last executing test programs: 4m44.052656757s ago: executing program 0 (id=1): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 4m43.814398964s ago: executing program 0 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m42.235950185s ago: executing program 0 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r1 = socket$inet(0x2, 0x4, 0xff) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0x400, 0x10001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ba210066ba4a0066ef0f29902cbb0000c4e2b1ba8c88d90000000f83001000000f7842280f07b801000000c4033921820f47a753fd", 0x41}], 0x1, 0x53, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) read$FUSE(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x39, 0x0, 0x0) 4m42.018700441s ago: executing program 32 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r1 = socket$inet(0x2, 0x4, 0xff) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0x400, 0x10001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ba210066ba4a0066ef0f29902cbb0000c4e2b1ba8c88d90000000f83001000000f7842280f07b801000000c4033921820f47a753fd", 0x41}], 0x1, 0x53, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) read$FUSE(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x39, 0x0, 0x0) 14.340277857s ago: executing program 2 (id=1059): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffe, 0x0, 0x1001, {[@generic={0x13, 0x2}, @exp_fastopen={0xfe, 0x8, 0xf989, "ea530000"}]}}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000002c0)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000001300)) ioctl$FIONCLEX(r2, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe42) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) io_setup(0x1, &(0x7f0000000040)) timer_gettime(0x0, 0x0) 13.156619054s ago: executing program 2 (id=1064): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x21, 0x8, 0x2}, 0x8, 0x2, 0x80000d, 0x0, 0x9, 0x1, 0x0}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) fallocate(0xffffffffffffffff, 0x1, 0xbf5, 0x2000402) r8 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x545340, 0x48) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x40, 0x0, 0x28, {0x28, 0xc, "83efb9301b0eb668599778f0187ff0478fa22a61a54607bf00a9e43d629c479c37f524cde38b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.905008374s ago: executing program 4 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001140), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x734a, 0x0) ftruncate(r2, 0x1000006) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x1000, 0x1000}) 11.796121527s ago: executing program 4 (id=1069): socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x10) eventfd(0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 10.76083736s ago: executing program 4 (id=1071): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) 9.698378803s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r2, &(0x7f0000000200)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.286273678s ago: executing program 3 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) semget(0x3, 0x0, 0x608) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) socket(0x67f28ce95ba2a169, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x9}, 0x1c) 8.153136652s ago: executing program 5 (id=1081): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 8.100003084s ago: executing program 2 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) 8.012209077s ago: executing program 5 (id=1084): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0xe20000e1) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 7.346430868s ago: executing program 5 (id=1085): r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) 7.27479967s ago: executing program 3 (id=1086): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r1, 0xffffffffffffffff, 0x0) 6.499393275s ago: executing program 3 (id=1087): mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x210818, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_io_uring_setup(0xf05, 0x0, 0x0, 0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') 5.508188996s ago: executing program 4 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) ftruncate(r5, 0x0) 5.238808064s ago: executing program 4 (id=1089): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030e28bd7000fedbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) 5.124026208s ago: executing program 4 (id=1090): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x21, 0x8, 0x2}, 0x8, 0x2, 0x80000d, 0x0, 0x9, 0x1, 0x0}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) fallocate(r2, 0x1, 0xbf5, 0x2000402) r7 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x545340, 0x48) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.696123302s ago: executing program 1 (id=1091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[], 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, r4, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x80000000000, 0x1, 0x1}}, 0x40) recvmmsg$unix(r3, &(0x7f0000001000)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/83, 0x53}, {0x0}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/12, 0xc}, {0x0}], 0x5}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)}}], 0x2, 0x60, &(0x7f00000010c0)={0x0, 0x989680}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x12540, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000a80), 0x0, 0x2, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 4.405196751s ago: executing program 3 (id=1092): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x21, 0x8, 0x2}, 0x8, 0x2, 0x80000d, 0x0, 0x9, 0x1, 0x0}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) fallocate(0xffffffffffffffff, 0x1, 0xbf5, 0x2000402) r8 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x545340, 0x48) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x40, 0x0, 0x28, {0x28, 0xc, "83efb9301b0eb668599778f0187ff0478fa22a61a54607bf00a9e43d629c479c37f524cde38b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.170404208s ago: executing program 5 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x9, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x58, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$COMEDI_INSN(r5, 0x8028640c, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.79904045s ago: executing program 1 (id=1094): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffe, 0x0, 0x1001, {[@generic={0x13, 0x2}, @exp_fastopen={0xfe, 0x8, 0xf989, "ea530000"}]}}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f00000002c0)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000001300)) ioctl$FIONCLEX(r3, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe42) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) io_setup(0x1, &(0x7f0000000040)) timer_gettime(0x0, 0x0) 3.246189297s ago: executing program 5 (id=1095): syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x0, 0x3], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x40081fc, 0x4) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x10000f, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), 0x0, 0x0) 3.245718217s ago: executing program 2 (id=1096): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.161360692s ago: executing program 1 (id=1097): socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x10) eventfd(0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2.080172744s ago: executing program 2 (id=1098): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) 1.354724237s ago: executing program 3 (id=1099): r0 = semget$private(0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000440)=""/168, &(0x7f0000000500)=0xa8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(r0, &(0x7f0000000000)=[{0x3}, {0x0, 0x6, 0x1800}, {0x0, 0x3}], 0x3) 1.24511285s ago: executing program 1 (id=1100): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) 1.067120366s ago: executing program 1 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 358.543158ms ago: executing program 3 (id=1102): mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x210818, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_io_uring_setup(0xf05, 0x0, 0x0, 0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') 109.089326ms ago: executing program 5 (id=1103): r0 = socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) 0s ago: executing program 1 (id=1104): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[], 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, r4, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x80000000000, 0x1, 0x1}}, 0x40) recvmmsg$unix(r3, &(0x7f0000001000)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/83, 0x53}, {0x0}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/12, 0xc}, {0x0}], 0x5}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)}}], 0x2, 0x60, &(0x7f00000010c0)={0x0, 0x989680}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x12540, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000a80), 0x0, 0x2, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) kernel console output (not intermixed with test programs): 1560 would solve the problem. [ 65.153670][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.174489][ T4197] team0: Port device team_slave_1 added [ 65.180771][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.188196][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.214630][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.229340][ T4189] team0: Port device team_slave_0 added [ 65.236228][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.243692][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.269969][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.303969][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.311041][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.337125][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.349916][ T4189] team0: Port device team_slave_1 added [ 65.393296][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.400395][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.428066][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.448187][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.455354][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.481363][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.497485][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.504865][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.513756][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.520734][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.546791][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.561037][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.569216][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.576291][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.584466][ T4188] Cannot create hsr debugfs directory [ 65.590501][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.597711][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.624179][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.731880][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.738913][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.746039][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.754412][ T4191] Cannot create hsr debugfs directory [ 65.778042][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.785431][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.793327][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.800929][ T4189] Cannot create hsr debugfs directory [ 65.829754][ T4197] device hsr_slave_0 entered promiscuous mode [ 65.836838][ T4177] Bluetooth: hci3: command 0x0409 tx timeout [ 65.842754][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.846979][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 65.855495][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.855514][ T4197] device hsr_slave_1 entered promiscuous mode [ 65.868036][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.877019][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.884870][ T4197] Cannot create hsr debugfs directory [ 66.196715][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.208953][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.219495][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.233862][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.276630][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.288766][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.300702][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.310332][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.417781][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.432398][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.457470][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.468386][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.503589][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.516012][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.545196][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.571550][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.604540][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.621247][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.641125][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.667510][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.676183][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.686922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.698279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.707359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.716686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.730061][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.740409][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.761401][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.771302][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.783851][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791289][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.801826][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.810539][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.820878][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.829435][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.836678][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.849344][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.877060][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.885147][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.894277][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.903455][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.910540][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.919339][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.930216][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.939915][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.949598][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.958849][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.976075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.986413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.996925][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.004064][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.015985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.025383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.064062][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.074108][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.085155][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.095423][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.105540][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.114446][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.127416][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.146042][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.155583][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.164957][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.178705][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.188368][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.198020][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.227694][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.235656][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.244687][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.254227][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.264802][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.274873][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.283919][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.301090][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.350717][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.369481][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.379449][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.386741][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.403351][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.412700][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.422231][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.429325][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.438632][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.447474][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.458494][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.480207][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.492672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.504664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.548309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.575567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.592734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.609140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.618122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.633293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.646745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.664525][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.679586][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.701338][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.714487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.726287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.753276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.764210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.794755][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.801934][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.810093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.824896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.837008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.846117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.858270][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.865419][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.876389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.884448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.897161][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.912263][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.937473][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 67.944683][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 67.952080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.960385][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 67.973509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.987122][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 67.995930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.008200][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 