedi: valid board names for comedi_bond driver are: [ 565.265048][ T9121] comedi_bond [ 566.665022][ T9224] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1418'. [ 566.765878][ T9231] futex_wake_op: syz.5.1419 tries to shift op by 144; fix this program [ 569.359231][ T9256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.437293][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1431'. [ 569.484155][ T6052] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 569.730005][ T6052] usb 1-1: Using ep0 maxpacket: 8 [ 570.010169][ T6052] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 570.028726][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.054017][ T6052] usb 1-1: Product: syz [ 570.065277][ T6052] usb 1-1: Manufacturer: syz [ 570.084624][ T6052] usb 1-1: SerialNumber: syz [ 570.114725][ T6052] usb 1-1: config 0 descriptor?? [ 570.380232][ T6052] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 572.020235][ T6052] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 572.057924][ T6052] usb 1-1: USB disconnect, device number 9 [ 573.156244][ T9298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1443'. [ 574.375031][ T9306] futex_wake_op: syz.3.1444 tries to shift op by 144; fix this program [ 579.091167][ T9345] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1455'. [ 583.435387][ T9368] netlink: 'syz.4.1462': attribute type 8 has an invalid length. [ 586.904103][ T9397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.298841][ T9448] netlink: 'syz.2.1474': attribute type 8 has an invalid length. [ 596.142013][ T9476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1495'. [ 599.875251][ T9509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1506'. [ 603.065795][ T9545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1517'. [ 603.513408][ T9550] trusted_key: encrypted_key: key user:syz not found [ 608.578840][ T9605] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1533'. [ 613.158149][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'. [ 613.642640][ T9658] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1550'. [ 615.353773][ T9672] overlayfs: failed to clone upperpath [ 617.049512][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 618.484864][ T9712] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1566'. [ 620.495021][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 621.036989][ T9748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1579'. [ 623.714405][ T9774] netlink: 'syz.5.1588': attribute type 11 has an invalid length. [ 623.727760][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.737009][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.747233][ T9774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.034732][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.042714][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.142935][ T9784] infiniband syz0: set active [ 624.148421][ T9784] infiniband syz0: added veth1_to_bridge [ 624.150361][ T4233] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 624.168321][ T9788] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1592'. [ 624.247815][ T9784] RDS/IB: syz0: added [ 624.378016][ T9784] smc: adding ib device syz0 with port count 1 [ 624.385149][ T9784] smc: ib device syz0 port 1 has pnetid [ 625.680028][ T4233] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 625.770774][ T4233] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 625.809935][ T4233] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 625.990520][ T4233] usb 1-1: config 220 has no interface number 2 [ 626.004444][ T4233] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 626.031361][ T4233] usb 1-1: config 220 interface 0 has no altsetting 0 [ 626.548374][ T4233] usb 1-1: config 220 interface 76 has no altsetting 0 [ 626.555394][ T4233] usb 1-1: config 220 interface 1 has no altsetting 0 [ 627.170094][ T4233] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 627.200408][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.237047][ T4233] usb 1-1: Product: syz [ 627.244035][ T4233] usb 1-1: Manufacturer: syz [ 628.322861][ T4233] usb 1-1: can't set config #220, error -71 [ 628.335865][ T9830] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1604'. [ 628.360352][ T4233] usb 1-1: USB disconnect, device number 10 [ 629.603069][ T9852] netlink: 'syz.4.1599': attribute type 8 has an invalid length. [ 631.589234][ T9875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1616'. [ 636.830219][ T9936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1635'. [ 636.872384][ T9936] unsupported nlmsg_type 40 [ 641.569221][T10012] futex_wake_op: syz.0.1657 tries to shift op by 144; fix this program [ 644.009434][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 644.023092][T10030] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 644.770402][T10038] smc: removing ib device syz0 [ 645.093117][T10038] rdma_rxe: rxe-pd pool destroyed with unfree'd elem [ 645.099849][T10038] rdma_rxe: rxe-mr pool destroyed with unfree'd elem [ 645.107101][T10038] ------------[ cut here ]------------ [ 645.112601][T10038] WARNING: CPU: 1 PID: 10038 at drivers/infiniband/core/restrack.c:52 rdma_restrack_clean+0x2a6/0x300 [ 645.123573][T10038] Modules linked in: [ 645.127508][T10038] CPU: 1 PID: 10038 Comm: syz.4.1668 Not tainted syzkaller #0 [ 645.134975][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.145199][T10038] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 645.151211][T10038] Code: 50 8c 44 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 81 0f d5 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 15 89 fa e8 2a 8c 44 fa <0f> 0b e9 b9 fd ff ff e8 1e 8c 44 fa 0f 0b e9 f9 fd ff ff e8 12 8c [ 645.170846][T10038] RSP: 0018:ffffc90002e1f260 EFLAGS: 00010246 [ 645.176901][T10038] RAX: ffffffff8734a9e6 RBX: ffff8880790f9800 RCX: 0000000000080000 [ 645.185090][T10038] RDX: ffffc9000d281000 RSI: 000000000007ffff RDI: 0000000000080000 [ 645.193190][T10038] RBP: 1ffff11009dc51d8 R08: ffff88804ee28ed3 R09: 1ffff11009dc51da [ 645.201199][T10038] R10: dffffc0000000000 R11: ffffed1009dc51db R12: 1ffff11009dc51c9 [ 645.209174][T10038] R13: dffffc0000000000 R14: ffff88804ee28ec0 R15: ffff8880790f9848 [ 645.217350][T10038] FS: 00007fe42a0356c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 645.226411][T10038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.233016][T10038] CR2: 00007f75edc4d020 CR3: 000000007a08e000 CR4: 00000000003506e0 [ 645.241006][T10038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.248989][T10038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.256975][T10038] Call Trace: [ 645.260294][T10038] [ 645.263225][T10038] ib_dealloc_device+0x160/0x1f0 [ 645.268197][T10038] __ib_unregister_device+0x120/0x170 [ 645.273596][T10038] ib_unregister_device_and_put+0xb4/0xf0 [ 645.279311][T10038] nldev_dellink+0x281/0x310 [ 645.283914][T10038] ? nldev_newlink+0x580/0x580 [ 645.288898][T10038] ? __lock_acquire+0x13bc/0x7d10 [ 645.294019][T10038] ? apparmor_capable+0x12c/0x190 [ 645.299043][T10038] ? bpf_lsm_capable+0x5/0x10 [ 645.303731][T10038] ? security_capable+0x85/0xb0 [ 645.308578][T10038] ? nldev_newlink+0x580/0x580 [ 645.313361][T10038] rdma_nl_rcv+0x6be/0x9d0 [ 645.317793][T10038] ? rdma_nl_net_init+0x190/0x190 [ 645.322835][T10038] ? rcu_lock_release+0x5/0x20 [ 645.327604][T10038] netlink_unicast+0x774/0x920 [ 645.332410][T10038] netlink_sendmsg+0x8ba/0xbe0 [ 645.337183][T10038] ? netlink_getsockopt+0x570/0x570 [ 645.342397][T10038] ? aa_sock_msg_perm+0x94/0x150 [ 645.347327][T10038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.352633][T10038] ? security_socket_sendmsg+0x7c/0xa0 [ 645.358086][T10038] ? netlink_getsockopt+0x570/0x570 [ 645.363295][T10038] ____sys_sendmsg+0x5b7/0x8f0 [ 645.368076][T10038] ? __sys_sendmsg_sock+0x30/0x30 [ 645.373125][T10038] ? import_iovec+0x6f/0xa0 [ 645.377629][T10038] ___sys_sendmsg+0x236/0x2e0 [ 645.382331][T10038] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.387112][T10038] __se_sys_sendmsg+0x1af/0x290 [ 645.392225][T10038] ? __x64_sys_sendmsg+0x80/0x80 [ 645.397176][T10038] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 645.403171][T10038] ? lockdep_hardirqs_on+0x94/0x140 [ 645.408379][T10038] do_syscall_64+0x4c/0xa0 [ 645.412830][T10038] ? clear_bhb_loop+0x30/0x80 [ 645.417505][T10038] ? clear_bhb_loop+0x30/0x80 [ 645.422195][T10038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.428079][T10038] RIP: 0033:0x7fe42bddbe59 [ 645.432539][T10038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.452192][T10038] RSP: 002b:00007fe42a035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.460637][T10038] RAX: ffffffffffffffda RBX: 00007fe42c054fa0 RCX: 00007fe42bddbe59 [ 645.468612][T10038] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 645.476975][T10038] RBP: 00007fe42be71d6f R08: 0000000000000000 