last executing test programs: 14.628195092s ago: executing program 3 (id=776): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 13.582886124s ago: executing program 0 (id=779): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.559452726s ago: executing program 3 (id=780): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000003, 0xfa11, 0xfffffffe}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82a540, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x81, 0x8, 0x1}) ptrace(0x10, 0x0) socket$rds(0x15, 0x5, 0x0) 13.449368066s ago: executing program 2 (id=782): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.310009848s ago: executing program 0 (id=784): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.637416067s ago: executing program 4 (id=787): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010100000000fedbdf250a00000003000091002c0051d5ab914092bfab8c14f59432b715000800170000000000"], 0x24}}, 0x40800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) creat(0x0, 0xdafbe5d6891b6e4) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$UHID_INPUT(r2, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=@newtaction={0x5a4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x590, 0x1, [@m_police={0x12c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {0x81}, {0x0, 0x0, 0x20, 0x0, 0x3}, 0xfffffffd}}]]}, {0xc4, 0x6, "df2192511047575a9f9ef6ed7be80f804090cfba1a01293c067ab0262276c905070ab77e903d643e02b531d6be3edda6d05b5c6c53623065467a68e1b16cd3eaa7bc9f583af711172ea46c286944f0ee4d50ee9f8e295633ea7d87221ef149f4388f767e17d2b87d5e216363c965c16df5283232584d34ea62e9d9c776796d011c7706b6fdef016c884e2bd8d3e8eea5cc64f16f4e28636b143382638faa4baf988ccb2ac3e7eb29eb71e6b53d1ec66c844eb2b599c976f27251616cfad636ef"}, {0xc}, {0xc}}}, @m_police={0x460, 0x2, 0x0, 0x0, {{0xb}, {0x434, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x5, 0x23cee332, 0x10, 0x5, 0xea, 0x5, 0x2642, 0x2, 0x80, 0xc, 0x1188, 0x4, 0x8, 0x7fff, 0xffff, 0x7ff, 0x1, 0x0, 0x7, 0x9a0, 0x3, 0x3, 0x1, 0x4, 0x4, 0x3, 0x9, 0x8, 0xe6, 0x22b3, 0xfff, 0x4d, 0x6, 0x67946a03, 0x4083, 0x2, 0x80000001, 0x8, 0xb01, 0x9, 0x101, 0x3, 0x1ffe000, 0x2, 0x8c3e, 0x0, 0x1, 0x8, 0xddd3c85, 0x80000001, 0x8, 0x10000, 0xff, 0xc, 0x400, 0x9, 0x0, 0x4, 0x3de, 0x3, 0x6, 0x5, 0xffff, 0x3, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x2, 0x9, 0x80000000, 0x1, 0x7, 0x11, 0x909, 0x5bf2, 0x80, 0x2, 0x80000001, 0xd2aa, 0x0, 0x1, 0x2, 0x1, 0x40, 0x81, 0x4, 0x1, 0x4003, 0x3, 0xffffffff, 0x3, 0x7e7a, 0x233, 0x10001, 0x5, 0x4, 0xe, 0x7, 0x6, 0x6, 0x5, 0x5, 0xffffffff, 0xffff0426, 0x7, 0x5, 0x9, 0x7, 0x7, 0x3, 0x0, 0x2f67, 0x2, 0x8, 0x3, 0x6, 0x6, 0x7, 0x6293, 0xaf56, 0x8, 0xffffffff, 0x7, 0xe, 0x80000001, 0xfa, 0x6, 0x80000001, 0x8, 0x9, 0x8, 0x5, 0x7, 0x9, 0x58f, 0x1, 0x15, 0x5, 0x8, 0x0, 0x7, 0x4c7, 0x3, 0x8, 0x5, 0x9, 0x6, 0x1, 0xbf, 0x2, 0x7fffffff, 0xb242, 0x10, 0x80000001, 0xfffffeca, 0xa5, 0x9, 0xfff, 0x9fb0684, 0x53b, 0x2, 0x5, 0x0, 0x80000001, 0x7, 0x1, 0x8b31, 0x40, 0x0, 0x3, 0x7, 0x1000, 0x1ff, 0x8, 0x8000, 0x0, 0x6, 0x0, 0x6b5c, 0xffffff30, 0x58, 0x2, 0xffffff38, 0x8, 0x4, 0x4, 0x6, 0x9, 0x8, 0x6, 0x9, 0x4, 0x1, 0x2, 0xe, 0x3, 0x8, 0x9, 0x3, 0x2, 0xffffffff, 0x6, 0x40, 0x7019ca88, 0x29, 0x6, 0x0, 0x2000000, 0x9, 0xf090, 0x400, 0x3, 0x0, 0x9, 0x2, 0x7, 0x1, 0x5, 0x5fb, 0xfffffff8, 0x7, 0x7fffffff, 0x6, 0xc, 0xee, 0xe, 0x8, 0x10, 0x4, 0x6, 0x2, 0x8, 0xffff, 0x7, 0x49a, 0xf, 0x6, 0xe8b1, 0x8, 0x8, 0xee6, 0x4728, 0x7fffffff, 0x3, 0x9, 0x7, 0x0, 0x2, 0x1ff, 0x4, 0xfff, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x1) 10.188211893s ago: executing program 0 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0xc7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4}, {}, {0x4000000, 0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, {}, {0x9548, 0x0, 0xfff}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9}, {}, {}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x0, 0x41}, {}, {}, {}, {}, {}, {0x2}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x20004000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 10.160001036s ago: executing program 2 (id=789): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xf8, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRESHEX]) read$char_usb(r2, &(0x7f0000000080)=""/245, 0xf8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) 10.074612273s ago: executing program 4 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0xc7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4}, {}, {0x4000000, 0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, {}, {0x9548, 0x0, 0xfff}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9}, {}, {}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x0, 0x41}, {}, {}, {}, {}, {}, {0x2}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 8.952346552s ago: executing program 4 (id=792): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfffd, 0xfff8}}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa720, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x5}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x8001}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6e}]}}]}}]}, 0xac}}, 0x20040084) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x1, @loopback, 0xa09c}, {0xa, 0x3, 0xfffffffe, @loopback}, r5, 0x40099d}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010028bd7040010000000f000000", @ANYRES32=r7, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x5) unshare(0x22020400) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd"], 0x20}}, 0x8080) 8.392181211s ago: executing program 1 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10000, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4de084efcfd", 0x29, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x4a000200) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xbdc5, 0xe, 0x8c, 0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004) 7.144619521s ago: executing program 1 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = inotify_init1(0x80000) inotify_add_watch(r4, 0x0, 0x60000726) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10000, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4de084efcfd", 0x29, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x4a000200) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xbdc5, 0xe, 0x8c, 0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004) 7.080801397s ago: executing program 3 (id=796): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 7.079989607s ago: executing program 2 (id=797): mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x1ce6f317) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) getpgid(r0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r3, 0x0) 5.846811046s ago: executing program 1 (id=798): bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x3328}, {r0, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 5.666796371s ago: executing program 4 (id=799): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 5.530274693s ago: executing program 3 (id=800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.066960674s ago: executing program 2 (id=801): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x401, 0x2, 0x1c, {0xa, 0x1b59, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0xd}}, 0x24) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000012d0000000000000020000200"], 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040054) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="20110000", @ANYRES16=r2, @ANYBLOB="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"], 0x1120}}, 0x804) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') read$FUSE(r5, &(0x7f0000007700)={0x2020}, 0x2020) pread64(r5, &(0x7f0000004c40)=""/103, 0x67, 0x0) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'nicvf0\x00'}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.730548554s ago: executing program 4 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10000, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4de084efcfd", 0x29, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x4a000200) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xbdc5, 0xe, 0x8c, 0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004) 3.599502923s ago: executing program 0 (id=803): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.400417981s ago: executing program 0 (id=804): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x100003}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080d1}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000480)="bad330752181510000316f3a277f95", 0xf, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r6, 0x1, 0xda}, 0x14) 3.29651232s ago: executing program 1 (id=805): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.863256558s ago: executing program 1 (id=806): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.802183842s ago: executing program 1 (id=807): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x40000, 0xfffffe0000000003, 0xfa11, 0xfffffffe}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82a540, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x0, 0x1000, 0x0, 0x81, 0x8, 0x1}) ptrace(0x10, 0x0) socket$rds(0x15, 0x5, 0x0) 1.456549942s ago: executing program 4 (id=808): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xf8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESHEX]) read$char_usb(r3, &(0x7f0000000080)=""/245, 0xf8) close_range(r0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4], 0x0) 1.390249248s ago: executing program 2 (id=809): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) 1.353541701s ago: executing program 0 (id=810): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfffd, 0xfff8}}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa720, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x5}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x8001}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6e}]}}]}}]}, 0xac}}, 0x20040084) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x1, @loopback, 0xa09c}, {0xa, 0x3, 0xfffffffe, @loopback}, r5, 0x40099d}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010028bd7040010000000f000000", @ANYRES32=r7, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x3, 0x5) unshare(0x22020400) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd"], 0x20}}, 0x8080) 1.353093771s ago: executing program 3 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = inotify_init1(0x80000) inotify_add_watch(r4, 0x0, 0x60000726) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4de084efcfd", 0x29, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x4a000200) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0xbdc5, 0xe, 0x8c, 0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004) 173.800685ms ago: executing program 3 (id=812): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475d", 0x68}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=813): mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x1ce6f317) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) getpgid(r0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r3, 0x0) kernel console output (not intermixed with test programs): sr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.469459][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.478895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.487942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.497501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.507257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.516226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.524624][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.531769][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.540219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.550085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.559558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.569658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.578964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.588828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.602678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.611009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.620873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.630457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.639526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.657891][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.685830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.698427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.709479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.721125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.731419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.755429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.764242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.774722][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.792680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.801828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.810599][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.817729][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.827543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.836580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.845063][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.852225][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.860674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.869736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.879494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.888105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.895875][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 