68.016908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.063328][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.070454][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.085405][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.095142][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.104758][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.114421][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.123831][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.134122][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.143165][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.150387][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.159059][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.168089][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.177215][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.184427][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.192537][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.225847][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.241337][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.258802][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.278187][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.286809][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.300993][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.310012][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.326949][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.338537][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.353569][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.362646][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.371020][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.380245][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.389807][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.441833][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.449619][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.460621][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.470423][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.482479][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.491001][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.513025][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.532796][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.543606][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.554062][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.583226][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.603654][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.619710][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.661842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.670261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.688080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.713836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.743385][ T4190] device veth0_vlan entered promiscuous mode [ 68.757338][ T4191] device veth0_vlan entered promiscuous mode [ 68.773041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.784892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.794321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.804376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.820635][ T4190] device veth1_vlan entered promiscuous mode [ 68.838755][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.858228][ T4188] device veth0_vlan entered promiscuous mode [ 68.866088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.877008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.886457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.894917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.903288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.910780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.919957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.937827][ T4191] device veth1_vlan entered promiscuous mode [ 68.958779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.967924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.983436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.991392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.013530][ T4190] device veth0_macvtap entered promiscuous mode [ 69.039637][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.049867][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.059552][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.069490][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.078889][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.088122][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.106133][ T4190] device veth1_macvtap entered promiscuous mode [ 69.121440][ T4191] device veth0_macvtap entered promiscuous mode [ 69.146934][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.160716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.173698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.181179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.189433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.198957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.208704][ T4188] device veth1_vlan entered promiscuous mode [ 69.219333][ T4191] device veth1_macvtap entered promiscuous mode [ 69.237094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.246734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.255635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.272756][ T4189] device veth0_vlan entered promiscuous mode [ 69.295337][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.307113][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.320997][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.329943][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.338745][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.348357][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.357982][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.367693][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.377348][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.388386][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.396675][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.410472][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.422414][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.434763][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.447761][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.457276][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.468098][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.477100][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503844][ T4189] device veth1_vlan entered promiscuous mode [ 69.515495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.528748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.538806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.547844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.559834][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.570966][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.584402][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.605968][ T4188] device veth0_macvtap entered promiscuous mode [ 69.626152][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.643300][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.657858][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.667319][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.676872][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.689791][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.699342][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.708444][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.718516][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.742871][ T4188] device veth1_macvtap entered promiscuous mode [ 69.752805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.761000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.776839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.803701][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.815866][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.826148][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.839101][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.850375][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.881071][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.890032][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.904206][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.918277][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.929032][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.939820][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.951393][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.965601][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974792][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.984398][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.993854][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 69.999091][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.000839][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 70.015641][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 70.028414][ T4189] device veth0_macvtap entered promiscuous mode [ 70.040306][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.050198][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.059352][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.070196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.078567][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 70.086421][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 70.093428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.121281][ T4189] device veth1_macvtap entered promiscuous mode [ 70.142362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.156906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.165330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.201013][ T4197] device veth0_vlan entered promiscuous mode [ 70.235403][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.247708][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.259288][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.270504][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.280431][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.291105][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.303781][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.318712][ T4197] device veth1_vlan entered promiscuous mode [ 70.336190][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.345807][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.355673][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.370852][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.382496][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.393312][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.404527][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.414923][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.425650][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.437887][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.455633][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.463509][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.483309][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.492943][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.502266][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.515041][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.524518][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.533609][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.542846][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.573322][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.581376][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.647821][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.650431][ T4197] device veth0_macvtap entered promiscuous mode [ 70.662526][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.673255][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.681269][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.690759][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.700378][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.710591][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.741422][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.750562][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.768495][ T4197] device veth1_macvtap entered promiscuous mode [ 70.788493][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.800322][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.810319][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.823975][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.834315][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.845146][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.855890][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.866722][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.886450][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.904170][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.921960][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.930374][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.943237][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.975707][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.986894][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.008875][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.019580][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.029801][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.042732][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.052935][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.064012][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.074319][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.085303][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.097034][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.108485][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.118246][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.127980][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.137925][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.149454][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.162057][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.176566][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.196556][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.211816][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.221301][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.230322][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.266988][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.323685][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.357659][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.421619][ T4272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.445396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.504582][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.532426][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.561676][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.646996][ T4278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7'. [ 71.686949][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.695577][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.729293][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.758016][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.824235][ T4282] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7'. [ 71.837477][ T4287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.861071][ T4288] ======================================================= [ 71.861071][ T4288] WARNING: The mand mount option has been deprecated and [ 71.861071][ T4288] and is ignored by this kernel. Remove the mand [ 71.861071][ T4288] option from the mount to silence this warning. [ 71.861071][ T4288] ======================================================= [ 71.898604][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.905779][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.913485][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.920595][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.980091][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 71.993939][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.035526][ T4282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7'. [ 72.050437][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.057726][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.235229][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 72.241677][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 72.249777][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 72.256136][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 72.288547][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.303964][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.012552][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.051728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.091237][ T4303] loop1: detected capacity change from 0 to 512 [ 73.381374][ T26] audit: type=1804 audit(1778688095.827:2): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.13" name="/newroot/2/file0/bus" dev="loop1" ino=1048590 res=1 errno=0 [ 73.414681][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.432557][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.455565][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.543659][ T4312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.583151][ T4312] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.715966][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.745992][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.770422][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.793053][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.800958][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 73.813205][ T4312] hsr0 speed is unknown, defaulting to 1000 [ 74.483922][ T4330] hsr0 speed is unknown, defaulting to 1000 [ 74.562909][ T4341] hsr0 speed is unknown, defaulting to 1000 [ 76.025304][ T4354] overlayfs: overlapping lowerdir path [ 76.062620][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 76.173451][ T4357] sctp: [Deprecated]: syz.2.31 (pid 4357) Use of int in max_burst socket option. [ 76.173451][ T4357] Use struct sctp_assoc_value instead [ 76.228706][ T4351] loop1: detected capacity change from 0 to 8192 [ 76.345694][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.393002][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 76.431440][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.479076][ T4330] device bridge_slave_0 entered promiscuous mode [ 76.505651][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'. [ 76.543205][ T4362] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 76.600713][ T4362] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 76.650008][ T4366] ODEBUG: Out of memory. ODEBUG disabled [ 76.651864][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.717591][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.779922][ T4330] device bridge_slave_1 entered promiscuous mode [ 76.897534][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.946096][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.041401][ T4330] team0: Port device team_slave_0 added [ 77.071014][ T4330] team0: Port device team_slave_1 added [ 77.084860][ T4368] loop2: detected capacity change from 0 to 8192 [ 