R09: 0000000000000000 [ 645.484960][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.493101][T10038] R13: 00007fe42c055038 R14: 00007fe42c054fa0 R15: 00007ffe9ee60098 [ 645.501101][T10038] [ 645.504124][T10038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 645.511395][T10038] CPU: 1 PID: 10038 Comm: syz.4.1668 Not tainted syzkaller #0 [ 645.518838][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.528890][T10038] Call Trace: [ 645.532157][T10038] [ 645.535081][T10038] dump_stack_lvl+0x188/0x250 [ 645.539755][T10038] ? show_regs_print_info+0x20/0x20 [ 645.544946][T10038] ? load_image+0x400/0x400 [ 645.549457][T10038] panic+0x2e5/0x810 [ 645.553357][T10038] ? bpf_jit_dump+0xd0/0xd0 [ 645.557864][T10038] ? rdma_restrack_clean+0x2a6/0x300 [ 645.563157][T10038] __warn+0x248/0x2b0 [ 645.567140][T10038] ? rdma_restrack_clean+0x2a6/0x300 [ 645.572417][T10038] report_bug+0x1b7/0x2e0 [ 645.576755][T10038] handle_bug+0x3a/0x70 [ 645.580900][T10038] exc_invalid_op+0x16/0x40 [ 645.585393][T10038] asm_exc_invalid_op+0x16/0x20 [ 645.590235][T10038] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 645.596116][T10038] Code: 50 8c 44 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 81 0f d5 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 15 89 fa e8 2a 8c 44 fa <0f> 0b e9 b9 fd ff ff e8 1e 8c 44 fa 0f 0b e9 f9 fd ff ff e8 12 8c [ 645.615717][T10038] RSP: 0018:ffffc90002e1f260 EFLAGS: 00010246 [ 645.621778][T10038] RAX: ffffffff8734a9e6 RBX: ffff8880790f9800 RCX: 0000000000080000 [ 645.629739][T10038] RDX: ffffc9000d281000 RSI: 000000000007ffff RDI: 0000000000080000 [ 645.637704][T10038] RBP: 1ffff11009dc51d8 R08: ffff88804ee28ed3 R09: 1ffff11009dc51da [ 645.645667][T10038] R10: dffffc0000000000 R11: ffffed1009dc51db R12: 1ffff11009dc51c9 [ 645.653633][T10038] R13: dffffc0000000000 R14: ffff88804ee28ec0 R15: ffff8880790f9848 [ 645.661597][T10038] ? rdma_restrack_clean+0x2a6/0x300 [ 645.666881][T10038] ib_dealloc_device+0x160/0x1f0 [ 645.671812][T10038] __ib_unregister_device+0x120/0x170 [ 645.677174][T10038] ib_unregister_device_and_put+0xb4/0xf0 [ 645.682885][T10038] nldev_dellink+0x281/0x310 [ 645.687488][T10038] ? nldev_newlink+0x580/0x580 [ 645.692243][T10038] ? __lock_acquire+0x13bc/0x7d10 [ 645.697322][T10038] ? apparmor_capable+0x12c/0x190 [ 645.702369][T10038] ? bpf_lsm_capable+0x5/0x10 [ 645.707037][T10038] ? security_capable+0x85/0xb0 [ 645.711900][T10038] ? nldev_newlink+0x580/0x580 [ 645.716661][T10038] rdma_nl_rcv+0x6be/0x9d0 [ 645.721255][T10038] ? rdma_nl_net_init+0x190/0x190 [ 645.726558][T10038] ? rcu_lock_release+0x5/0x20 [ 645.731343][T10038] netlink_unicast+0x774/0x920 [ 645.736131][T10038] netlink_sendmsg+0x8ba/0xbe0 [ 645.740901][T10038] ? netlink_getsockopt+0x570/0x570 [ 645.746101][T10038] ? aa_sock_msg_perm+0x94/0x150 [ 645.751044][T10038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.756330][T10038] ? security_socket_sendmsg+0x7c/0xa0 [ 645.761800][T10038] ? netlink_getsockopt+0x570/0x570 [ 645.767001][T10038] ____sys_sendmsg+0x5b7/0x8f0 [ 645.771773][T10038] ? __sys_sendmsg_sock+0x30/0x30 [ 645.776793][T10038] ? import_iovec+0x6f/0xa0 [ 645.781293][T10038] ___sys_sendmsg+0x236/0x2e0 [ 645.785973][T10038] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.790750][T10038] __se_sys_sendmsg+0x1af/0x290 [ 645.795599][T10038] ? __x64_sys_sendmsg+0x80/0x80 [ 645.800529][T10038] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 645.806519][T10038] ? lockdep_hardirqs_on+0x94/0x140 [ 645.811719][T10038] do_syscall_64+0x4c/0xa0 [ 645.816127][T10038] ? clear_bhb_loop+0x30/0x80 [ 645.820854][T10038] ? clear_bhb_loop+0x30/0x80 [ 645.825529][T10038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.831418][T10038] RIP: 0033:0x7fe42bddbe59 [ 645.835827][T10038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.855443][T10038] RSP: 002b:00007fe42a035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.863849][T10038] RAX: ffffffffffffffda RBX: 00007fe42c054fa0 RCX: 00007fe42bddbe59 [ 645.871812][T10038] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 645.879776][T10038] RBP: 00007fe42be71d6f R08: 0000000000000000 R09: 0000000000000000 [ 645.887741][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.895713][T10038] R13: 00007fe42c055038 R14: 00007fe42c054fa0 R15: 00007ffe9ee60098 [ 645.903706][T10038] [ 645.907143][T10038] Kernel Offset: disabled [ 645.911790][T10038] Rebooting in 86400 seconds..