last executing test programs: 1m59.30543232s ago: executing program 3 (id=340): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x5, 0x0, 0x8, 0x0, 0x0, 0x7, 'syz1\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1, 0x1b9, &(0x7f0000000200)="$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") sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) 1m54.202896902s ago: executing program 3 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000900)=@assoc_value, 0x8) 1m52.155444129s ago: executing program 3 (id=355): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m51.870887552s ago: executing program 3 (id=356): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 1m51.460839242s ago: executing program 3 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') write$P9_RREADDIR(r0, 0x0, 0x0) 1m50.101664816s ago: executing program 3 (id=361): openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x28}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x14d1c2, 0xf) pwritev2(r3, 0x0, 0x0, 0x6001800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x3, 0x80000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) r4 = open(0x0, 0x4c27e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') fallocate(r4, 0x0, 0x9e1f, 0x575) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006056}, 0x2004054) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) 1m34.62830143s ago: executing program 32 (id=361): openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x28}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x14d1c2, 0xf) pwritev2(r3, 0x0, 0x0, 0x6001800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x3, 0x80000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) r4 = open(0x0, 0x4c27e, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') fallocate(r4, 0x0, 0x9e1f, 0x575) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006056}, 0x2004054) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) 28.374146924s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 24.050684329s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 20.312483116s ago: executing program 0 (id=529): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xd4, 0x1f, 0x20, 0x70bd2a, 0x25dfdbfb, {0x17}, [@generic="ba638cf7e22c5062792c4db2541e6655c73cb627b1c6a050a4dfb862e397ea501b801240f1e613c141e7c88a15b99e3c920537e83efc6810eb0471bd094a82407b59ffa68bcfc2f7968580d225afda1d34b9e3361547777a4c9fde107f9dc07869375e4716128618dcf3057978841a5d4cf9ff5d00607fb1", @generic="940ffde78a4983aa9d6375896c4fa8e3a57830d9263de08b2201b823f43fb7a89e1acb2c98b1a54cbe26130fce20d5950bb54a91b5d8dd719cc4ae4a635628e0bb94497c262998"]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4000008) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0xb) connect$unix(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, 0x0, &(0x7f0000000140)) 18.598951157s ago: executing program 1 (id=532): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x2, r1}) fcntl$notify(r0, 0x402, 0x80000027) 18.507200582s ago: executing program 0 (id=533): unshare(0x22020600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) 18.420432756s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 14.217622845s ago: executing program 0 (id=536): epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 14.217455116s ago: executing program 1 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x80000000) 12.684034769s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r5}, 0x8) 11.471069636s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 9.053172051s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getpgid(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff08, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x20002000) pipe(&(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000340)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) 8.073204277s ago: executing program 1 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.545626192s ago: executing program 4 (id=553): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u'], 0x1d, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 7.491834935s ago: executing program 2 (id=554): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) 7.125742252s ago: executing program 4 (id=555): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x5, 0x0, 0x8, 0x0, 0x0, 0x7, 'syz1\x00', 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1, 0x1b9, &(0x7f0000000200)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDAggBs7hH7FBqH1oPwXUEWaUPFFUPo/FBRXVmUn5uSkFtGQgV2OCepyUkwEqUeXuvIxlp9UcwYbg4MBjxpGMgIKJ+M/kYo5McJ5YBg8DFQzMJ4ZEo7UMfDLgIcPy8DHDkkMRkwpBNe+kYnhLTilX/9YkwxiJEBLKZBYCgMDA0gMWQ0oNo8gqZFiAWNGZob/cDUsUH3qDAwM+iW5BfrFlVW6mbmJ6anpqXlGRsZmBiYGBqZG+mmZOakGEJIRyQpYEQWiQWUvqEzlRJJnZWBguActYLmQCmOGlxBrYU6DyjMi6wWVw/+hhbSGMgMKYGL4zw/Wy4Ewg5HhAFwvVBsDKAhCGNRAyhjKGxiRRFXAprAwgL3kwcDIwAzlGMIqDUa4XXPYQRJ6yfk5Ke0MjAyMMG3LGVjgZhg+ZmAFc9gQboTIGFs0wITaobQKlPaA0suh9GMoLc+IWhexgE14AuVpNICcWJFYUlJkyHYeqsUQVOuBxYzYYLJGAnCbWaC2fmJD9ZwMO8MoGAWjYBSMglEwCkbBEAOAAAAA///VcVhB") sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) 6.386383917s ago: executing program 1 (id=556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 6.385825767s ago: executing program 4 (id=557): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000000740)=""/4119, 0x1017}], 0x2}, 0x10100) 6.167456747s ago: executing program 1 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 6.043135303s ago: executing program 2 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x20002000) 6.042980313s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 5.995816425s ago: executing program 4 (id=560): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 3.548560202s ago: executing program 0 (id=561): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000040)=0xfffe, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) 3.528599483s ago: executing program 2 (id=562): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x4f, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f046}) poll(&(0x7f0000000180), 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) chdir(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004380)=@deltfilter={0x1e08, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1dd0, 0x2, [@TCA_CGROUP_ACT={0x1dcc, 0x1, [@m_connmark={0x84, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}]}, {0x1a, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1d14, 0x1, 0x0, 0x0, {{0xa}, {0x1ce8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x4}, {0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x4, 0x96e, 0x20000000, 0x6, 0x2}, 0x8, 0x3, [{0xffffffff, 0x5bb, 0xe8fe, 0x7, 0x4, 0x6}]}, [{0x1, 0x1, 0x80000000, 0x5, 0x6a9853a2, 0x480000}, {0x0, 0x8, 0x8000, 0x10, 0xffffffff, 0x8001}, {0x9, 0x2e, 0x6, 0x7b, 0x0, 0x7}, {0x1, 0x2, 0x3, 0x4, 0x4, 0x1}, {0x8001, 0x8000, 0x9, 0x6, 0xcad, 0x7}, {0x5, 0x90d, 0x7, 0x1000, 0x40}, {0x6, 0x9, 0xfffffffe, 0x7ff, 0x0, 0x800}, {0xc7, 0x80000001, 0x0, 0x5, 0x1000}, {0x2, 0x6, 0xffffffff, 0x100, 0x7ff, 0x2}, {0x76, 0x475e, 0x3, 0x7, 0x8, 0x5}, {0x5, 0x6, 0x3, 0x800000, 0x7, 0x9}, {0x1, 0x9, 0xfffff801, 0x7, 0x2, 0x5ada}, {0x9, 0x8, 0xf954, 0x8a5d, 0x10000, 0x80008000}, {0x3, 0x10000, 0x1, 0xc00000, 0x2, 0x5}, {0x950e, 0x25df, 0x5f, 0x81, 0xe, 0x80000001}, {0x1, 0x3, 0x1, 0x9, 0x7, 0x7f}, {0x6, 0x60, 0x8, 0x9, 0x1, 0x8}, {0x0, 0xfffffff8, 0x6, 0x4, 0x2, 0x82}, {0x2c, 0x1000, 0x1f95, 0x6, 0x4d83, 0x7}, {0x7, 0x9, 0x0, 0x1, 0x40, 0x2}, {0x7, 0x3, 0x6, 0x6, 0x8, 0xffffffff}, {0x3ff, 0xe, 0x9, 0xe6, 0xc245, 0xb6d}, {0x1, 0x0, 0x7, 0xc8b, 0xe, 0x3903}, {0x9, 0xfffffbde, 0x4, 0x1, 0x2}, {0xe, 0x10, 0x6, 0x743, 0x1, 0x5000}, {0xd9, 0x8, 0x5, 0x3, 0x3, 0x4}, {0xa0d, 0xfffffff8, 0x7, 0x8001, 0x81, 0xd}, {0x1, 0x698, 0x1, 0xfffffff1, 0x7982, 0x2fa}, {0xa9c, 0x101, 0x81, 0x7ff, 0xc798, 0x7}, {0x6e7c584a, 0x1000, 0x2, 0x10, 0x7, 0x9}, {0xb, 0x8, 0x9f, 0x5, 0x8, 0x81}, {0x9, 0x2, 0x5d, 0x8000, 0x81, 0x8}, {0xd, 0xa, 0x1, 0x7, 0x3, 0xffffffff}, {0x5, 0x751, 0x6, 0x6, 0x9, 0x9}, {0x0, 0x66, 0x2, 0x4, 0x7, 0xfffffffc}, {0xd9, 0x8, 0x3, 0x9, 0x2, 0x34}, {0x2, 0x5, 0x3, 0x2, 0x353, 0xfa}, {0xffffff8f, 0x401, 0x200, 0x8, 0x46, 0x5}, {0x9, 0x6, 0x5, 0x19, 0x7, 0xc}, {0x2, 0x9, 0x4, 0x1, 0x1, 0x6}, {0x526, 0x401, 0x4f, 0x4, 0xffffffff, 0xc}, {0x0, 0x4, 0xf, 0x2, 0x9, 0x6}, {0x6, 0x6, 0x8, 0x1000, 0x7, 0xffffffff}, {0x9, 0x7ff, 0x3, 0x3, 0x7fff, 0x4}, {0xf, 0x8000, 0xfb1, 0x89b8, 0x3, 0xffffffe9}, {0x8, 0x0, 0x2, 0x1, 0x9, 0x5}, {0xfffffffa, 0x3, 0xb, 0xff, 0xb, 0x9}, {0x1, 0x7, 0x6, 0x10, 0x2, 0x71b}, {0xffff, 0x7f, 0x9, 0x9, 0x1ff, 0x5}, {0x81, 0x8, 0x5e860d83, 0x8, 0x7, 0x2}, {0x100, 0x6c, 0x1000, 0x400, 0x7, 0x401}, {0x9, 0x8, 0xa, 0x4, 0x1, 0x9}, {0x7, 0x800, 0x0, 0x3, 0x10, 0x9ee}, {0x800, 0x9, 0x3576, 0x7, 0x12000000, 0x55a1}, {0x4, 0xc, 0x3, 0x2, 0x0, 0x5}, {0x200, 0x5, 0x3, 0x7, 0x1, 0xa}, {0x6, 0xdde, 0x8, 0x3fe, 0xc2, 0x2}, {0x5, 0xfffffff8, 0x10001, 0x3d3, 0x9, 0x6}, {0xcd5, 0x3, 0x8001, 0x3, 0x3f5f, 0x8}, {0x3216, 0x7, 0x101, 0x7, 0xfffffffa, 0x4}, {0x7, 0x0, 0x4, 0x81, 0x8, 0x9}, {0x6, 0x1, 0xb, 0x5, 0x8, 0x7}, {0x4, 0x6, 0x2972, 0x183, 0x2, 0x401}, {0x0, 0x8000, 0x3, 0x80000001, 0x9, 0x7}, {0x6, 0x8, 0x4, 0x95, 0xffffffff, 0x3}, {0x2, 0xe, 0xe4, 0x3, 0xc47e, 0x7}, {0x9, 0x6, 0x5e, 0x6, 0x8, 0x2}, {0x2, 0xf53, 0xff, 0x8, 0x9, 0x5}, {0xed8f, 0x6, 0x6, 0xedb, 0xc6c, 0x7}, {0x5, 0x9, 0x4, 0x90a, 0xfff, 0x6}, {0x3, 0xfffffffc, 0x2, 0x93073e5, 0xfffff081, 0x84}, {0x9, 0x2, 0x8, 0x4, 0x81, 0x3}, {0x7, 0x3, 0x7, 0xf30, 0xe, 0x9}, {0x2, 0x0, 0x5, 0x8, 0x101}, {0x0, 0x2, 0x78256710, 0x4, 0x15, 0x1}, {0x9, 0x1, 0x7ff, 0x3, 0xe, 0x8000}, {0x8, 0x217d21c6, 0xd, 0x0, 0x7, 0x5}, {0x2, 0x7, 0x5, 0x8, 0x40, 0x2}, {0xd962, 0x6, 0x7, 0xff, 0x7, 0x5f6c}, {0x80000000, 0x7, 0x6, 0x8, 0x1, 0x101}, {0x1, 0x4, 0x4, 0x2, 0x796f, 0xffff}, {0x8843, 0x0, 0x4, 0x9, 0xb1, 0x4}, {0x5, 0x593, 0x1, 0xffffffff, 0x3, 0x3ff}, {0x4, 0x0, 0xffff, 0x2800, 0xe645, 0x599}, {0xee23, 0x101, 0x4, 0x19c2, 0x6, 0x1d7}, {0x7fffffff, 0x4, 0xc, 0x58a7, 0x4, 0x7}, {0x8, 0x1403, 0x3, 0x8, 0x9, 0x2}, {0xffff, 0x6, 0x7, 0x5, 0x8e6d, 0x2}, {0x3, 0x10, 0x6, 0x2, 0x1ff, 0x7fff}, {0x7, 0x10001, 0x8, 0xe38e, 0xcec, 0x3}, {0x1, 0x3, 0x4de1, 0x6, 0x65ca, 0xffffff01}, {0x2, 0x23bc, 0x7, 0x4, 0x2, 0x5}, {0x1, 0x200, 0x3, 0x2, 0x7f, 0x9f7}, {0x800, 0xe8eb, 0x7f, 0x10001, 0x6, 0x2}, {0xf, 0x4, 0x7, 0xffff, 0xcfe, 0x7f}, {0x7, 0x0, 0x4, 0xd, 0x5, 0xef397ef2}, {0x5, 0xf, 0x3, 0x6, 0x8, 0x400}, {0x6, 0x8f9, 0x5, 0x9, 0x0, 0x1}, {0x40, 0x0, 0xd, 0x6, 0x100, 0x10000}, {0xbf, 0x7fff, 0xf87a, 0x7, 0x2, 0x6f}, {0x0, 0xd, 0x3, 0x4061, 0x5, 0x42}, {0x5, 0xfffffff7, 0x80000001, 0x3, 0x3, 0x4}, {0x9288, 0x42, 0xaa3b, 0xf3, 0xc, 0x1}, {0xd, 0xe, 0xe7, 0x6dad, 0x2, 0x8}, {0x2, 0x7fffffff, 0x400, 0x7, 0x0, 0x5}, {0xffff, 0x2, 0x9, 0x1, 0x2, 0x7}, {0x7e67, 0x6, 0x9, 0x9, 0x10001, 0xa}, {0x8, 0x4, 0x3, 0xe, 0x7, 0x8}, {0x2, 0x0, 0x7, 0x9, 0x3ff, 0x6}, {0x9, 0x3, 0x5, 0x2, 0xfffffff7}, {0x3, 0xfffffff9, 0x6, 0x5, 0x28, 0x6}, {0x2, 0x3, 0x80000001, 0x1, 0x5, 0x2}, {0x9, 0x4bb4, 0x1, 0x5, 0x8, 0x4}, {0x1, 0x7d28, 0x0, 0x3d1, 0x7, 0x1}, {0x2a, 0x2, 0x800, 0x0, 0x6, 0x9}, {0x7, 0x58, 0x0, 0x8, 0x4, 0xffff8000}, {0x6, 0xc8d4, 0x0, 0xdc, 0xfff, 0x2}, {0x1, 0x0, 0xd5, 0x8, 0x9, 0x81}, {0x6, 0x1, 0x2, 0x7, 0x0, 0x6}, {0x40, 0x7, 0x3, 0x101, 0x5, 0x1}, {0x9, 0xff, 0x6, 0x5, 0x1aa0aa62, 0xfffffffb}, {0x3, 0x67, 0xe2b2, 0xffffffff, 0x5, 0x4970530}, {0x4, 0x1, 0x5, 0x3e, 0xa4, 0x200}, {0x40b, 0x8, 0x0, 0x1, 0x5, 0xfffffffd}, {0x7f, 0x7ff, 0x0, 0x5, 0x5, 0x5}, {0x5, 0x7, 0x405, 0xbde6, 0x7, 0x70a}, {0x5, 0xfffffff8, 0xb8c, 0x1, 0x0, 0xffff}, {0x5, 0x8, 0x7f, 0x1, 0x6dd3}], [{0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xb16e4b0bce20fd3d}, {0x3, 0x1}, {0x3, 0xd22044d9698804e9}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3ea20db82e8e6d5e}, {0x0, 0x93cd093a66bad76a}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x2}, {0x4}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0xf204d2403a3fae6f, 0x1}, {0x4}, {0x3, 0x639d733c0565119f}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3}, {0x548af95a49bea3fd, 0x1}, {0x2759c1da1d108f2f}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4, 0x3, 0x3, 0x5, 0xb11c}, 0xcc, 0xf, [{0x397d, 0x5, 0x0, 0xfffffffe, 0x6, 0x4}, {0x2, 0x101, 0x2, 0xffff, 0x4, 0xfffffff8}, {0x1, 0x81, 0x9, 0x0, 0x0, 0x3}]}, [{0x6, 0x2, 0xb, 0x2, 0x42ec5bcd, 