72.896142][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 72.902009][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 72.919494][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.934884][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.947040][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.973718][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.980564][ T1109] Bluetooth: hci1: command 0x041b tx timeout [ 72.993576][ T1109] Bluetooth: hci4: command 0x041b tx timeout [ 73.015047][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.056683][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.073008][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.083620][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.099293][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.110946][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.118110][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.132581][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.143485][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.158442][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.169792][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.206211][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.217231][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.228680][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.238986][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.254335][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.276450][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.297542][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.308594][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.317612][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.328620][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.339791][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.366772][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.374741][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.386636][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.398161][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.407870][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.416403][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.423855][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.444363][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.455304][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.462838][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.472058][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.482298][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.507694][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.517082][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.589222][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.623401][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.662229][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.677327][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.704425][ T4192] device veth0_vlan entered promiscuous mode [ 73.732274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.742788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.752425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.762930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.781763][ T4192] device veth1_vlan entered promiscuous mode [ 73.804685][ T4187] device veth0_vlan entered promiscuous mode [ 73.812138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.821657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.832643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.842072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.857418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.867946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.876875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.921686][ T4192] device veth0_macvtap entered promiscuous mode [ 73.929251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.939310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.949782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.958106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.966783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.974644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.983600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.992370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.001955][ T4199] device veth0_vlan entered promiscuous mode [ 74.027929][ T4192] device veth1_macvtap entered promiscuous mode [ 74.038954][ T4199] device veth1_vlan entered promiscuous mode [ 74.052502][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.061559][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.070196][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.079141][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.087818][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.095408][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.102918][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.117263][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.127929][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.135950][ T4187] device veth1_vlan entered promiscuous mode [ 74.153554][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.167509][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.178245][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.189191][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.199072][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.208484][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.218249][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.238288][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248163][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.259454][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269005][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299293][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.308782][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.332468][ T4199] device veth0_macvtap entered promiscuous mode [ 74.353110][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.361861][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.371687][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.383903][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.393266][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.413234][ T4199] device veth1_macvtap entered promiscuous mode [ 74.449308][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.458991][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.468653][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.486778][ T4187] device veth0_macvtap entered promiscuous mode [ 74.513319][ T4196] device veth0_vlan entered promiscuous mode [ 74.532091][ T4186] device veth0_vlan entered promiscuous mode [ 74.542868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.553610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.562871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.572022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.582650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.591532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.600313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.608808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.617522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.634241][ T4187] device veth1_macvtap entered promiscuous mode [ 74.651027][ T4186] device veth1_vlan entered promiscuous mode [ 74.669035][ T4196] device veth1_vlan entered promiscuous mode [ 74.681740][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.692744][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.705033][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.733399][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.748032][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.757999][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.766728][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.774873][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.785342][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.794075][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.804690][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.816787][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.828986][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.844914][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.857483][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.867925][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.878441][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.890691][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.910086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.919954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.929266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.938218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.949656][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.959422][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.968393][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.976700][ T1336] Bluetooth: hci0: command 0x040f tx timeout [ 74.980551][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.986406][ T1336] Bluetooth: hci2: command 0x040f tx timeout [ 75.008704][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.017522][ T1336] Bluetooth: hci3: command 0x040f tx timeout [ 75.024423][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.039925][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.051665][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056758][ T1336] Bluetooth: hci4: command 0x040f tx timeout [ 75.064402][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.075673][ T1336] Bluetooth: hci1: command 0x040f tx timeout [ 75.079684][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.096740][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.114391][ T4186] device veth0_macvtap entered promiscuous mode [ 75.124210][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.132378][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.142817][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.151663][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.162882][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.172182][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.181481][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.190880][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.203286][ T4196] device veth0_macvtap entered promiscuous mode [ 75.215443][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.224189][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.234111][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.243522][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267214][ T4186] device veth1_macvtap entered promiscuous mode [ 75.278244][ T4196] device veth1_macvtap entered promiscuous mode [ 75.287002][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.295993][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.303983][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.371149][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.382867][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.393201][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.403729][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.413944][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.425067][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.438167][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.457465][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.466180][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.495908][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.504987][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.515140][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.527084][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.539420][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.550231][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.561097][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.571453][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.582200][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.594327][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.606122][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.618516][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.634519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.643995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.653661][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.665503][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.676442][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.687684][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.698831][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.709892][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.722095][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.745010][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.758277][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.773657][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.784520][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.797694][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.808576][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.819240][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.830402][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