0x9}, {0x7, 0x8, 0x5, 0x8, 0xd32c, 0x27}, {0xffff, 0x7, 0x4, 0x3b4, 0x80000000, 0x1000}, {0x9, 0xa9c0, 0x401, 0x80000001, 0xffff, 0x20000000}, {0x5, 0xe300, 0x6, 0x2, 0xac43, 0x1}, {0x8, 0xa, 0x0, 0xffffff81, 0xb}, {0x6, 0x8, 0x2, 0x8, 0x0, 0x8}, {0x6, 0x1, 0x8, 0x80000000, 0x4, 0x2}, {0x5, 0x29c23d73, 0x5, 0x5, 0x10001, 0x6}, {0x0, 0x400, 0x0, 0x80, 0x3, 0x8}, {0x2, 0x2, 0x1, 0x8e3, 0x4, 0x5}, {0x5, 0x7, 0x7c, 0xffffff00, 0x6, 0x81}, {0x718, 0x7f, 0x34, 0x3551, 0x10001, 0xffff}, {0x1, 0xfff, 0x5, 0xfa0, 0xffffffff, 0xffffffa5}, {0x2, 0x9, 0x100, 0xf, 0x9, 0x1557}, {0x2, 0x1, 0xfffffffe, 0xd, 0x3, 0xffffffff}, {0xfffffff7, 0x200, 0x6, 0x9, 0xfffffffa}, {0x7, 0x9, 0x3, 0x4, 0x3, 0x5}, {0x1, 0x2, 0x4, 0x0, 0x9, 0xdb7}, {0x6, 0x5, 0x1, 0x8, 0xfffffff7, 0x81}, {0x800, 0x3, 0x7f, 0x8, 0x1, 0xa}, {0x3, 0x0, 0x9, 0x1, 0xd16, 0x2}, {0x3, 0x9, 0x7, 0xfffffff8, 0x9, 0x2}, {0x6, 0x8, 0x6, 0x3, 0x9, 0x7}, {0xc479, 0x2, 0x8, 0x5, 0x5, 0x2}, {0x7, 0x637a, 0x0, 0x101, 0x2, 0x3}, {0x5, 0x1, 0xb, 0x3, 0x7fff, 0xb}, {0xffff, 0x3, 0x1, 0x7, 0x7e10, 0x7}, {0x8, 0x2, 0x2, 0x1ecd, 0x60000, 0xb}, {0x2, 0x7, 0x9170, 0xfffffffd, 0x5, 0x17e}, {0x3, 0x1a, 0x4, 0x3a86340a, 0x2, 0x9}, {0x5, 0x2e2, 0x1000, 0x60, 0x0, 0x6}, {0x5, 0x7, 0x1, 0xe, 0x80000001, 0x3ff}, {0x0, 0xff, 0x3, 0x7f, 0x1, 0xfff}, {0x7fffffff, 0xce1, 0x8, 0x0, 0x7, 0x1}, {0x7ff, 0x800, 0x7, 0x6b7e2887, 0x2, 0x7}, {0x80000001, 0x10, 0x8, 0x7ccd, 0x8, 0x4}, {0x0, 0x101, 0xfffffffc, 0x4, 0x7, 0x3}, {0x101, 0x8, 0x5, 0x0, 0x4, 0x2}, {0x0, 0x1, 0x8001, 0x7, 0x9ca7, 0x6}, {0x3, 0x1, 0x5b, 0xb, 0x0, 0x9}, {0x4, 0x8, 0x1, 0xc0, 0x9, 0x8}, {0x3, 0x4, 0x78438cbe, 0x5, 0x9, 0x2}, {0xfffffffa, 0xf, 0x1, 0x0, 0x1, 0xff}, {0x40, 0x6, 0x7, 0xd3c9, 0xf, 0x344}, {0xbe, 0xc, 0x800, 0x2, 0x4, 0x8}, {0xb6, 0x9, 0x9a, 0x0, 0x838, 0x8e}, {0x2, 0xfd, 0x9, 0x0, 0x7, 0x9dbf}, {0xbd, 0x4, 0x1, 0x3, 0x7, 0xf5}, {0x2, 0x9, 0x8c, 0xfffffffb, 0x32, 0x28}, {0x8000, 0xb450, 0x6, 0xa3, 0x100, 0x5}, {0xfcb, 0xcd, 0xc5, 0x95d9, 0x6, 0x5}, {0x3, 0x5, 0x2, 0x7, 0xeb3, 0x6}, {0x2, 0x2, 0xfffffff7, 0x4, 0x9, 0xffffffff}, {0x1ff, 0xffffff80, 0x18000, 0x7, 0xfd, 0x9}, {0xffff, 0x100, 0x4, 0xffffffff, 0x0, 0x8}, {0xfffff800, 0x5, 0x4000, 0x7, 0x1, 0x8}, {0x0, 0x5, 0x6, 0x5, 0x5f, 0xc}, {0x81, 0xd000000, 0x1, 0x2, 0x8, 0x2}, {0x4, 0x1, 0x2, 0xfc2, 0x0, 0x6}, {0x2, 0x9, 0x1, 0x1000, 0x152a, 0x9}, {0x9, 0x2, 0xc28, 0x184, 0x9, 0xee}, {0x5, 0x3, 0xb, 0x8001, 0x5d, 0x7}, {0x8, 0x100, 0xa0b, 0xff, 0x2, 0x7}, {0x0, 0x81d, 0x6, 0x4, 0x0, 0x8}, {0x7, 0xffff8000, 0x63e, 0x7ff, 0x0, 0x10000}, {0xfffffffd, 0x3, 0x8, 0x5, 0x3ff, 0x6}, {0x8b, 0xe, 0x1, 0x9, 0x200, 0x10}, {0x3, 0xa5, 0x6, 0x1, 0x7ff, 0x9}, {0x7, 0x400, 0x9, 0x9, 0x1000, 0x800}, {0xb0, 0xffffff47, 0xfffffffc, 0xfffffffe, 0x9, 0x3}, {0x8000, 0x9, 0x1, 0x9, 0x2}, {0x10000, 0x80, 0x6, 0x200, 0x100, 0xa}, {0x3, 0x1, 0x5, 0xffffffff, 0x6, 0x4}, {0x3, 0x9, 0x5, 0x4, 0xf3}, {0x9, 0x80000000, 0xe, 0x6, 0x8, 0x8}, {0x1, 0x4, 0x6701a489, 0x94b2, 0x8, 0x2}, {0x9, 0x6, 0xc, 0x2, 0xaf, 0x1ff}, {0x9, 0x0, 0x6, 0x474ad85a, 0x7fff, 0x53ef}, {0x9, 0x0, 0x8d, 0xdd4, 0x8}, {0x8, 0x3, 0x4f, 0x8a, 0x838d, 0x8}, {0xfff, 0xaea9, 0x101, 0x9, 0xc4}, {0x8001, 0x7f, 0x9, 0x5, 0x8, 0x7f}, {0x4, 0xd186, 0xc8d7, 0x5, 0x1, 0x5}, {0x5d6, 0x0, 0x9, 0x9, 0x297, 0x3}, {0x2, 0x6, 0x3, 0x9, 0x3, 0x1}, {0xc000000, 0x4, 0xfe, 0xfff, 0xf6, 0x5}, {0x3, 0xe, 0x8, 0xe04, 0x2, 0x6a240ead}, {0x935, 0x5, 0x7, 0x5, 0x0, 0x7}, {0x1, 0x5, 0x3ff, 0x10000, 0x200, 0xa64a}, {0x7fffffff, 0x6dc, 0x4c023696, 0x100, 0x401, 0x7}, {0x4, 0x9, 0xf, 0x80, 0xae3, 0x3}, {0x5, 0x7f, 0x9, 0x3, 0x18000, 0x4e15}, {0xfffffffa, 0x2, 0x8, 0xb, 0x1, 0x1}, {0x3, 0x8fa5, 0x62, 0xfffffff9, 0x1, 0x5}, {0x7fff, 0x10000, 0x2, 0x0, 0x4, 0x6}, {0x0, 0xc3, 0xeffb, 0x1, 0x80, 0x82}, {0xf5, 0x2d80, 0x647, 0xfff, 0x6e3, 0xe}, {0x7, 0x458, 0x8, 0x3, 0x41, 0x5}, {0x5, 0x8, 0x80, 0x401, 0x7, 0x9}, {0xffff, 0x87b9, 0x40, 0x8, 0x9, 0xd531}, {0x5, 0x3, 0xd, 0xb, 0x6, 0x6}, {0x1, 0x0, 0x7, 0xbf4a, 0x6, 0x8000}, {0x5, 0x5fe, 0x5, 0x2, 0x9, 0xd69}, {0x1, 0x7f, 0x1, 0xfffffff7, 0x6, 0xfffff593}, {0x6, 0x8000, 0x4, 0xc1, 0x400, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x7fffffff, 0xfff}, {0x10000000, 0xc, 0xa1, 0x0, 0x9e6f, 0x5}, {0x8, 0x5, 0x42, 0x6, 0x81, 0x1}, {0xf, 0x10, 0x8, 0x3, 0x8, 0x7}, {0x6, 0xffffff95, 0xfffffff9, 0x4, 0xec79, 0xb}, {0x9, 0x1, 0x755, 0x8001, 0x6, 0x849}, {0x4c, 0x7, 0x8001, 0x160, 0xdfb, 0x6}, {0x7, 0x80000000, 0x0, 0x40, 0x5, 0x6}, {0x4, 0x3, 0x8, 0x2, 0x1}, {0x5, 0x9, 0x8, 0x7, 0x9, 0x200}, {0x4, 0x8, 0xf, 0x5, 0x0, 0x8}, {0x1, 0x0, 0x5eb5559d, 0xc0000000, 0x596, 0xbf1}, {0x4, 0x2, 0x6, 0x4, 0x10, 0x1}, {0x6, 0x1, 0x3ff, 0x80, 0x526a, 0x5}, {0x2, 0x4, 0x4, 0x4, 0x1ef6, 0x6}, {0x4, 0x2, 0xb, 0x5, 0x4000, 0x4}, {0x2, 0x80000001, 0x7ff, 0x1, 0x6, 0x8004}, {0xc, 0xfff, 0x9, 0xfffffff9, 0x9, 0x5}, {0xffffff16, 0x8b, 0x4, 0x1000000, 0xd2f, 0x1}, {0x3, 0x299eda51, 0x400, 0xe, 0xdc71, 0x7fff}, {0x8000, 0x1, 0x3ff, 0x6, 0x5, 0x1}, {0x2b11, 0xffffffff, 0x9, 0xd170, 0xf9b7, 0x91a54b9}], [{0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x9c98879475191753, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0xbe97ad06b3c87e39, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xf726ea04cace270d, 0x1}, {0x5, 0x4c43e1669ff9714a}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x5}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_mpls={0x30, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1e08}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e210002000000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000000000000000030000000000000000000000000000000200000000000000080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002cbd7000013500000a000100500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a08001600"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x400088e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 3.100489133s ago: executing program 4 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') write$P9_RREADDIR(r0, 0x0, 0x0) 1.724649568s ago: executing program 0 (id=564): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) ioctl$FE_READ_BER(0xffffffffffffffff, 0x80046f46, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x4, 0x2}}}}, 0xf) 1.526664058s ago: executing program 2 (id=565): socket$rxrpc(0x21, 0x2, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getpid() r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) fcntl$notify(r0, 0x402, 0x80000027) 1.468622421s ago: executing program 4 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 1.181538124s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 849.82912ms ago: executing program 2 (id=568): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x5, 0x0, 0x8, 0x0, 0x0, 0x7, 'syz1\x00', 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1, 0x1b9, &(0x7f0000000200)="$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") sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) 0s ago: executing program 5 (id=388): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) link(&(0x7f00000001c0)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) recvmmsg(r3, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.965472][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.997274][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. syzkaller login: [ 66.762077][ T4259] cgroup: Unknown subsys name 'net' [ 66.865933][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.132222][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.479999][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.488062][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.496510][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.505783][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.514224][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.522577][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.530485][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.534074][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.538722][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.545767][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.552531][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.566338][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.567328][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.580065][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.588537][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.588695][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.596881][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.603617][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.610701][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.617741][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.624735][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.631498][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.638728][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.645520][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.652328][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.659121][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.666654][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.673792][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.743712][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.751514][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.034232][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 70.146815][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 70.174497][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.189054][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.210173][ T4271] device bridge_slave_0 entered promiscuous mode [ 70.231419][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.238589][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.247867][ T4271] device bridge_slave_1 entered promiscuous mode [ 70.281737][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.317299][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 70.342981][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.371081][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 70.383016][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.468927][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.476060][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.485430][ T4277] device bridge_slave_0 entered promiscuous mode [ 70.494054][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.501277][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.509239][ T4277] device bridge_slave_1 entered promiscuous mode [ 70.521321][ T4271] team0: Port device team_slave_0 added [ 70.554214][ T4271] team0: Port device team_slave_1 added [ 70.588765][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.596009][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.604320][ T4282] device bridge_slave_0 entered promiscuous mode [ 70.612534][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.620949][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.628601][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.638245][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.664253][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.679006][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686097][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.694180][ T4282] device bridge_slave_1 entered promiscuous mode [ 70.701329][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.708418][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.719355][ T4272] device bridge_slave_1 entered promiscuous mode [ 70.727197][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.734209][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.760284][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.773630][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.780684][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.807486][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.868140][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.875460][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.883544][ T4281] device bridge_slave_0 entered promiscuous mode [ 70.893635][ T4277] team0: Port device team_slave_0 added [ 70.906623][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.919282][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.933887][ T4271] device hsr_slave_0 entered promiscuous mode [ 70.940752][ T4271] device hsr_slave_1 entered promiscuous mode [ 70.947716][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.955265][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.963236][ T4281] device bridge_slave_1 entered promiscuous mode [ 70.978090][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.996407][ T4277] team0: Port device team_slave_1 added [ 71.023772][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.057680][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.069521][ T4282] team0: Port device team_slave_0 added [ 71.075872][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.083420][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.109726][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.143301][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.153576][ T4282] team0: Port device team_slave_1 added [ 71.160040][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.167003][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.193175][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.209899][ T4272] team0: Port device team_slave_0 added [ 71.242422][ T4272] team0: Port device team_slave_1 added [ 71.254015][ T4281] team0: Port device team_slave_0 added [ 71.262353][ T4281] team0: Port device team_slave_1 added [ 71.274869][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.282711][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.308680][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.348408][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.356049][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.384199][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.384578][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401696][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.406713][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.418399][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.445337][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.471719][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.478703][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.504825][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.516661][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.524092][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.550263][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.569137][ T4277] device hsr_slave_0 entered promiscuous mode [ 71.575795][ T4277] device hsr_slave_1 entered promiscuous mode [ 71.582976][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.590936][ T4277] Cannot create hsr debugfs directory [ 71.606556][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.613655][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.642380][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.736019][ T4281] device hsr_slave_0 entered promiscuous mode [ 71.742794][ T4281] device hsr_slave_1 entered promiscuous mode [ 71.749574][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.757133][ T4281] Cannot create hsr debugfs directory [ 71.763588][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 71.763599][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 71.769986][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 71.797593][ T4282] device hsr_slave_0 entered promiscuous mode [ 71.804795][ T4282] device hsr_slave_1 entered promiscuous mode [ 71.811689][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.819390][ T4282] Cannot create hsr debugfs directory [ 71.840060][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 71.840082][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 71.843083][ T4272] device hsr_slave_0 entered promiscuous mode [ 71.859646][ T4272] device hsr_slave_1 entered promiscuous mode [ 71.867135][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.874810][ T4272] Cannot create hsr debugfs directory [ 72.048237][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.058523][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.085625][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.118058][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.212906][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.231789][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.246956][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.259395][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.303004][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.342443][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.354279][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.372558][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.421909][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.432211][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.446485][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.473933][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.511068][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.547291][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.574721][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.585756][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.607587][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.617086][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.627067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.636713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.649656][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.671283][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.683064][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.692438][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.701957][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.709354][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.718249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.727890][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.739563][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.746629][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.754746][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.764078][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.773602][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.780742][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.788507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.798697][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.822671][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.835094][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.857247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.881953][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.894841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.903925][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.911046][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.919489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.930862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.942274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.952671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.964717][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.978130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.024081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.032784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.042745][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.051829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.063583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.076200][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.093349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.104277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.113377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.124333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.133135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.143411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.152351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.168516][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.215105][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.224467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.249399][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.257807][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.265040][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.274520][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.284385][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.293241][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.302572][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.313954][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.323003][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.332133][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.339382][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.347502][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.357170][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.377427][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.394651][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.414598][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.425436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.435679][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.445876][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.456790][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.476076][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.512397][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.526900][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.535417][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.546032][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.554713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.563805][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.572616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.581538][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.590189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.598750][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.607616][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.614804][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.623445][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.631617][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.646411][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.660193][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.709654][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.730903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.753620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.763390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.773395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.782231][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.789399][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.798192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.809094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.817699][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.824849][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.833145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.842476][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 73.848969][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 73.849067][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 73.856306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.870670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.878343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.886243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.917599][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.926184][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 73.932555][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 