.842165][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.850387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.872175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.884477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.894962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.918151][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927580][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.937110][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.946885][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.960415][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.970058][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.979417][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.989242][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006976][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.014857][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.084306][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.110700][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.128424][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.170318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.208818][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.230084][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.260921][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.276118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.283766][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.344895][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.354748][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.368643][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.386268][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.477318][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.521961][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.591405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.614907][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.624301][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.642104][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.661963][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.677933][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.694430][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.056661][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 77.063077][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 77.094705][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 77.139470][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 77.163636][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 77.443043][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.706361][ T4310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.735694][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.949221][ T4295] Zero length message leads to an empty skb [ 77.976446][ T4314] device syzkaller0 entered promiscuous mode [ 78.005305][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 78.135736][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 78.365717][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.395789][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.423255][ T13] usb 4-1: Product: syz [ 78.454186][ T13] usb 4-1: Manufacturer: syz [ 78.474710][ T13] usb 4-1: SerialNumber: syz [ 78.516552][ T13] usb 4-1: config 0 descriptor?? [ 78.556608][ T4304] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.971022][ T4270] syz.2.3 (4270): drop_caches: 1 [ 79.734784][ T4330] loop2: detected capacity change from 0 to 128 [ 79.876521][ T4330] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.902421][ T4330] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.335564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.344582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.354056][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 80.467304][ T1109] usb 4-1: USB disconnect, device number 2 [ 80.523863][ T4342] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 80.603069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 80.653754][ T4342] team0: Port device macvlan1 added [ 80.999753][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 81.107746][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 81.253248][ T4360] device syzkaller0 entered promiscuous mode [ 81.271389][ T4360] tipc: Started in network mode [ 81.271464][ T4360] tipc: Node identity 16c869ffac93, cluster identity 4711 [ 81.271767][ T4360] tipc: Enabled bearer , priority 0 [ 81.289941][ T4359] tipc: Resetting bearer [ 81.344592][ T4359] tipc: Disabling bearer [ 81.551411][ T4366] loop2: detected capacity change from 0 to 128 [ 81.755819][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.766652][ T4366] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.806443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 82.257940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 83.572440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.674837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.879599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.524227][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 84.540436][ T4419] loop0: detected capacity change from 0 to 128 [ 84.600636][ T4400] block device autoloading is deprecated and will be removed. [ 84.645530][ T4419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.656366][ T4419] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.721419][ T4400] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 85.450898][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 85.545629][ T4400] syz.3.39 (4400) used greatest stack depth: 21136 bytes left [ 85.553491][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 85.585555][ T4435] device bond0 entered promiscuous mode [ 85.618913][ T4435] device bond_slave_0 entered promiscuous mode [ 85.637054][ T4435] device bond_slave_1 entered promiscuous mode [ 85.702329][ T4435] device bond0 left promiscuous mode [ 85.733139][ T4435] device bond_slave_0 left promiscuous mode [ 85.755523][ T4435] device bond_slave_1 left promiscuous mode [ 86.098514][ T4440] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 86.180173][ T4446] process 'syz.1.51' launched './file1' with NULL argv: empty string added [ 86.407981][ T4451] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 86.739854][ T1112] cfg80211: failed to load regulatory.db [ 86.847013][ T4457] loop3: detected capacity change from 0 to 128 [ 86.999886][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.010746][ T4457] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.381515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 87.535989][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.845416][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.915509][ T1109] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 87.933127][ T1109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.961035][ T1109] usb 3-1: config 0 has no interface number 0 [ 87.977790][ T1109] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 88.005479][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.029243][ T1109] usb 3-1: config 0 descriptor?? [ 88.161148][ T4235] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 88.171336][ T1109] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 88.255492][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.273341][ T4235] usb 5-1: config 0 has no interfaces? [ 88.355542][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.374292][ T4235] usb 5-1: config 0 has no interfaces? [ 88.469632][ T4485] udc-core: couldn't find an available UDC or it's busy [ 88.481561][ T4485] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.489778][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.522348][ T4235] usb 5-1: config 0 has no interfaces? [ 88.565681][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.605543][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.627332][ T4235] usb 5-1: config 0 has no interfaces? [ 88.715535][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.756495][ T4235] usb 5-1: config 0 has no interfaces? [ 88.825299][ T1109] usb 4-1: Using ep0 maxpacket: 16 [ 88.835390][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.855248][ T4235] usb 5-1: config 0 has no interfaces? [ 88.965443][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.975916][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.995246][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.013277][ T4235] usb 5-1: config 0 has no interfaces? [ 89.033645][ T1109] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.062751][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.104066][ T1109] usb 4-1: config 0 descriptor?? [ 89.115738][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.135399][ T4235] usb 5-1: config 0 has no interfaces? [ 89.147957][ T1109] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 89.225497][ T393] usb 3-1: Failed to submit usb control message: -110 [ 89.244233][ T393] usb 3-1: unable to send the bmi data to the device: -110 [ 89.274714][ T393] usb 3-1: unable to get target info from device [ 89.294157][ T393] usb 3-1: could not get target info (-110) [ 89.332359][ T393] usb 3-1: could not probe fw (-110) [ 89.355510][ T4235] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.383163][ T4235] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.402279][ T4235] usb 5-1: Product: syz [ 89.413479][ T4235] usb 5-1: Manufacturer: syz [ 89.437700][ T4235] usb 5-1: SerialNumber: syz [ 89.478245][ T4235] usb 5-1: config 0 descriptor?? [ 89.819775][ T4235] usb 5-1: USB disconnect, device number 2 [ 89.845138][ T4500] loop1: detected capacity change from 0 to 128 [ 89.915129][ T4500] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.940103][ T4500] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.327042][ T4511] device syzkaller0 entered promiscuous mode [ 91.363658][ T4511] tipc: Started in network mode [ 91.385334][ T4511] tipc: Node identity ae409dc8398f, cluster identity 4711 [ 91.408520][ T4511] tipc: Enabled bearer , priority 0 [ 91.443419][ T4510] tipc: Resetting bearer [ 91.543137][ T4510] tipc: Disabling bearer [ 91.982669][ T13] usb 3-1: USB disconnect, device number 2 [ 93.062611][ T4536] loop4: detected capacity change from 0 to 128 [ 93.091513][ T4235] usb 4-1: USB disconnect, device number 3 [ 93.156124][ T4536] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.248050][ T4536] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.439831][ T4554] loop0: detected capacity change from 0 to 2048 [ 94.529829][ T4554] ======================================================= [ 94.529829][ T4554] WARNING: The mand mount option has been deprecated and [ 94.529829][ T4554] and is ignored by this kernel. Remove the mand [ 94.529829][ T4554] option from the mount to silence this warning. [ 94.529829][ T4554] ======================================================= [ 94.824268][ T4554] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 94.868124][ T4554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.875515][ T4509] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.245506][ T4509] usb 5-1: config 0 has no interfaces? [ 95.415511][ T4509] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 95.484117][ T4509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.508715][ T4509] usb 5-1: Product: syz [ 95.525506][ T4509] usb 5-1: Manufacturer: syz [ 95.550610][ T4509] usb 5-1: SerialNumber: syz [ 95.614677][ T4509] usb 5-1: config 0 descriptor?? [ 96.380246][ T4557] udc-core: couldn't find an available UDC or it's busy [ 96.395287][ T4557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.610081][ T1112] usb 5-1: USB disconnect, device number 3 [ 97.932413][ T1112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 97.949598][ T1112] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 97.967419][ T1112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.977611][ T4596] loop0: detected capacity change from 0 to 128 [ 97.985268][ T1112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 97.992808][ T1112] hid-generic 0000:0000:0000.0001: unknown main item tag 0xd [ 98.014451][ T4557] syz.4.84 (4557) used greatest stack depth: 20496 bytes left [ 98.031337][ T1112] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.096528][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.096668][ T4596] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.218041][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.944509][ T4619] device syzkaller0 entered promiscuous mode [ 99.567601][ T4611] fido_id[4611]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.084962][ T4645] loop0: detected capacity change from 0 to 128 [ 101.101844][ T4645] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.122910][ T4645] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.325356][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.404685][ T4657] loop1: detected capacity change from 0 to 128 [ 101.482379][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.619638][ T4657] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.765449][ T1109] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.785442][ T1109] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.845757][ T1109] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.885229][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.970496][ T1109] usb 3-1: invalid MIDI out EP 0 [ 102.213406][ T1109] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 102.392198][ T4673] udevd[4673]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.499968][ T1109] usb 3-1: USB disconnect, device number 3 [ 102.628854][ T4175] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.859608][ T4684] netlink: 92 bytes leftover after parsing attributes in process `syz.4.124'. [ 103.075716][ T4175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.102475][ T4175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.119359][ T4175] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.159359][ T4691] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[4691] [ 103.305519][ T4175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 103.322979][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.372069][ T4175] usb 2-1: Product: syz [ 103.404329][ T4175] usb 2-1: Manufacturer: syz [ 103.421633][ T4175] usb 2-1: SerialNumber: syz [ 103.462831][ T4697] loop2: detected capacity change from 0 to 128 [ 103.566213][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.586355][ T4697] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.714810][ T4175] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.727750][ T4703] loop0: detected capacity change from 0 to 128 [ 103.818721][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.841216][ T4175] usb 2-1: USB disconnect, device number 2 [ 103.848184][ T4703] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.867853][ T4175] usblp0: removed [ 103.991613][ T4709] netlink: 'syz.4.133': attribute type 6 has an invalid length. [ 104.106137][ T4712] loop9: detected capacity change from 0 to 7 [ 104.121505][ T4712] Dev loop9: unable to read RDB block 7 [ 104.142963][ T4712] loop9: unable to read partition table [ 104.152381][ T4712] loop9: partition table beyond EOD, truncated [ 104.167743][ T4712] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.315364][ T1112] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.446694][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 104.605299][ T1112] usb 5-1: Using ep0 maxpacket: 8 [ 104.765760][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 104.790048][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 104.826703][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.878949][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 104.910296][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 104.940817][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 105.039080][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.048137][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.060288][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.072164][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 105.086527][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.100599][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 105.185492][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.199518][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.241411][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.271525][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 105.287233][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.346194][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 105.605517][ T1112] usb 5-1: string descriptor 0 read error: -22 [ 105.612417][ T1112] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.634405][ T1112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.687077][ T1112] adutux 5-1:168.0: interrupt endpoints not found [ 105.811591][ T4747] loop3: detected capacity change from 0 to 128 [ 105.860354][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.874827][ T4747] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.902337][ T13] usb 5-1: USB disconnect, device number 4 [ 106.197615][ T4752] fuse: Bad value for 'fd' [ 107.768052][ T4783] loop4: detected capacity change from 0 to 128 [ 107.815326][ T1109] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 107.885907][ T4783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.905413][ T4783] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.936149][ T4774] udc-core: couldn't find an available UDC or it's busy [ 108.943170][ T4774] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.285459][ T1109] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.490338][ T1109] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 109.498463][ T1109] usb 3-1: can't read configurations, error -71 [ 109.534192][ T4810] fuse: Bad value for 'fd' [ 111.084081][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 112.880371][ T4852] device syzkaller0 entered promiscuous mode [ 112.928964][ T4852] tipc: Enabled bearer , priority 0 [ 112.956411][ T4851] tipc: Resetting bearer [ 113.037919][ T4851] tipc: Disabling bearer [ 114.605320][ T1109] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.865408][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 115.005717][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 115.046461][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 115.235659][ T1109] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.258341][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.280662][ T1109] usb 2-1: Product: syz [ 115.291674][ T1109] usb 2-1: Manufacturer: syz [ 115.322578][ T1109] usb 2-1: SerialNumber: syz [ 115.392787][ T1109] usb 2-1: config 0 descriptor?? [ 115.885688][ T21] usb 2-1: USB disconnect, device number 3 [ 116.278389][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.287073][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.635304][ T1109] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.702791][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.744582][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.005367][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.016951][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.029817][ T1109] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 118.039241][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.057455][ T1109] usb 5-1: config 0 descriptor?? [ 118.296238][ T4873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.307408][ T4873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.318087][ T4873] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.327284][ T4873] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.473860][ T4896] device syzkaller0 entered promiscuous mode [ 118.569222][ T1109] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 118.587343][ T1109] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 118.609486][ T1109] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input5 [ 118.680136][ T1109] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 118.798784][ T1109] usb 5-1: USB disconnect, device number 5 [ 118.838037][ T4928] loop0: detected capacity change from 0 to 128 [ 118.969596][ T4928] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.990662][ T4928] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.027778][ T4918] could not allocate digest TFM handle [ 119.512649][ T4946] loop4: detected capacity change from 0 to 128 [ 119.535303][ T1112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.614817][ T4946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.626394][ T4946] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.637261][ T4944] fido_id[4944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.815269][ T1112] usb 1-1: Using ep0 maxpacket: 16 [ 119.873571][ T4946] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 119.955481][ T1112] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 120.155697][ T1112] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.180281][ T1112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.256023][ T1112] usb 1-1: Product: syz [ 120.275297][ T1112] usb 1-1: Manufacturer: syz [ 120.310298][ T1112] usb 1-1: SerialNumber: syz [ 120.326147][ T1112] usb 1-1: config 0 descriptor?? [ 120.346997][ T4965] device syzkaller0 entered promiscuous mode [ 120.428758][ T4965] tipc: Enabled bearer , priority 0 [ 120.506150][ T4964] tipc: Resetting bearer [ 120.596383][ T4964] tipc: Disabling bearer [ 120.928087][ T4972] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.970120][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 122.025043][ T4984] loop3: detected capacity change from 0 to 128 [ 122.145885][ T4984] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.156573][ T4984] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.299885][ T1112] usb 1-1: USB disconnect, device number 2 [ 122.398149][ T4992] loop0: detected capacity change from 0 to 128 [ 122.570918][ T4992] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.695480][ T4237] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.699304][ T4992] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.017600][ T5009] loop1: detected capacity change from 0 to 128 [ 123.135443][ T4237] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 123.178939][ T5009] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.206078][ T4237] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.223271][ T5009] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.256160][ T4237] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.320343][ T4237] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.360025][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.456615][ T4237] usb 4-1: invalid MIDI out EP 0 [ 123.931717][ T4237] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 125.448889][ T4911] usb 4-1: USB disconnect, device number 4 [ 125.470133][ T4673] udevd[4673]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.681822][ T5046] loop4: detected capacity change from 0 to 128 [ 126.801911][ T5046] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.839702][ T5046] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.025422][ T5057] loop3: detected capacity change from 0 to 128 [ 127.108595][ T5057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.123361][ T5057] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.125246][ T4911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.385332][ T4911] usb 4-1: Using ep0 maxpacket: 32 [ 128.506060][ T4911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.557071][ T4911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.573779][ T5081] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 128.612337][ T4911] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.654676][ T4911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.705264][ T4911] usb 4-1: config 0 descriptor?? [ 128.766570][ T4911] hub 4-1:0.0: USB hub found [ 128.965288][ T1109] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.004453][ T5067] udc-core: couldn't find an available UDC or it's busy [ 129.021738][ T5067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.075392][ T4911] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 129.215401][ T4911] usbhid 4-1:0.0: can't add hid device: -71 [ 129.221521][ T4911] usbhid: probe of 4-1:0.0 failed with error -71 [ 129.296124][ T4911] usb 4-1: USB disconnect, device number 5 [ 129.348708][ T5086] fuse: Bad value for 'fd' [ 129.724344][ T5094] device syzkaller0 entered promiscuous mode [ 129.765084][ T5094] tipc: Started in network mode [ 129.790199][ T5094] tipc: Node identity ea6c34195336, cluster identity 4711 [ 129.815407][ T1109] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 129.838050][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.849032][ T5094] tipc: Enabled bearer , priority 0 [ 129.896566][ T1109] usb 5-1: Product: syz [ 129.902387][ T5092] tipc: Resetting bearer [ 129.913381][ T1109] usb 5-1: Manufacturer: syz [ 129.929563][ T1109] usb 5-1: SerialNumber: syz [ 129.975704][ T1109] usb 5-1: config 0 descriptor?? [ 130.051940][ T5092] tipc: Disabling bearer [ 130.136007][ T1109] hub 5-1:0.0: bad descriptor, ignoring hub [ 130.146035][ T1109] hub: probe of 5-1:0.0 failed with error -5 [ 130.197725][ T1109] f81232 5-1:0.0: f81534a converter detected [ 130.278266][ T5104] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 130.497685][ T1109] usb 5-1: f81534a converter now attached to ttyUSB0 [ 130.728847][ T5080] capability: warning: `syz.4.240' uses deprecated v2 capabilities in a way that may be insecure [ 130.855546][ T5108] netlink: 'syz.0.249': attribute type 12 has an invalid length. [ 130.863420][ T5108] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 130.871688][ T5108] netlink: 148 bytes leftover after parsing attributes in process `syz.0.249'. [ 131.174983][ T5120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.254'. [ 131.196948][ T5122] netlink: 80 bytes leftover after parsing attributes in process `syz.1.256'. [ 131.206165][ T5120] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (16777212) [ 131.255312][ T5120] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 131.471905][ T5128] device syzkaller0 entered promiscuous mode [ 131.512923][ T5128] tipc: Enabled bearer , priority 0 [ 131.533105][ T5127] tipc: Resetting bearer [ 131.555807][ T5132] fuse: Bad value for 'fd' [ 131.604916][ T5127] tipc: Disabling bearer [ 132.176303][ T4237] usb 5-1: USB disconnect, device number 6 [ 132.211262][ T4237] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 132.278011][ T4237] f81232 5-1:0.0: device disconnected [ 132.816671][ T4912] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 132.824657][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832036][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159326][ T5151] udc-core: couldn't find an available UDC or it's busy [ 133.191868][ T5151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 133.487694][ T4912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.578190][ T4912] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.610504][ T4912] usb 2-1: can't read configurations, error -71 [ 134.167907][ T5161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.186628][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.499446][ T5174] device syzkaller0 entered promiscuous mode [ 135.526531][ T5172] device syzkaller0 entered promiscuous mode [ 135.550063][ T5174] tipc: Started in network mode [ 135.555024][ T5174] tipc: Node identity 7a9044eb6621, cluster identity 4711 [ 135.705107][ T5174] tipc: Enabled bearer , priority 0 [ 136.628465][ T5173] tipc: Resetting bearer [ 136.668197][ T5186] fuse: Bad value for 'fd' [ 136.682736][ T5173] tipc: Disabling bearer [ 136.973069][ T5191] loop1: detected capacity change from 0 to 128 [ 137.918865][ T5191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.929810][ T5191] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.995280][ T4175] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 138.065480][ T5201] device syzkaller0 entered promiscuous mode [ 138.480897][ T5193] udc-core: couldn't find an available UDC or it's busy [ 138.499193][ T5193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.586077][ T4237] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.705668][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 138.825460][ T4175] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.855209][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 138.905443][ T4175] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.923293][ T4175] usb 5-1: can't read configurations, error -71 [ 139.000983][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.028635][ T4237] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.090715][ T4237] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 139.124472][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.154162][ T4237] usb 2-1: config 0 descriptor?? [ 139.677888][ T4237] logitech 0003:046D:C623.0003: item fetching failed at offset 8/69 [ 139.692728][ T4237] logitech 0003:046D:C623.0003: parse failed [ 139.707091][ T4237] logitech: probe of 0003:046D:C623.0003 failed with error -22 [ 140.062415][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 140.503743][ T5246] device syzkaller0 entered promiscuous mode [ 140.567979][ T5246] tipc: Started in network mode [ 140.584650][ T5246] tipc: Node identity 0aff149d32cc, cluster identity 4711 [ 140.742485][ T5246] tipc: Enabled bearer , priority 0 [ 141.582510][ T5244] tipc: Resetting bearer [ 141.660431][ T5244] tipc: Disabling bearer [ 142.155494][ T4232] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 142.345366][ T1109] usb 2-1: USB disconnect, device number 6 [ 142.355727][ T4911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.499002][ T5256] udc-core: couldn't find an available UDC or it's busy [ 142.536709][ T5256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.735540][ T4911] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 142.739330][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.770808][ T4911] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.819992][ T4911] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.846062][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 142.859422][ T4232] usb 4-1: can't read configurations, error -71 [ 142.882958][ T4911] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.907187][ T4911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.998957][ T4911] usb 5-1: invalid MIDI out EP 0 [ 144.042573][ T4911] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 144.114923][ T5285] device syzkaller0 entered promiscuous mode [ 144.267873][ T5285] tipc: Enabled bearer , priority 0 [ 145.056640][ T5282] tipc: Resetting bearer [ 145.080508][ T4175] usb 5-1: USB disconnect, device number 9 [ 145.133032][ T5296] program syz.3.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.309415][ T5282] tipc: Disabling bearer [ 145.348045][ T4673] udevd[4673]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.459376][ T4175] tipc: Node number set to 3126553087 [ 145.528483][ T26] audit: type=1800 audit(1771873987.275:2): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.315" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 147.535408][ T4912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.566666][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.966310][ T4912] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 147.977630][ T21] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 148.288229][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.300334][ T4912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.368060][ T4912] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.381594][ T21] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.402397][ T4912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.411635][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.429335][ T4912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.437703][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.485493][ T5345] device syzkaller0 entered promiscuous mode [ 148.533780][ T4912] usb 2-1: invalid MIDI out EP 0 [ 148.598668][ T5343] tipc: Enabled bearer , priority 0 [ 148.617095][ T5342] tipc: Resetting bearer [ 148.677440][ T21] usb 4-1: invalid MIDI out EP 0 [ 148.683620][ T4912] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 148.706947][ T5342] tipc: Disabling bearer [ 148.742047][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.784429][ T26] audit: type=1800 audit(1771873990.525:3): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.328" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 148.894886][ T21] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 148.928614][ T5351] fuse: Bad value for 'user_id' [ 148.997674][ T4673] udevd[4673]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.172151][ T5360] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.270596][ T21] usb 2-1: USB disconnect, device number 7 [ 149.405414][ T4912] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.524218][ T4911] usb 4-1: USB disconnect, device number 8 [ 149.695408][ T4912] usb 1-1: Using ep0 maxpacket: 32 [ 149.835951][ T4912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.024464][ T4912] usb 1-1: config 0 has no interfaces? [ 150.119430][ T4912] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 150.276425][ T4912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.506366][ T4912] usb 1-1: config 0 descriptor?? [ 150.815358][ T4232] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.285990][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.375363][ T4232] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 151.400304][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.685336][ T4509] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.455249][ T4509] usb 4-1: Using ep0 maxpacket: 32 [ 153.537833][ T4232] usb 5-1: config 0 descriptor?? [ 154.425368][ T4509] usb 4-1: device descriptor read/all, error -71 [ 154.425518][ T4232] usb 5-1: can't set config #0, error -71 [ 155.422074][ T4240] usb 1-1: USB disconnect, device number 3 [ 155.439868][ T5391] loop3: detected capacity change from 0 to 32768 [ 155.447584][ T4232] usb 5-1: USB disconnect, device number 10 [ 155.577688][ T5391] (syz.3.339,5391,0):ocfs2_verify_heartbeat:815 ERROR: Cannot heartbeat on a locally mounted device. [ 155.591092][ T5391] (syz.3.339,5391,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 155.610407][ T5391] (syz.3.339,5391,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 156.353864][ T5389] tipc: Enabling of bearer rejected, failed to enable media [ 156.406587][ T5389] loop2: detected capacity change from 0 to 7 [ 156.435560][ T1112] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.452891][ T4178] Dev loop2: unable to read RDB block 7 [ 156.459176][ T4178] loop2: unable to read partition table [ 156.485442][ T4178] loop2: partition table beyond EOD, truncated [ 156.498326][ T5389] Dev loop2: unable to read RDB block 7 [ 156.518385][ T5389] loop2: unable to read partition table [ 156.537000][ T5396] loop0: detected capacity change from 0 to 4096 [ 156.548146][ T5389] loop2: partition table beyond EOD, truncated [ 156.577942][ T5389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.595553][ T5396] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 156.795661][ T1112] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.838671][ T1112] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.935782][ T1112] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.811032][ T1112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.581925][ T1112] usb 2-1: SerialNumber: syz [ 159.625381][ T1112] usb 2-1: can't set config #1, error -71 [ 159.647738][ T1112] usb 2-1: USB disconnect, device number 8 [ 160.670230][ T5421] loop1: detected capacity change from 0 to 512 [ 160.958437][ T5421] EXT4-fs (loop1): Ignoring removed oldalloc option [ 161.089978][ T5432] fuse: Bad value for 'fd' [ 161.101231][ T5421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.337148][ T5421] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.443768][ T5421] EXT4-fs (loop1): 1 truncate cleaned up [ 162.450873][ T5421] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 162.483688][ T26] audit: type=1800 audit(1771874004.225:4): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.351" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.571132][ T5441] fuse: Invalid rootmode [ 162.681108][ T5444] loop4: detected capacity change from 0 to 1024 [ 162.749840][ T5444] EXT4-fs (loop4): Ignoring removed bh option [ 162.756264][ T5444] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 163.005272][ T4912] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.735531][ T4912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 164.937618][ T5464] loop2: detected capacity change from 0 to 7 [ 165.063976][ T4179] Dev loop2: unable to read RDB block 7 [ 165.110217][ T4179] loop2: unable to read partition table [ 165.204988][ T4179] loop2: partition table beyond EOD, truncated [ 165.538784][ T4912] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.549889][ T4912] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.562851][ T4912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.572002][ T4912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.586381][ T5464] Dev loop2: unable to read RDB block 7 [ 165.592289][ T5464] loop2: unable to read partition table [ 165.713690][ T5464] loop2: partition table beyond EOD, truncated [ 165.821399][ T5464] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.965372][ T4912] usb 1-1: can't set config #27, error -71 [ 167.005610][ T4912] usb 1-1: USB disconnect, device number 4 [ 167.504421][ T5472] loop0: detected capacity change from 0 to 256 [ 170.905887][ T5494] tipc: Enabled bearer , priority 0 [ 170.915102][ T5493] tipc: Disabling bearer [ 172.226164][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.243548][ T5505] loop1: detected capacity change from 0 to 32768 [ 172.324007][ T5505] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.379 (5505) [ 172.381364][ T5505] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 172.391518][ T5505] BTRFS info (device loop1): using free space tree [ 172.398230][ T5505] BTRFS info (device loop1): has skinny extents [ 172.625835][ T21] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.050529][ T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.066292][ T21] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.079627][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.089105][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.129548][ T21] usb 1-1: can't set config #27, error -71 [ 176.146197][ T21] usb 1-1: USB disconnect, device number 5 [ 176.299829][ T5505] BTRFS error (device loop1): open_ctree failed: -12 [ 176.306721][ T4179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4179) [ 179.536450][ T4272] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.925248][ T4272] usb 4-1: Using ep0 maxpacket: 32 [ 181.095621][ T4272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.131267][ T4272] usb 4-1: config 0 has no interfaces? [ 181.150925][ T5615] device syzkaller0 entered promiscuous mode [ 181.174970][ T4272] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 181.222917][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.311241][ T4272] usb 4-1: config 0 descriptor?? [ 181.694330][ T5626] fuse: Invalid rootmode [ 183.276015][ T21] usb 4-1: USB disconnect, device number 11 [ 184.616719][ T5654] device syzkaller0 entered promiscuous mode [ 185.117280][ T5668] fuse: Invalid rootmode [ 185.323124][ T5638] loop0: detected capacity change from 0 to 32768 [ 185.397241][ T5638] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 185.455933][ T5638] BTRFS info (device loop0): using free space tree [ 185.482128][ T5638] BTRFS info (device loop0): has skinny extents [ 186.922197][ T5638] BTRFS error (device loop0): open_ctree failed: -12 [ 188.175820][ T5713] netlink: 92 bytes leftover after parsing attributes in process `syz.2.420'. [ 189.514124][ T5734] tipc: Enabled bearer , priority 0 [ 189.664238][ T5738] fuse: Unknown parameter '00000000000000000000' [ 189.675376][ T5732] tipc: Disabling bearer [ 192.044243][ T5538] Bluetooth: hci3: command 0x0406 tx timeout [ 192.055230][ T5538] Bluetooth: hci2: command 0x0406 tx timeout [ 192.061714][ T5538] Bluetooth: hci0: command 0x0406 tx timeout [ 192.071098][ T5538] Bluetooth: hci1: command 0x0406 tx timeout [ 192.095204][ T5538] Bluetooth: hci4: command 0x0406 tx timeout [ 193.631058][ T5765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.438'. [ 193.786142][ T5772] fuse: Unknown parameter 'user00000000000000000000' [ 194.263235][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270321][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.369721][ T5800] device syzkaller0 entered promiscuous mode [ 196.666949][ T5804] netlink: 92 bytes leftover after parsing attributes in process `syz.1.450'. [ 196.939278][ T5813] tipc: Enabling of bearer rejected, failed to enable media [ 197.196350][ T5824] fuse: Unknown parameter 'user_i00000000000000000000' [ 197.631566][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 199.526357][ T5849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 199.557264][ T5849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.462'. [ 199.738168][ T5864] tipc: Enabling of bearer rejected, failed to enable media [ 199.825461][ T26] audit: type=1326 audit(1771874809.550:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 199.983660][ T5869] binder: BINDER_SET_CONTEXT_MGR already set [ 200.021336][ T26] audit: type=1326 audit(1771874809.