73.940878][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.950007][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.957116][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.965007][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.974710][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.983897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.993873][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.003376][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.012644][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.022600][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.031286][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.040288][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.049003][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.057666][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.080336][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.103370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.114140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.132434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.162462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.194897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.204879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.220608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.239629][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.251687][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.295659][ T4271] device veth0_vlan entered promiscuous mode [ 74.315635][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.329926][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.338380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.347157][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.371658][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.390833][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.414963][ T4271] device veth1_vlan entered promiscuous mode [ 74.433190][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.443473][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.452131][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.463789][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.472043][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.486031][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.511186][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.544040][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.558382][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.579945][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.592896][ T4271] device veth0_macvtap entered promiscuous mode [ 74.611379][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.630453][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.641273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.650648][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.665659][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.698697][ T4271] device veth1_macvtap entered promiscuous mode [ 74.720997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.741244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.774270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.794033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.818545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.841014][ T4277] device veth0_vlan entered promiscuous mode [ 74.869618][ T4277] device veth1_vlan entered promiscuous mode [ 74.890383][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.912452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.929991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.950150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.978687][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.995304][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.005810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.014933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.025251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.035057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.047769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.081635][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.090929][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.099912][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.108701][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.120460][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.127969][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.146771][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.187455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.199888][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.209980][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.218938][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.231040][ T4277] device veth0_macvtap entered promiscuous mode [ 75.267468][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.295301][ T4277] device veth1_macvtap entered promiscuous mode [ 75.317128][ T4282] device veth0_vlan entered promiscuous mode [ 75.347582][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.367205][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.376717][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.384946][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.421592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.431002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.444099][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.455589][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.468209][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.482480][ T4282] device veth1_vlan entered promiscuous mode [ 75.512201][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.521002][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.530764][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.539624][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.548242][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.557317][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.565795][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.574898][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.583523][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.595345][ T4272] device veth0_vlan entered promiscuous mode [ 75.618981][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.619434][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.634828][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.648416][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.654995][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.679827][ T4272] device veth1_vlan entered promiscuous mode [ 75.687824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.697432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.706564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.715866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.725368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.737639][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.747132][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755923][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766102][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.796799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.812397][ T4281] device veth0_vlan entered promiscuous mode [ 75.831619][ T4282] device veth0_macvtap entered promiscuous mode [ 75.849257][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.857330][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.865552][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.874527][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.884346][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.892601][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.915466][ T4282] device veth1_macvtap entered promiscuous mode [ 75.922048][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 75.928081][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 75.934382][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 75.945407][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.957823][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.977451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.987847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.998486][ T4281] device veth1_vlan entered promiscuous mode [ 76.006200][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 76.006259][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 76.025400][ T4272] device veth0_macvtap entered promiscuous mode [ 76.047193][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.058152][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.067463][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.077498][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.095207][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.107599][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.117927][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.128609][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.141186][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.163539][ T4272] device veth1_macvtap entered promiscuous mode [ 76.179038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.187112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.197037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.206295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.220307][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.231036][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.243229][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.253982][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.265666][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.283737][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.292959][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302421][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.311601][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.375454][ T4281] device veth0_macvtap entered promiscuous mode [ 76.387166][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.396572][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.412463][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.421334][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.430952][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.441167][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.450415][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.458440][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.476918][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.499073][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.518871][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.547085][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.557142][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.570082][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.581820][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.583967][ T4360] loop3: detected capacity change from 0 to 512 [ 76.597853][ T4281] device veth1_macvtap entered promiscuous mode [ 76.615569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.631072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.642515][ T4360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.677400][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.699174][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.709091][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.721310][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.731220][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.741688][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.753439][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.755472][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 76.797603][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.814348][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.820704][ T4364] loop3: detected capacity change from 0 to 1024 [ 76.825149][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.831785][ T4364] ======================================================= [ 76.831785][ T4364] WARNING: The mand mount option has been deprecated and [ 76.831785][ T4364] and is ignored by this kernel. Remove the mand [ 76.831785][ T4364] option from the mount to silence this warning. [ 76.831785][ T4364] ======================================================= [ 76.877110][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.888363][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.899153][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.910556][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.926882][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.940549][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.968209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.979913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.997846][ T4364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.999305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.006790][ T4364] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.015145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.081784][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.091064][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.100794][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.109922][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.125682][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.141614][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.152183][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.162987][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.173036][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.183608][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.193777][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.204854][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.216344][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.247252][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.260336][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.272239][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.282239][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.293313][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.307942][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.386246][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.395445][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.408725][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.838325][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 77.949082][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.957513][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.968156][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.000117][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 78.006182][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 78.012046][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.012252][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 78.033602][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.088850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 78.098861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 78.108829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 78.118832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 78.128852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 78.138838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 78.148843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 78.158836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 78.168854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 78.248852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.392117][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 79.398165][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 79.453232][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.461681][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.468850][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.495719][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.561176][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.579098][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.593755][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.619996][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.629337][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.641674][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.661911][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.675963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.709788][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.900168][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.972744][ T4387] loop4: detected capacity change from 0 to 16 [ 80.033323][ T4387] erofs: (device loop4): mounted with root inode @ nid 36. [ 80.291808][ T4394] loop1: detected capacity change from 0 to 512 [ 80.382858][ T4394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.416175][ T4394] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.545438][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 82.969144][ T4402] process 'syz.2.14' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.002739][ T4402] 9pnet_fd: Insufficient options for proto=fd [ 83.301180][ T4409] loop1: detected capacity change from 0 to 256 [ 83.413742][ T4409] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 83.979198][ T4409] exFAT-fs (loop1): failed to load alloc-bitmap [ 83.985580][ T4409] exFAT-fs (loop1): failed to recognize exfat type [ 86.722408][ T153] cfg80211: failed to load regulatory.db [ 88.295967][ T4448] loop2: detected capacity change from 0 to 1024 [ 88.303567][ T4445] autofs4:pid:4445:autofs_fill_super: called with bogus options [ 88.439091][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.571777][ T4448] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.548360][ T4458] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.18: lblock 3 mapped to illegal pblock 3 (length 1) [ 89.844112][ T4458] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 89.856441][ T4458] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.856441][ T4458] [ 89.989968][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 90.175743][ T4465] loop2: detected capacity change from 0 to 512 [ 91.195253][ T4465] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 91.283154][ T4465] FAT-fs (loop2): Filesystem has been set read-only [ 91.532600][ T4478] loop0: detected capacity change from 0 to 8 [ 91.544060][ T4478] squashfs: Unknown parameter '' [ 94.679303][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.952932][ T4323] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 94.972503][ T4323] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.068453][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.100433][ T4504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.141723][ T4323] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 95.287329][ T4515] loop0: detected capacity change from 0 to 16 [ 95.318107][ T4515] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.451377][ T4515] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 95.518945][ T4323] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 95.720748][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.734928][ T4323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.755102][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 95.766916][ T4323] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.776269][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.799503][ T4511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 95.816714][ T4323] hub 5-1:1.0: bad descriptor, ignoring hub [ 95.828205][ T4323] hub: probe of 5-1:1.0 failed with error -5 [ 95.835144][ T4323] cdc_wdm 5-1:1.0: skipping garbage [ 95.840691][ T4323] cdc_wdm 5-1:1.0: skipping garbage [ 95.879349][ T4323] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 95.892941][ T4323] cdc_wdm 5-1:1.0: Unknown control protocol [ 95.939098][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.162398][ T4529] loop0: detected capacity change from 0 to 8 [ 96.174049][ T4529] squashfs: Unknown parameter '' [ 96.231417][ T126] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.239877][ T126] usb 2-1: config 1 has no interface number 0 [ 96.260376][ T126] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 96.314153][ T126] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x6E, skipping [ 96.355754][ T126] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.366294][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.375674][ T126] usb 2-1: Product: syz [ 96.382092][ T126] usb 2-1: Manufacturer: syz [ 96.388412][ T126] usb 2-1: SerialNumber: syz [ 96.480241][ T4287] Bluetooth: hci0: command 0x0401 tx timeout [ 96.535738][ T4521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 96.683363][ T126] usb 2-1: Expected 3 endpoints, found: 1 [ 96.769742][ T129] usb 5-1: USB disconnect, device number 2 [ 97.114440][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.146230][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.165626][ T4521] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 97.670564][ T4319] usb 2-1: USB disconnect, device number 2 [ 97.736530][ T4314] usb 4-1: USB disconnect, device number 2 [ 99.117473][ T4563] capability: warning: `syz.4.62' uses deprecated v2 capabilities in a way that may be insecure [ 99.245676][ T4561] syz.3.61 uses obsolete (PF_INET,SOCK_PACKET) [ 99.411736][ T4570] loop2: detected capacity change from 0 to 8 [ 99.422866][ T4570] squashfs: Unknown parameter '' [ 101.828267][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 102.019511][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880553b1000: rx timeout, send abort [ 102.520488][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880553b3c00: rx timeout, send abort [ 102.529172][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880553b1000: abort rx timeout. Force session deactivation [ 104.432565][ T4610] FAULT_INJECTION: forcing a failure. [ 104.432565][ T4610] name failslab, interval 1, probability 0, space 0, times 1 [ 104.468996][ T4610] CPU: 0 PID: 4610 Comm: syz.4.79 Not tainted syzkaller #0 [ 104.476260][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 104.486353][ T4610] Call Trace: [ 104.489647][ T4610] [ 104.492592][ T4610] dump_stack_lvl+0x188/0x24e [ 104.497323][ T4610] ? show_regs_print_info+0x12/0x12 [ 104.502558][ T4610] ? load_image+0x410/0x410 [ 104.507101][ T4610] ? __might_sleep+0xd0/0xd0 [ 104.511716][ T4610] ? __lock_acquire+0x7c40/0x7c40 [ 104.516770][ T4610] ? crypto_akcipher_init_tfm+0xc1/0xd0 [ 104.522353][ T4610] should_fail_ex+0x390/0x4c0 [ 104.527064][ T4610] should_failslab+0x5/0x20 [ 104.531594][ T4610] slab_pre_alloc_hook+0x59/0x300 [ 104.536652][ T4610] ? public_key_verify_signature+0x2ea/0xd20 [ 104.542655][ T4610] __kmem_cache_alloc_node+0x4f/0x270 [ 104.548060][ T4610] ? public_key_verify_signature+0x2ea/0xd20 [ 104.554065][ T4610] __kmalloc+0xa3/0x240 [ 104.558257][ T4610] public_key_verify_signature+0x2ea/0xd20 [ 104.564100][ T4610] ? x509_cert_parse+0x53a/0x7a0 [ 104.569066][ T4610] ? x509_key_preparse+0x60/0x660 [ 104.574116][ T4610] ? asymmetric_key_preparse+0xa5/0x140 [ 104.579695][ T4610] ? key_create_or_update+0x432/0xa40 [ 104.585089][ T4610] ? do_syscall_64+0x4c/0xa0 [ 104.589701][ T4610] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.595810][ T4610] ? public_key_free+0x80/0x80 [ 104.600610][ T4610] ? asymmetric_key_generate_id+0x52/0xd0 [ 104.606339][ T4610] ? asymmetric_key_id_same+0x63/0xe0 [ 104.611735][ T4610] x509_check_for_self_signed+0x317/0x420 [ 104.617473][ T4610] x509_cert_parse+0x59c/0x7a0 [ 104.622264][ T4610] x509_key_preparse+0x60/0x660 [ 104.627148][ T4610] ? down_read+0x1a8/0x2d0 [ 104.631592][ T4610] asymmetric_key_preparse+0xa5/0x140 [ 104.637003][ T4610] key_create_or_update+0x432/0xa40 [ 104.642227][ T4610] ? security_key_permission+0x7c/0xa0 [ 104.647723][ T4610] ? key_type_put+0x20/0x20 [ 104.652252][ T4610] ? lookup_user_key_possessed+0x40/0x40 [ 104.657927][ T4610] ? __might_fault+0xc2/0x120 [ 104.662619][ T4610] ? __might_fault+0xa6/0x120 [ 104.667317][ T4610] __se_sys_add_key+0x34b/0x410 [ 104.672288][ T4610] ? __x64_sys_add_key+0xc0/0xc0 [ 104.677250][ T4610] ? lockdep_hardirqs_on+0x94/0x140 [ 104.682484][ T4610] ? __x64_sys_add_key+0x1c/0xc0 [ 104.687456][ T4610] do_syscall_64+0x4c/0xa0 [ 104.691892][ T4610] ? clear_bhb_loop+0x60/0xb0 [ 104.696585][ T4610] ? clear_bhb_loop+0x60/0xb0 [ 104.701292][ T4610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.707240][ T4610] RIP: 0033:0x7f5e1459e159 [ 104.711683][ T4610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.731406][ T4610] RSP: 002b:00007f5e154c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 104.739843][ T4610] RAX: ffffffffffffffda RBX: 00007f5e14825fa0 RCX: 00007f5e1459e159 [ 104.747832][ T4610] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 104.755824][ T4610] RBP: 00007f5e1463506b R08: ffffffffffffffff R09: 0000000000000000 [ 104.763825][ T4610] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 104.771822][ T4610] R13: 00007f5e14826038 R14: 00007f5e14825fa0 R15: 00007ffdca4c9018 [ 104.779833][ T4610] [ 105.255358][ T4625] loop5: detected capacity change from 0 to 6 [ 105.302152][ T4625] Dev loop5: unable to read RDB block 6 [ 105.308167][ T4625] loop5: unable to read partition table [ 105.340397][ T4625] loop5: partition table beyond EOD, truncated [ 105.359776][ T4625] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.415746][ T4639] loop3: detected capacity change from 0 to 8 [ 106.426508][ T4639] squashfs: Unknown parameter '' [ 109.720126][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.481006][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.502426][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.537706][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.557432][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.599062][ T14] usb 4-1: Product: syz [ 110.603293][ T14] usb 4-1: Manufacturer: syz [ 110.653618][ T14] usb 4-1: SerialNumber: syz [ 110.681272][ T14] cdc_mbim 4-1:1.0: skipping garbage [ 110.941168][ T4665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.184736][ T14] cdc_mbim 4-1:1.0: bind() failure [ 111.355120][ T14] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 111.462624][ T14] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 111.591821][ T14] usbtest: probe of 4-1:1.1 failed with error -71 [ 112.905475][ T14] usb 4-1: USB disconnect, device number 3 [ 114.383668][ T4713] netlink: 9 bytes leftover after parsing attributes in process `syz.0.111'. [ 114.422603][ T4713] netlink: 9 bytes leftover after parsing attributes in process `syz.0.111'. [ 114.457757][ T4713] Zero length message leads to an empty skb [ 114.968376][ T4720] sctp: [Deprecated]: syz.0.112 (pid 4720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.968376][ T4720] Use struct sctp_sack_info instead [ 115.603230][ T4717] ima: policy update failed [ 115.613385][ T27] audit: type=1802 audit(1789516614.037:2): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.113" res=0 errno=0 [ 115.904979][ T4727] netlink: 104 bytes leftover after parsing attributes in process `syz.0.114'. [ 118.428269][ T27] audit: type=1326 audit(1789516616.847:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.2.110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f275519e159 code=0x0 [ 120.348612][ T4769] sctp: [Deprecated]: syz.0.125 (pid 4769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.348612][ T4769] Use struct sctp_sack_info instead [ 123.219847][ T4780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.128'. [ 125.013243][ T4792] ip_tables: iptables: counters copy to user failed while replacing table [ 125.062726][ T27] audit: type=1800 audit(1789516622.491:4): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 125.110309][ T4796] ip_tables: iptables: counters copy to user failed while replacing table [ 126.650749][ T4805] sctp: [Deprecated]: syz.4.137 (pid 4805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.650749][ T4805] Use struct sctp_sack_info instead [ 130.143027][ T4832] sched: RT throttling activated [ 130.230456][ T4836] netlink: 104 bytes leftover after parsing attributes in process `syz.4.144'. [ 130.802492][ T4844] sctp: [Deprecated]: syz.0.146 (pid 4844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.802492][ T4844] Use struct sctp_sack_info instead [ 132.653487][ T4855] ALSA: seq fatal error: cannot create timer (-22) [ 133.177530][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.184200][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.188860][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.389061][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 134.396256][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.427414][ T4320] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.437291][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.456561][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.465500][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.487034][ T4320] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 134.508719][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.517141][ T4320] usb 5-1: Product: syz [ 134.524008][ T4320] usb 5-1: Manufacturer: syz [ 134.528831][ T4320] usb 5-1: SerialNumber: syz [ 134.554641][ T4320] usb 5-1: config 0 descriptor?? [ 135.177592][ T4320] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 135.198046][ T4320] gs_usb: probe of 5-1:0.0 failed with error -71 [ 135.220617][ T4320] usb 5-1: USB disconnect, device number 3 [ 135.784366][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.956668][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.284946][ T4315] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.394027][ T4886] netlink: 104 bytes leftover after parsing attributes in process `syz.2.158'. [ 137.968823][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 138.149434][ T4315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.182186][ T4315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.195157][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.203333][ T4315] usb 5-1: Product: syz [ 138.207621][ T4315] usb 5-1: Manufacturer: syz [ 138.213029][ T4315] usb 5-1: SerialNumber: syz [ 138.233088][ T4849] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.237551][ T4315] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 138.244228][ T4849] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.262537][ T4849] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.271497][ T4849] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.516267][ T126] usb 5-1: USB disconnect, device number 4 [ 138.631295][ T4892] FAULT_INJECTION: forcing a failure. [ 138.631295][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 138.658900][ T4892] CPU: 0 PID: 4892 Comm: syz.1.162 Not tainted syzkaller #0 [ 138.666250][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 138.676350][ T4892] Call Trace: [ 138.679651][ T4892] [ 138.682592][ T4892] dump_stack_lvl+0x188/0x24e [ 138.687401][ T4892] ? show_regs_print_info+0x12/0x12 [ 138.692702][ T4892] ? load_image+0x410/0x410 [ 138.697242][ T4892] ? __might_sleep+0xd0/0xd0 [ 138.701869][ T4892] ? __lock_acquire+0x7c40/0x7c40 [ 138.706928][ T4892] should_fail_ex+0x390/0x4c0 [ 138.711640][ T4892] should_failslab+0x5/0x20 [ 138.716166][ T4892] slab_pre_alloc_hook+0x59/0x300 [ 138.721220][ T4892] ? do_epoll_create+0x107/0x340 [ 138.726193][ T4892] __kmem_cache_alloc_node+0x4f/0x270 [ 138.731598][ T4892] ? do_epoll_create+0x107/0x340 [ 138.736564][ T4892] kmalloc_trace+0x26/0xe0 [ 138.741010][ T4892] do_epoll_create+0x107/0x340 [ 138.745805][ T4892] __x64_sys_epoll_create1+0x33/0x40 [ 138.751122][ T4892] do_syscall_64+0x4c/0xa0 [ 138.755560][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 138.760259][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 138.764942][ T4892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.770842][ T4892] RIP: 0033:0x7f81e839e159 [ 138.775277][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.794917][ T4892] RSP: 002b:00007f81e9195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 138.803343][ T4892] RAX: ffffffffffffffda RBX: 00007f81e8625fa0 RCX: 00007f81e839e159 [ 138.811315][ T4892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 138.819280][ T4892] RBP: 00007f81e843506b R08: 0000000000000000 R09: 0000000000000000 [ 138.827244][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.835207][ T4892] R13: 00007f81e8626038 R14: 00007f81e8625fa0 R15: 00007ffeb91315c8 [ 138.843184][ T4892] [ 139.444336][ T4899] ALSA: seq fatal error: cannot create timer (-22) [ 140.586142][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 140.595606][ T4908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 142.057398][ T4915] ALSA: seq fatal error: cannot create timer (-22) [ 145.348921][ T4315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.638138][ T4315] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 146.648784][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.657173][ T4315] usb 3-1: Product: syz [ 146.661851][ T4315] usb 3-1: Manufacturer: syz [ 146.666492][ T4315] usb 3-1: SerialNumber: syz [ 148.013730][ T4315] rtl8150 3-1:1.0: couldn't reset the device [ 148.045912][ T4315] rtl8150: probe of 3-1:1.0 failed with error -5 [ 148.123475][ T4956] loop4: detected capacity change from 0 to 8 [ 148.130291][ T4315] usb 3-1: USB disconnect, device number 2 [ 148.131411][ T4956] squashfs: Unknown parameter '' [ 148.212427][ T4517] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.457934][ T4967] capability: warning: `syz.3.175' uses 32-bit capabilities (legacy support in use) [ 151.605381][ T4984] sctp: [Deprecated]: syz.1.188 (pid 4984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.605381][ T4984] Use struct sctp_sack_info instead [ 151.711495][ T4989] sctp: [Deprecated]: syz.0.179 (pid 4989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.711495][ T4989] Use struct sctp_sack_info instead [ 153.662902][ T4997] program syz.1.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.858672][ T5000] loop0: detected capacity change from 0 to 8 [ 153.873800][ T5000] squashfs: Unknown parameter '' [ 154.719613][ T5006] ALSA: seq fatal error: cannot create timer (-22) [ 156.632920][ T5018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.200'. [ 156.669080][ T5019] sctp: [Deprecated]: syz.3.199 (pid 5019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.669080][ T5019] Use struct sctp_sack_info instead [ 157.799220][ T5027] sctp: [Deprecated]: syz.4.202 (pid 5027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.799220][ T5027] Use struct sctp_sack_info instead [ 159.842961][ T5041] sctp: [Deprecated]: syz.4.204 (pid 5041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.842961][ T5041] Use struct sctp_sack_info instead [ 161.118884][ T5045] syz.1.205 (5045) used greatest stack depth: 20624 bytes left [ 162.867979][ T5069] sctp: [Deprecated]: syz.2.212 (pid 5069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.867979][ T5069] Use struct sctp_sack_info instead [ 163.528169][ T5074] sctp: [Deprecated]: syz.0.214 (pid 5074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.528169][ T5074] Use struct sctp_sack_info instead [ 164.998629][ T5081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.213'. [ 165.381981][ T5084] loop2: detected capacity change from 0 to 8 [ 165.392148][ T5084] squashfs: Unknown parameter '' [ 166.255941][ T5098] sctp: [Deprecated]: syz.4.221 (pid 5098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.255941][ T5098] Use struct sctp_sack_info instead [ 168.957071][ T5112] ALSA: seq fatal error: cannot create timer (-22) [ 169.897127][ T5120] sctp: [Deprecated]: syz.1.227 (pid 5120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.897127][ T5120] Use struct sctp_sack_info instead [ 172.216571][ T5143] sctp: [Deprecated]: syz.1.234 (pid 5143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.216571][ T5143] Use struct sctp_sack_info instead [ 174.318221][ T5160] loop4: detected capacity change from 0 to 8 [ 174.329184][ T5160] squashfs: Unknown parameter '' [ 174.845471][ T5166] sctp: [Deprecated]: syz.2.242 (pid 5166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.845471][ T5166] Use struct sctp_sack_info instead [ 176.353756][ T4517] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.014938][ T5202] sctp: [Deprecated]: syz.4.251 (pid 5202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.014938][ T5202] Use struct sctp_sack_info instead [ 179.814063][ T5212] sctp: [Deprecated]: syz.2.254 (pid 5212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.814063][ T5212] Use struct sctp_sack_info instead [ 180.618301][ T5217] loop2: detected capacity change from 0 to 8 [ 180.630166][ T5217] squashfs: Unknown parameter '' [ 181.663370][ T4265] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.195764][ T27] audit: type=1326 audit(1789516666.618:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5234 comm="syz.3.264" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16ff59e159 code=0x0 [ 185.375265][ T5261] loop2: detected capacity change from 0 to 8 [ 185.386008][ T5261] squashfs: Unknown parameter '' [ 186.248849][ T5262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 188.137990][ T4265] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.289601][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 