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.221238][ T26] audit: type=1326 audit(1771874809.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.243987][ T5869] binder: 5867:5869 ioctl 4018620d 200000004a80 returned -16 [ 200.251751][ T26] audit: type=1326 audit(1771874809.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.279360][ T26] audit: type=1326 audit(1771874809.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.351887][ T26] audit: type=1326 audit(1771874809.560:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.381327][ T26] audit: type=1326 audit(1771874809.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.410364][ T26] audit: type=1326 audit(1771874809.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.441845][ T26] audit: type=1326 audit(1771874809.560:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.471906][ T26] audit: type=1326 audit(1771874809.560:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f065742f629 code=0x7ffc0000 [ 200.575317][ T5538] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.995535][ T5538] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.016303][ T5538] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.190086][ T5538] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.372275][ T5538] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.473123][ T5538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.735378][ T4913] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 201.815898][ T5538] usb 5-1: invalid MIDI out EP 0 [ 202.015443][ T4913] usb 3-1: Using ep0 maxpacket: 32 [ 202.088181][ T5538] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 202.135681][ T4913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.516618][ T4913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.524435][ T5349] udevd[5349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.625612][ T4913] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 202.673379][ T4913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.705740][ T4914] usb 5-1: USB disconnect, device number 11 [ 202.717095][ T4913] usb 3-1: config 0 descriptor?? [ 203.217907][ T5912] tipc: Enabling of bearer rejected, failed to enable media [ 205.365653][ T5704] usb 3-1: USB disconnect, device number 6 [ 205.485587][ T5934] fuse: Unknown parameter 'user_i00000000000000000000' [ 209.282488][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 209.334303][ T5948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'. [ 210.480605][ T5956] tipc: Enabling of bearer rejected, failed to enable media [ 210.504106][ T5956] loop2: detected capacity change from 0 to 7 [ 210.606919][ T5956] Dev loop2: unable to read RDB block 7 [ 211.634898][ T5956] loop2: unable to read partition table [ 211.662814][ T5956] loop2: partition table beyond EOD, truncated [ 211.704735][ T5956] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.945180][ T5704] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 213.325193][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 213.476294][ T5704] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.514175][ T5989] fuse: Unknown parameter 'user_id00000000000000000000' [ 213.572356][ T5704] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 214.062989][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.078490][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 214.099675][ T5704] usb 5-1: config 0 descriptor?? [ 214.174804][ T5993] netlink: 52 bytes leftover after parsing attributes in process `syz.1.499'. [ 214.238036][ T5995] fuse: Unknown parameter 'user00000000000000000000' [ 215.799915][ T4272] usb 5-1: USB disconnect, device number 12 [ 216.079624][ T6024] tipc: Enabling of bearer rejected, failed to enable media [ 216.111904][ T6024] loop2: detected capacity change from 0 to 7 [ 216.134047][ T6024] Dev loop2: unable to read RDB block 7 [ 216.145839][ T6024] loop2: unable to read partition table [ 216.159497][ T6024] loop2: partition table beyond EOD, truncated [ 216.192987][ T6024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.465247][ T4272] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 216.808305][ T6028] udc-core: couldn't find an available UDC or it's busy [ 216.856699][ T6028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 216.938760][ T6028] netlink: 76 bytes leftover after parsing attributes in process `syz.0.506'. [ 217.040385][ T6038] fuse: Unknown parameter 'user_id00000000000000000000' [ 217.155338][ T4272] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.235323][ T4272] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 217.254336][ T4272] usb 1-1: can't read configurations, error -71 [ 217.746812][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 217.784811][ T6045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.513'. [ 218.101096][ T6050] fuse: Unknown parameter 'user00000000000000000000' [ 219.395101][ C0] sched: RT throttling activated [ 219.575286][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 219.575301][ T26] audit: type=1326 audit(1771875085.067:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e552d629 code=0x7ffc0000 [ 219.618975][ T26] audit: type=1326 audit(1771875085.067:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e552d629 code=0x7ffc0000 [ 219.641337][ T26] audit: type=1326 audit(1771875085.067:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e552d629 code=0x7ffc0000 [ 219.720414][ T26] audit: type=1326 audit(1771875085.067:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1e54edece code=0x7ffc0000 [ 219.767938][ T6063] tipc: Enabling of bearer rejected, failed to enable media [ 219.783901][ T26] audit: type=1326 audit(1771875085.187:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1e54edece code=0x7ffc0000 [ 219.827860][ T6063] loop2: detected capacity change from 0 to 7 [ 219.840960][ T26] audit: type=1326 audit(1771875085.247:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e552d629 code=0x7ffc0000 [ 219.878310][ T4178] Dev loop2: unable to read RDB block 7 [ 219.884548][ T4178] loop2: unable to read partition table [ 219.919955][ T4178] loop2: partition table beyond EOD, truncated [ 219.933535][ T6063] Dev loop2: unable to read RDB block 7 [ 219.942048][ T26] audit: type=1326 audit(1771875085.247:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e552d629 code=0x7ffc0000 [ 219.952449][ T6063] loop2: unable to read partition table [ 220.009239][ T26] audit: type=1326 audit(1771875085.257:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1e54edece code=0x7ffc0000 [ 220.031830][ T6063] loop2: partition table beyond EOD, truncated [ 220.064421][ T6063] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.081175][ T26] audit: type=1326 audit(1771875085.257:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1e54edece code=0x7ffc0000 [ 220.112023][ T26] audit: type=1326 audit(1771875085.257:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1e54edece code=0x7ffc0000 [ 224.628504][ T6100] fuse: Unknown parameter 'user_i00000000000000000000' [ 224.885262][ T4913] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 225.150818][ T4913] usb 2-1: Using ep0 maxpacket: 32 [ 225.296090][ T4913] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 225.325197][ T4913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.382743][ T4913] usb 2-1: config 0 descriptor?? [ 225.447041][ T4913] gspca_main: sunplus-2.14.0 probing 041e:400b [ 225.712137][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 225.754832][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 225.779545][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.533'. [ 226.075275][ T4913] gspca_sunplus: reg_r err -32 [ 226.080236][ T4913] sunplus: probe of 2-1:0.0 failed with error -32 [ 227.536982][ T4913] usb 2-1: USB disconnect, device number 9 [ 227.905438][ T4914] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.165514][ T4914] usb 5-1: Using ep0 maxpacket: 32 [ 228.286957][ T4914] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.662461][ T4914] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.675256][ T6160] fuse: Unknown parameter 'user_i00000000000000000000' [ 228.682365][ T4914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.702891][ T4914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.743836][ T4914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.756832][ T4914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.790925][ T4914] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.800436][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.823626][ T4914] usb 5-1: config 0 descriptor?? [ 229.088166][ T4914] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.102586][ T6165] tipc: Enabling of bearer rejected, failed to enable media [ 229.141810][ T4914] usb 5-1: USB disconnect, device number 13 [ 229.219260][ T4914] usblp0: removed [ 230.068819][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 230.068835][ T26] audit: type=1326 audit(1771875607.814:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8975b0629 code=0x7ffc0000 [ 230.125394][ T4914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 230.203572][ T26] audit: type=1326 audit(1771875607.814:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 230.268411][ T26] audit: type=1326 audit(1771875607.814:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8975b0629 code=0x7ffc0000 [ 230.331874][ T26] audit: type=1326 audit(1771875607.814:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 230.375624][ T4914] usb 5-1: Using ep0 maxpacket: 32 [ 230.396167][ T26] audit: type=1326 audit(1771875607.844:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 230.458505][ T26] audit: type=1326 audit(1771875607.844:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8975b0629 code=0x7ffc0000 [ 230.575610][ T4914] usb 5-1: unable to read config index 0 descriptor/all [ 230.587265][ T4914] usb 5-1: can't read configurations, error -71 [ 230.605524][ T26] audit: type=1326 audit(1771875607.844:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8975b0629 code=0x7ffc0000 [ 230.632993][ T6200] fuse: Bad value for 'fd' [ 230.705031][ T26] audit: type=1326 audit(1771875607.864:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 230.741280][ T26] audit: type=1326 audit(1771875607.864:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 230.906473][ T26] audit: type=1326 audit(1771875607.864:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 231.171860][ T6211] binder_alloc: 6209: binder_alloc_buf, no vma [ 231.297472][ C0] sd 0:0:1:0: tag#222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 231.307450][ C0] sd 0:0:1:0: tag#222 CDB: Test Unit Ready [ 231.313296][ C0] sd 0:0:1:0: tag#222 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 231.322319][ C0] sd 0:0:1:0: tag#222 CDB[10]: 00 00 00 a6 8e 32 b7 c9 0e 92 4b 9a f0 ab 7f a6 [ 231.331314][ C0] sd 0:0:1:0: tag#222 CDB[20]: 79 [ 232.287934][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 232.732815][ T6234] fuse: Unknown parameter 'user_i00000000000000000000' [ 233.795294][ T6122] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 234.645428][ T6122] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.739547][ T6122] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.791270][ C1] sd 0:0:1:0: tag#223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 234.791889][ T6122] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.801110][ C1] sd 0:0:1:0: tag#223 CDB: Test Unit Ready [ 234.801133][ C1] sd 0:0:1:0: tag#223 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.801152][ C1] sd 0:0:1:0: tag#223 CDB[10]: 00 00 00 a6 8e 32 b7 c9 0e 92 4b 9a f0 ab 7f a6 [ 234.801171][ C1] sd 0:0:1:0: tag#223 CDB[20]: 79 [ 235.951963][ T6122] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.549764][ T6122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.665278][ T6122] usb 3-1: can't set config #27, error -71 [ 238.161450][ T6122] usb 3-1: USB disconnect, device number 7 [ 238.771169][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.813637][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.840836][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.035200][ T6117] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.133877][ T6314] loop1: detected capacity change from 0 to 164 [ 239.175211][ T6122] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.287021][ T6316] device syzkaller0 entered promiscuous mode [ 239.405518][ T6117] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.424255][ T6117] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.500038][ T6117] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 239.509889][ T6117] usb 3-1: config 220 has no interface number 1 [ 239.534978][ T6117] usb 3-1: config 220 interface 0 has no altsetting 0 [ 239.665624][ T6122] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 239.691273][ T6117] usb 3-1: config 220 interface 76 has no altsetting 0 [ 239.737807][ T6122] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.929036][ T6122] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.942472][ T6122] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.951945][ T6122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.005512][ T6117] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 241.021268][ T6117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.033408][ T6122] usb 4-1: invalid MIDI out EP 0 [ 241.041461][ T6117] usb 3-1: Product: syz [ 241.047136][ T6328] binder: BINDER_SET_CONTEXT_MGR already set [ 241.050556][ T6117] usb 3-1: Manufacturer: syz [ 241.058894][ T6328] binder: 6327:6328 ioctl 4018620d 200000004a80 returned -16 [ 241.069633][ T6117] usb 3-1: SerialNumber: syz [ 241.101425][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 241.101440][ T26] audit: type=1326 audit(1771875618.844:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 241.132354][ T26] audit: type=1326 audit(1771875618.844:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 241.157190][ T6122] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 241.228879][ T5349] udevd[5349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.276409][ T26] audit: type=1326 audit(1771875618.874:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 241.385857][ T26] audit: type=1326 audit(1771875618.874:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 241.435500][ T26] audit: type=1326 audit(1771875618.874:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 241.464436][ T26] audit: type=1326 audit(1771875618.874:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 241.525539][ T6117] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 241.542042][ T6117] usb 3-1: No valid video chain found. [ 241.599804][ T26] audit: type=1326 audit(1771875618.914:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 241.632026][ T6117] usb 3-1: USB disconnect, device number 8 [ 241.673057][ T26] audit: type=1326 audit(1771875618.914:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 241.708607][ T26] audit: type=1326 audit(1771875618.924:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 241.804044][ T26] audit: type=1326 audit(1771875618.934:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 241.831750][ T5538] usb 4-1: USB disconnect, device number 12 [ 244.136165][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.144039][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.614825][ T6353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.658458][ T6353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.876867][ T6388] fuse: Unknown parameter 'user_id00000000000000000000' [ 246.122425][ T6353] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.131640][ T6353] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.146671][ T6353] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.161211][ T6353] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.234514][ T6391] loop0: detected capacity change from 0 to 164 [ 247.665379][ T4232] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.763734][ T6418] fuse: Unknown parameter '0x0000000000000003' [ 247.945221][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 248.801009][ T6423] fuse: Bad value for 'fd' [ 248.925252][ T4232] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 248.933684][ T4232] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 248.942741][ T4232] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 248.952241][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.962211][ T4232] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.972338][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.987103][ T4232] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.145354][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.905299][ T5538] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.001529][ T4232] usb 2-1: config 0 descriptor?? [ 250.394059][ T4232] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 250.476875][ T4232] usb 2-1: USB disconnect, device number 10 [ 250.525161][ T5538] usb 3-1: Using ep0 maxpacket: 32 [ 250.571759][ T4232] usblp0: removed [ 250.645375][ T5538] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.653907][ T5538] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.691546][ T5538] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.702266][ T5538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.718634][ T5538] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.731303][ T5538] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.750682][ T6458] loop0: detected capacity change from 0 to 164 [ 250.753187][ T5538] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.773847][ T5538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.807380][ T5538] usb 3-1: config 0 descriptor?? [ 251.143439][ T5538] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.278980][ T5538] usb 3-1: USB disconnect, device number 9 [ 251.707570][ T5538] usblp0: removed [ 252.009710][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 252.030494][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.630'. [ 252.349781][ T5538] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.615349][ T5538] usb 3-1: Using ep0 maxpacket: 32 [ 253.295302][ T5538] usb 3-1: device descriptor read/all, error -71 [ 253.403132][ T6496] loop2: detected capacity change from 0 to 164 [ 253.418978][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 253.418993][ T26] audit: type=1326 audit(1771875631.164:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1460c629 code=0x7ffc0000 [ 253.651769][ T26] audit: type=1326 audit(1771875631.164:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1460c629 code=0x7ffc0000 [ 253.689261][ T26] audit: type=1326 audit(1771875631.164:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcb145c8aec code=0x7ffc0000 [ 253.711731][ T26] audit: type=1326 audit(1771875631.164:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcb145c8b4e code=0x7ffc0000 [ 253.734068][ T26] audit: type=1326 audit(1771875631.164:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb1460c2bb code=0x7ffc0000 [ 253.757041][ T26] audit: type=1326 audit(1771875631.164:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcb1460c629 code=0x7ffc0000 [ 253.779722][ T26] audit: type=1326 audit(1771875631.174:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1460c629 code=0x7ffc0000 [ 253.807462][ T26] audit: type=1326 audit(1771875631.174:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1460c629 code=0x7ffc0000 [ 253.850320][ T26] audit: type=1326 audit(1771875631.194:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb145ccece code=0x7ffc0000 [ 254.168312][ T26] audit: type=1326 audit(1771875631.194:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb145ccece code=0x7ffc0000 [ 254.384578][ T6517] loop2: detected capacity change from 0 to 164 [ 255.630508][ T1336] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.697888][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704232][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.393266][ T1336] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 257.402609][ T1336] usb 4-1: config 0 has no interface number 0 [ 257.413044][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.423158][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.430811][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.645243][ T1336] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=a8.c3 [ 257.654509][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.698345][ T6528] loop1: detected capacity change from 0 to 32768 [ 257.731800][ T1336] usb 4-1: config 0 descriptor?? [ 257.747554][ T6528] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.646 (6528) [ 257.775242][ T5538] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 257.802991][ T1336] usb 4-1: can't set config #0, error -71 [ 257.831486][ T6546] fuse: Unknown parameter 'fd0x0000000000000003' [ 257.850418][ T1336] usb 4-1: USB disconnect, device number 13 [ 257.893457][ T6528] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 257.939186][ T6528] BTRFS info (device loop1): using free space tree [ 257.971467][ T6528] BTRFS info (device loop1): has skinny extents [ 258.156359][ T5538] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 258.187983][ T5538] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.248897][ T5538] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.322746][ T5538] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.380441][ T6528] BTRFS error (device loop1): open_ctree failed: -12 [ 258.400462][ T5538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.518681][ T5538] usb 1-1: invalid MIDI out EP 0 [ 258.657028][ T5538] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 258.744897][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.265940][ T5538] usb 1-1: USB disconnect, device number 8 [ 261.584296][ T6586] fuse: Unknown parameter '0x0000000000000003' [ 261.709205][ T5834] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 261.733413][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.782264][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.817337][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.974029][ T6597] fuse: Unknown parameter 'fd0x0000000000000003' [ 262.119046][ T6599] loop4: detected capacity change from 0 to 164 [ 262.125895][ T5834] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 262.155135][ T5834] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.185209][ T5834] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.396993][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.406844][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.475905][ T5834] usb 3-1: invalid MIDI out EP 0 [ 263.013210][ T6594] loop0: detected capacity change from 0 to 32768 [ 263.041574][ T5834] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 263.070846][ T6594] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.663 (6594) [ 263.102326][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.173195][ T6594] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 263.204464][ T6594] BTRFS info (device loop0): using free space tree [ 263.252140][ T6594] BTRFS info (device loop0): has skinny extents [ 265.713560][ T6594] BTRFS error (device loop0): open_ctree failed: -12 [ 265.722881][ T4913] usb 3-1: USB disconnect, device number 12 [ 265.912862][ T6650] fuse: Unknown parameter '0x0000000000000003' [ 265.937853][ T6651] loop4: detected capacity change from 0 to 164 [ 265.957014][ T6653] fuse: Unknown parameter 'fd0x0000000000000003' [ 267.110045][ T6666] loop1: detected capacity change from 0 to 164 [ 267.925521][ T4913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 268.148147][ T6682] fuse: Unknown parameter 'group_i00000000000000000000' [ 268.435254][ T4913] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 268.816248][ T4913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.827422][ T4913] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.840405][ T4913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.849542][ T4913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.908231][ T4913] usb 4-1: invalid MIDI out EP 0 [ 268.980336][ T4913] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 269.062009][ T4673] udevd[4673]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.776301][ T4913] usb 4-1: USB disconnect, device number 14 [ 270.458224][ T6707] fuse: Unknown parameter 'fd0x0000000000000003' [ 270.503226][ T6710] loop3: detected capacity change from 0 to 164 [ 270.788063][ T6715] loop0: detected capacity change from 0 to 164 [ 272.207250][ T6723] device syzkaller0 entered promiscuous mode [ 273.552519][ T6742] loop0: detected capacity change from 0 to 164 [ 275.299029][ T6759] loop4: detected capacity change from 0 to 164 [ 275.615190][ T4231] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 276.038781][ T6773] fuse: Unknown parameter 'fd0x0000000000000003' [ 276.345251][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 276.465423][ T4231] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 276.479474][ T4231] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 276.508271][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 276.541781][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.570293][ T4231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.612324][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.656433][ T4231] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 276.681976][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.714878][ T4231] usb 4-1: config 0 descriptor?? [ 276.988123][ T4231] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 277.031383][ T4231] usb 4-1: USB disconnect, device number 15 [ 277.053655][ T4231] usblp0: removed [ 277.158302][ T6782] tipc: Enabling of bearer rejected, failed to enable media [ 277.200062][ T6782] loop2: detected capacity change from 0 to 7 [ 277.210957][ T6693] Dev loop2: unable to read RDB block 7 [ 277.227968][ T6693] loop2: unable to read partition table [ 277.251710][ T6693] loop2: partition table beyond EOD, truncated [ 277.293627][ T6782] Dev loop2: unable to read RDB block 7 [ 277.305860][ T6782] loop2: unable to read partition table [ 277.337883][ T6788] loop0: detected capacity change from 0 to 164 [ 277.352318][ T6782] loop2: partition table beyond EOD, truncated [ 277.386029][ T6782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.855440][ T5532] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.295571][ T5532] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.325249][ T5532] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.407038][ T6793] loop1: detected capacity change from 0 to 4096 [ 278.441228][ T6793] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.485996][ T5532] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.530174][ T5532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.610498][ T5532] usb 4-1: SerialNumber: syz [ 278.847705][ T6793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 278.899744][ T6793] System zones: 0-5 [ 279.052899][ T6798] loop0: detected capacity change from 0 to 164 [ 279.120318][ T6793] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 279.636364][ T5532] usb 4-1: can't set config #1, error -71 [ 279.656408][ T5532] usb 4-1: USB disconnect, device number 16 [ 279.955971][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 282.732626][ T6832] loop3: detected capacity change from 0 to 164 [ 282.754243][ T6833] device syzkaller0 entered promiscuous mode [ 286.269131][ T6869] fuse: Unknown parameter 'group_id00000000000000000000' [ 287.585206][ T5532] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 288.359337][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.377331][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.384851][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.545231][ T5532] usb 4-1: Using ep0 maxpacket: 32 [ 288.665516][ T5532] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 288.685214][ T5532] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 288.695839][ T5532] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 288.747407][ T5532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.788278][ T5532] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.886694][ T5532] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.926618][ T5532] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.010467][ T5532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.260051][ T5532] usb 4-1: config 0 descriptor?? [ 289.510619][ T6911] loop2: detected capacity change from 0 to 164 [ 289.855387][ T5532] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 289.869921][ T5532] usb 4-1: USB disconnect, device number 17 [ 289.878566][ T5532] usblp0: removed [ 289.928630][ T6915] loop1: detected capacity change from 0 to 164 [ 289.986856][ T6918] device syzkaller0 entered promiscuous mode [ 294.109437][ T6957] loop3: detected capacity change from 0 to 164 [ 294.406020][ T6961] tipc: Enabled bearer , priority 0 [ 294.440353][ T6958] tipc: Disabling bearer [ 299.626387][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 299.626404][ T26] audit: type=1326 audit(1771875677.374:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 299.889752][ T26] audit: type=1326 audit(1771875677.374:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 299.977851][ T26] audit: type=1326 audit(1771875677.374:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 300.065233][ T4914] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 300.120440][ T26] audit: type=1326 audit(1771875677.374:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 300.307475][ T26] audit: type=1326 audit(1771875677.424:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78724e3629 code=0x7ffc0000 [ 302.622441][ T26] audit: type=1326 audit(1771875677.424:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 302.650717][ T26] audit: type=1326 audit(1771875677.424:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 302.677418][ T26] audit: type=1326 audit(1771875677.424:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 302.703969][ T26] audit: type=1326 audit(1771875677.424:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 302.731457][ T26] audit: type=1326 audit(1771875677.434:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78724a3ece code=0x7ffc0000 [ 303.205275][ T5538] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 303.495348][ T5538] usb 3-1: Using ep0 maxpacket: 32 [ 303.646322][ T5538] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.687525][ T5538] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.771234][ T5538] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.847627][ T5538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.894806][ T5538] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.037047][ T5538] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.106404][ T5538] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.155091][ T5538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.214926][ T5538] usb 3-1: config 0 descriptor?? [ 304.375203][ T6120] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.477254][ T5538] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 304.539683][ T5538] usb 3-1: USB disconnect, device number 13 [ 304.574327][ T5538] usblp0: removed [ 304.785311][ T6120] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 304.895948][ T6120] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.039916][ T6120] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.200321][ T6120] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.310442][ T6120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.755251][ T4914] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 305.766822][ T6120] usb 5-1: invalid MIDI out EP 0 [ 305.775230][ T4914] usb 4-1: can't read configurations, error -110 [ 305.888818][ T6120] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 305.955403][ T5538] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 307.117784][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 307.117800][ T26] audit: type=1326 audit(1771875684.864:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8975b0629 code=0x7ffc0000 [ 307.213079][ T4674] udevd[4674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.243905][ T4913] usb 5-1: USB disconnect, device number 16 [ 307.482937][ T26] audit: type=1326 audit(1771875684.914:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 307.505210][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.758372][ T26] audit: type=1326 audit(1771875684.914:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 307.780929][ T26] audit: type=1326 audit(1771875684.914:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 307.842765][ T26] audit: type=1326 audit(1771875684.914:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 307.900963][ T26] audit: type=1326 audit(1771875684.914:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 307.971685][ T26] audit: type=1326 audit(1771875684.924:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 308.049920][ T26] audit: type=1326 audit(1771875684.924:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 308.121548][ T26] audit: type=1326 audit(1771875684.924:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 308.193055][ T26] audit: type=1326 audit(1771875684.924:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff897570ece code=0x7ffc0000 [ 308.675302][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.682839][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.804654][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.901568][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.297960][ T7124] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.308729][ T7124] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.318882][ T7124] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.328377][ T7124] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.725216][ T4240] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 312.895408][ T1109] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 312.985151][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 418.044998][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 418.052030][ C0] (detected by 0, t=10502 jiffies, g=28125, q=164) [ 418.058642][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294978924-4294968421), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 418.072028][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g28125 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 418.083277][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 418.093495][ C0] rcu: RCU grace-period kthread stack dump: [ 418.099416][ C0] task:rcu_preempt state:R running task stack:28112 pid: 15 ppid: 2 flags:0x00004000 [ 418.110255][ C0] Call Trace: [ 418.113565][ C0] [ 418.116539][ C0] __schedule+0x11ef/0x43c0 [ 418.121123][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 418.126359][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 418.132296][ C0] ? _raw_spin_unlock+0x40/0x40 [ 418.137194][ C0] ? release_firmware_map_entry+0x190/0x190 [ 418.143168][ C0] ? __mod_timer+0x91e/0xd00 [ 418.147810][ C0] schedule+0x11b/0x1e0 [ 418.152003][ C0] schedule_timeout+0x184/0x2d0 [ 418.156881][ C0] ? console_conditional_schedule+0x40/0x40 [ 418.162898][ C0] ? update_process_times+0x200/0x200 [ 418.168320][ C0] ? prepare_to_swait_event+0x331/0x350 [ 418.173928][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 418.178820][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 418.184053][ C0] ? rcu_gp_init+0xd6c/0x10f0 [ 418.188762][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 418.193560][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 418.198787][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 418.204024][ C0] rcu_gp_kthread+0x9b/0x370 [ 418.208706][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 418.214630][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 418.219805][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 418.225736][ C0] ? __kthread_parkme+0x157/0x1b0 [ 418.230801][ C0] kthread+0x436/0x520 [ 418.234905][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 418.240050][ C0] ? kthread_blkcg+0xd0/0xd0 [ 418.244784][ C0] ret_from_fork+0x1f/0x30 [ 418.249250][ C0] [ 418.252294][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 418.258727][ C0] NMI backtrace for cpu 0 [ 418.263094][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 418.270142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.280337][ C0] Call Trace: [ 418.283667][ C0] [ 418.286539][ C0] dump_stack_lvl+0x188/0x250 [ 418.291254][ C0] ? show_regs_print_info+0x20/0x20 [ 418.296499][ C0] ? load_image+0x400/0x400 [ 418.301039][ C0] ? irq_work_queue+0xbf/0x140 [ 418.305846][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 418.310819][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 418.317034][ C0] ? _printk+0xda/0x130 [ 418.321230][ C0] ? cpu_online+0x1d/0x30 [ 418.325595][ C0] ? load_image+0x400/0x400 [ 418.330150][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 418.336254][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 418.342359][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 418.348551][ C0] print_other_cpu_stall+0x1110/0x1270 [ 418.354070][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 418.359036][ C0] ? ktime_get+0x7b/0x270 [ 418.363391][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 418.368451][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 418.373673][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 418.378548][ C0] ? account_process_tick+0x22a/0x3a0 [ 418.383967][ C0] update_process_times+0x193/0x200 [ 418.389199][ C0] tick_sched_timer+0x37d/0x560 [ 418.394082][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 418.399667][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 418.404932][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 418.410071][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 418.416182][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 418.421187][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 418.427196][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 418.432865][ C0] [ 418.435821][ C0] [ 418.438779][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 418.444805][ C0] RIP: 0010:default_idle+0xb/0x10 [ 418.449862][ C0] Code: b7 48 89 df e8 16 b5 f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 77 56 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 418.469508][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 418.475625][ C0] RAX: 10671e4993363500 RBX: ffffffff8c0bc480 RCX: 10671e4993363500 [ 418.483626][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f800 [ 418.491624][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 418.499623][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1817890 [ 418.507625][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffffffff1800fc4 [ 418.515641][ C0] default_idle_call+0x81/0xc0 [ 418.520445][ C0] do_idle+0x21f/0x580 [ 418.524556][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 418.529789][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 418.535459][ C0] ? schedule_idle+0x57/0x90 [ 418.540079][ C0] cpu_startup_entry+0x14/0x20 [ 418.544872][ C0] ? time_init+0x40/0x40 [ 418.549151][ C0] start_kernel+0x489/0x540 [ 418.553692][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 418.559622][ C0]