188.661911][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 189.494756][ T5286] sctp: [Deprecated]: syz.3.268 (pid 5286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.494756][ T5286] Use struct sctp_sack_info instead [ 191.624772][ T5316] sctp: [Deprecated]: syz.3.289 (pid 5316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.624772][ T5316] Use struct sctp_sack_info instead [ 192.193826][ T5336] sctp: [Deprecated]: syz.1.295 (pid 5336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.193826][ T5336] Use struct sctp_sack_info instead [ 194.250888][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257245][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.075688][ T5350] sctp: failed to load transform for md5: -2 [ 196.655394][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 196.661528][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 196.675667][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 196.675705][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 196.681747][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 197.966974][ T5389] sctp: [Deprecated]: syz.1.312 (pid 5389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.966974][ T5389] Use struct sctp_sack_info instead [ 202.502120][ T5429] sctp: [Deprecated]: syz.3.326 (pid 5429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.502120][ T5429] Use struct sctp_sack_info instead [ 206.947752][ T5463] sctp: [Deprecated]: syz.1.336 (pid 5463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.947752][ T5463] Use struct sctp_sack_info instead [ 208.864988][ T5472] sctp: [Deprecated]: syz.2.339 (pid 5472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.864988][ T5472] Use struct sctp_sack_info instead [ 210.331892][ T5481] loop3: detected capacity change from 0 to 8 [ 210.349708][ T5481] squashfs: Unknown parameter '' [ 214.147620][ T4265] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.436187][ T5511] sctp: [Deprecated]: syz.3.352 (pid 5511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.436187][ T5511] Use struct sctp_sack_info instead [ 220.084943][ T5535] loop1: detected capacity change from 0 to 8 [ 220.094248][ T5535] squashfs: Unknown parameter '' [ 223.479048][ T27] audit: type=1800 audit(1789516698.897:6): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.365" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 225.528680][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 225.695550][ T4265] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.021990][ T5573] sctp: [Deprecated]: syz.2.367 (pid 5573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.021990][ T5573] Use struct sctp_sack_info instead [ 228.923595][ T5595] sctp: [Deprecated]: syz.4.378 (pid 5595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.923595][ T5595] Use struct sctp_sack_info instead [ 230.015139][ T27] audit: type=1804 audit(1789516703.437:7): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 230.732856][ T27] audit: type=1804 audit(1789516704.007:8): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 230.874099][ T27] audit: type=1804 audit(1789516704.007:9): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 230.948778][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 230.970208][ T27] audit: type=1804 audit(1789516704.007:10): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 231.737357][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 231.872994][ T7] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 231.947137][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 232.017682][ T27] audit: type=1804 audit(1789516704.007:11): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 232.040648][ T5615] sctp: [Deprecated]: syz.1.384 (pid 5615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.040648][ T5615] Use struct sctp_sack_info instead [ 232.226393][ T27] audit: type=1804 audit(1789516704.007:12): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 232.304445][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.395949][ T27] audit: type=1804 audit(1789516704.007:13): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 232.527712][ T7] usb 5-1: string descriptor 0 read error: -22 [ 232.543148][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 232.565991][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.600750][ T3639] udevd[3639]: could not touch /run/udev/queue: No such file or directory [ 232.609545][ T27] audit: type=1804 audit(1789516704.007:14): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 232.684437][ T27] audit: type=1804 audit(1789516704.007:15): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 232.796296][ T27] audit: type=1804 audit(1789516704.007:16): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/58/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 234.470682][ T5635] sctp: [Deprecated]: syz.2.391 (pid 5635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.470682][ T5635] Use struct sctp_sack_info instead [ 235.246971][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.265921][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.274168][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.317824][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.325430][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.332823][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.259279][ T5662] netlink: 112 bytes leftover after parsing attributes in process `syz.4.398'. [ 237.649957][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.667322][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.675674][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.704269][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.736132][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.761054][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.609405][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.618422][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.627206][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.661316][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.687125][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.709468][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.552194][ T5701] batman_adv: batadv0: Adding interface: dummy0 [ 241.601640][ T5701] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.730138][ T5701] batman_adv: batadv0: Interface activated: dummy0 [ 241.786213][ T5703] sctp: [Deprecated]: syz.4.404 (pid 5703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.786213][ T5703] Use struct sctp_sack_info instead [ 241.852139][ T5701] batadv0: mtu less than device minimum [ 242.010330][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.022859][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.035077][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.047195][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.059480][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.071517][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.083879][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.096163][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.108315][ T5701] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.239033][ T5707] block device autoloading is deprecated and will be removed. [ 242.649455][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.660942][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.672240][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.690500][ T5716] FAULT_INJECTION: forcing a failure. [ 242.690500][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 242.703834][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.750112][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.753906][ T5716] CPU: 0 PID: 5716 Comm: syz.2.414 Not tainted syzkaller #0 [ 242.764440][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 242.774525][ T5716] Call Trace: [ 242.777815][ T5716] [ 242.780772][ T5716] dump_stack_lvl+0x188/0x24e [ 242.785482][ T5716] ? show_regs_print_info+0x12/0x12 [ 242.790701][ T5716] ? load_image+0x410/0x410 [ 242.795221][ T5716] ? __might_sleep+0xd0/0xd0 [ 242.799815][ T5716] ? __lock_acquire+0x7c40/0x7c40 [ 242.804848][ T5716] should_fail_ex+0x390/0x4c0 [ 242.809534][ T5716] should_failslab+0x5/0x20 [ 242.814036][ T5716] slab_pre_alloc_hook+0x59/0x300 [ 242.819061][ T5716] ? tomoyo_encode+0x28a/0x550 [ 242.823825][ T5716] __kmem_cache_alloc_node+0x4f/0x270 [ 242.829195][ T5716] ? tomoyo_encode+0x28a/0x550 [ 242.834045][ T5716] __kmalloc+0xa3/0x240 [ 242.838207][ T5716] ? full_name_hash+0x8e/0xe0 [ 242.842900][ T5716] tomoyo_encode+0x28a/0x550 [ 242.847496][ T5716] tomoyo_mount_permission+0x4f6/0x9b0 [ 242.852954][ T5716] ? tomoyo_mount_permission+0x2a1/0x9b0 [ 242.858587][ T5716] ? kmem_cache_free+0xf7/0x2a0 [ 242.863436][ T5716] ? tomoyo_get_name+0x520/0x520 [ 242.868408][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 242.873610][ T5716] security_sb_mount+0x83/0xb0 [ 242.878391][ T5716] path_mount+0xb8/0xfb0 [ 242.882640][ T5716] __se_sys_mount+0x2e3/0x3d0 [ 242.887318][ T5716] ? __x64_sys_mount+0xc0/0xc0 [ 242.892102][ T5716] ? lockdep_hardirqs_on+0x94/0x140 [ 242.897333][ T5716] ? __x64_sys_mount+0x1c/0xc0 [ 242.902099][ T5716] do_syscall_64+0x4c/0xa0 [ 242.906519][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 242.911197][ T5716] ? clear_bhb_loop+0x60/0xb0 [ 242.915870][ T5716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.921766][ T5716] RIP: 0033:0x7f275519e159 [ 242.926174][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.945782][ T5716] RSP: 002b:00007f2756035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.954194][ T5716] RAX: ffffffffffffffda RBX: 00007f2755425fa0 RCX: 00007f275519e159 [ 242.962168][ T5716] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 242.970136][ T5716] RBP: 00007f275523506b R08: 0000200000000200 R09: 0000000000000000 [ 242.978103][ T5716] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 242.986095][ T5716] R13: 00007f2755426038 R14: 00007f2755425fa0 R15: 00007ffce1c79b68 [ 242.994079][ T5716] [ 243.003707][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.626422][ T5719] sctp: [Deprecated]: syz.1.415 (pid 5719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.626422][ T5719] Use struct sctp_sack_info instead [ 243.929135][ T5724] loop2: detected capacity change from 0 to 8 [ 243.940605][ T5724] squashfs: Unknown parameter '' [ 244.433657][ T4315] usb 5-1: USB disconnect, device number 5 [ 245.246515][ T5733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 245.281653][ T5733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 245.845891][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.857213][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.941862][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.955629][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.999979][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.034148][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.727738][ T5752] sctp: [Deprecated]: syz.0.423 (pid 5752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.727738][ T5752] Use struct sctp_sack_info instead [ 248.351862][ T5765] sctp: [Deprecated]: syz.2.428 (pid 5765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.351862][ T5765] Use struct sctp_sack_info instead [ 248.615388][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 250.612026][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.657838][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.666349][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.699492][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.750116][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.778714][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.071024][ T5797] sctp: [Deprecated]: syz.1.437 (pid 5797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.071024][ T5797] Use struct sctp_sack_info instead [ 253.235971][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 255.156981][ T5833] sctp: [Deprecated]: syz.4.443 (pid 5833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.156981][ T5833] Use struct sctp_sack_info instead [ 255.588833][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.603865][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.623069][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.681343][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.689034][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695444][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.706502][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.714206][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.584303][ T5846] sctp: [Deprecated]: syz.2.444 (pid 5846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.584303][ T5846] Use struct sctp_sack_info instead [ 260.448529][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.477458][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.493849][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.522504][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.565673][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.581017][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.219979][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 262.287202][ T5870] trusted_key: encrypted_key: keyword 'uew' not recognized [ 263.296923][ T5875] sctp: [Deprecated]: syz.1.455 (pid 5875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.296923][ T5875] Use struct sctp_sack_info instead [ 263.953560][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.974765][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.029398][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.075813][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.104114][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.111456][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.948174][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 271.684540][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.694676][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.777763][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.789481][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.804875][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.812702][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.948693][ T5924] sctp: [Deprecated]: syz.2.468 (pid 5924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.948693][ T5924] Use struct sctp_sack_info instead [ 274.423876][ T5938] sctp: [Deprecated]: syz.0.471 (pid 5938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.423876][ T5938] Use struct sctp_sack_info instead [ 274.741675][ T5940] sctp: [Deprecated]: syz.4.472 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.741675][ T5940] Use struct sctp_sack_info instead [ 275.328603][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.337690][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.346117][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.356332][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.365465][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.372916][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.370794][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.380311][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.388952][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.396842][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.458532][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.475821][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.924183][ T4322] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 282.873584][ T4322] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.888472][ T4322] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.918435][ T4322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.968580][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 283.030566][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 283.531979][ T4322] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.548504][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.557863][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.568240][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.576165][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.586065][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.586225][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.603587][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.611270][ T4322] usb 1-1: Product: syz [ 283.615628][ T4322] usb 1-1: Manufacturer: syz [ 283.704466][ T4322] cdc_wdm 1-1:1.0: skipping garbage [ 283.710179][ T5993] sctp: [Deprecated]: syz.1.483 (pid 5993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.710179][ T5993] Use struct sctp_sack_info instead [ 283.748430][ T4322] cdc_wdm 1-1:1.0: skipping garbage [ 283.812820][ T4322] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 283.833435][ T4322] cdc_wdm 1-1:1.0: Unknown control protocol [ 284.688533][ T4322] usb 1-1: USB disconnect, device number 2 [ 286.697047][ T6009] sctp: [Deprecated]: syz.4.487 (pid 6009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.697047][ T6009] Use struct sctp_sack_info instead [ 289.040526][ T6020] sctp: [Deprecated]: syz.0.490 (pid 6020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.040526][ T6020] Use struct sctp_sack_info instead [ 289.374053][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.390487][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.399018][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.406910][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.414809][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.422275][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.821316][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.085291][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.116595][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.138262][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.168998][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.345259][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.360629][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.584031][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.655017][ T126] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 293.662699][ T126] usb 3-1: can't read configurations, error -71 [ 294.336623][ T6048] sctp: [Deprecated]: syz.1.501 (pid 6048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.336623][ T6048] Use struct sctp_sack_info instead [ 295.003688][ T6055] MTD: Couldn't look up './dev/mtdblock0': -2 [ 295.615080][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 296.909885][ T6065] trusted_key: encrypted_key: insufficient parameters specified [ 297.154431][ T6069] sctp: [Deprecated]: syz.0.504 (pid 6069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.154431][ T6069] Use struct sctp_sack_info instead [ 298.708393][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 299.179522][ T6088] sctp: [Deprecated]: syz.1.513 (pid 6088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.179522][ T6088] Use struct sctp_sack_info instead [ 299.602994][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.620326][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.629100][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.629102][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.648763][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.656319][ T126] usb 3-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 299.656397][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 299.676498][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.701298][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.904548][ T126] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 300.012396][ T6091] udevd[6091]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory [ 300.150877][ T4315] usb 3-1: USB disconnect, device number 5 [ 303.606359][ T4315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.884659][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.895137][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.914563][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 303.919961][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.927662][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.964285][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.003578][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.019105][ T4315] usb 1-1: config 7 has an invalid interface number: 192 but max is 1 [ 304.027396][ T4315] usb 1-1: config 7 has an invalid interface number: 3 but max is 1 [ 304.046929][ T4315] usb 1-1: config 7 has no interface number 0 [ 304.062028][ T4315] usb 1-1: config 7 has no interface number 1 [ 304.068194][ T4315] usb 1-1: config 7 interface 3 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 304.108630][ T4315] usb 1-1: config 7 interface 192 has no altsetting 0 [ 304.115471][ T4315] usb 1-1: config 7 interface 3 has no altsetting 0 [ 304.458474][ T4315] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0 [ 304.467658][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.498436][ T4315] usb 1-1: Product: syz [ 304.502658][ T4315] usb 1-1: Manufacturer: syz [ 304.507271][ T4315] usb 1-1: SerialNumber: syz [ 305.500788][ T4315] usb 1-1: selecting invalid altsetting 1 [ 305.537068][ T4315] catc 1-1:7.192: Can't set altsetting 1. [ 305.559550][ T4315] catc: probe of 1-1:7.192 failed with error -5 [ 305.978147][ T4315] catc 1-1:7.3: Missing or invalid endpoints [ 306.249486][ T26] usb 1-1: USB disconnect, device number 3 [ 307.485667][ T6138] sctp: [Deprecated]: syz.1.525 (pid 6138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.485667][ T6138] Use struct sctp_sack_info instead [ 307.531109][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.314178][ T6144] binder: 6141:6144 ioctl c0306201 0 returned -14 [ 308.840341][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.852892][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.862939][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.877703][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.890087][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.901097][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.967754][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.906312][ T6174] cgroup: fork rejected by pids controller in /syz0 [ 315.620135][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.989070][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.006427][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.029188][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.189491][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.197224][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.204551][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.444585][ T6248] sctp: [Deprecated]: syz.0.542 (pid 6248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.444585][ T6248] Use struct sctp_sack_info instead [ 317.124012][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.130428][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.983035][ T6268] trusted_key: encrypted_key: insufficient parameters specified [ 322.021381][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.052285][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.060894][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.117835][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.130696][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.139287][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.302853][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.158374][ T26] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 327.442471][ T126] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 327.697613][ T6339] loop2: detected capacity change from 0 to 8 [ 327.708389][ T6339] squashfs: Unknown parameter '' [ 327.956639][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.985723][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.994745][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.012288][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.039575][ T26] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 328.062534][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.091398][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.183435][ T6323] ceph: No mds server is up or the cluster is laggy SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=388 state=3 status=67 (errno 9: Bad file descriptor) [ 330.504480][ T5913] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2