77.181101][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.201665][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.369687][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.404302][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.436659][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.632340][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.929267][ T4377] hsr0 speed is unknown, defaulting to 1000 [ 78.059823][ T4330] device hsr_slave_0 entered promiscuous mode [ 78.081822][ T4330] device hsr_slave_1 entered promiscuous mode [ 78.100439][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.100965][ T4389] capability: warning: `syz.2.40' uses 32-bit capabilities (legacy support in use) [ 78.129045][ T4330] Cannot create hsr debugfs directory [ 78.472327][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 78.493734][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 78.532328][ T4399] ksmbd: Unknown IPC event: 0, ignore. [ 78.671203][ T4330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.737694][ T4330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.761396][ T4414] loop1: detected capacity change from 0 to 128 [ 78.810934][ T4330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.857322][ T4330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.077679][ T4420] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.111769][ T13] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.261263][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.299300][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.309359][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.331363][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.372524][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.393147][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.415046][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.422194][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.515036][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.524298][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 79.537717][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.546995][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 79.570283][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.574632][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 79.581145][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.592311][ T13] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 79.598422][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.623760][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.636884][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.645253][ T13] usb 4-1: config 0 descriptor?? [ 79.662715][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.672689][ T4416] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.687594][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 79.717231][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 79.858400][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.889356][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.928924][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.963819][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.004260][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.036182][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.056318][ T4416] loop3: detected capacity change from 0 to 4096 [ 80.079320][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.127566][ T4416] EXT4-fs (loop3): inline encryption not supported [ 80.136197][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.185259][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.234816][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.281347][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.306844][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.441197][ T4416] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.484409][ T4416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.505617][ T4416] System zones: 0-5 [ 80.551909][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 80.572894][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 80.583629][ T4294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.799944][ T4294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.377849][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.451863][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 81.459624][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 81.558824][ T13] usb 4-1: USB disconnect, device number 2 [ 81.641856][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.649423][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.704128][ T4294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.852969][ T4478] device syzkaller0 entered promiscuous mode [ 81.880684][ T4294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.002068][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.039992][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.148831][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.163527][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.200796][ T4330] device veth0_vlan entered promiscuous mode [ 82.224946][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.248598][ T1452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.293918][ T4330] device veth1_vlan entered promiscuous mode [ 82.374158][ T4507] loop3: detected capacity change from 0 to 128 [ 82.467171][ T4330] device veth0_macvtap entered promiscuous mode [ 82.618305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.628965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.650570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.698617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.769724][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 82.921442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.180596][ T4526] hsr0 speed is unknown, defaulting to 1000 [ 83.216042][ T4330] device veth1_macvtap entered promiscuous mode [ 83.460709][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.486044][ T4552] xt_NFQUEUE: number of total queues is 0 [ 83.498946][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.537508][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.581389][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.609873][ T4556] loop1: detected capacity change from 0 to 128 [ 83.629663][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.666038][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.708244][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.749942][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.780858][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.799797][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.829550][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.847395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.868280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.901783][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.933873][ T26] audit: type=1804 audit(1778688106.387:3): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.86" name="/newroot/23/file0/bus" dev="loop1" ino=1048595 res=1 errno=0 [ 83.971989][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.015346][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.026059][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.038503][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.049265][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.059260][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.070813][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.081785][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.098359][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.111297][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.122374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.143925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.233312][ T4330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.261740][ T4330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.278424][ T4330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.338439][ T4330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627900][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.665178][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.898315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.916458][ T4578] hsr0 speed is unknown, defaulting to 1000 [ 85.215792][ T4587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 85.231824][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.239224][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.260000][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.273073][ T4591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.95'. [ 85.294649][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.301854][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.310314][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.317458][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.328673][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.343810][ T4591] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 85.401492][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.408780][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.478233][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.550852][ T4607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.701373][ T4610] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 85.768988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 85.884085][ T4622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.947316][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.078111][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 86.202921][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 86.370876][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 86.578035][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 86.718191][ T1108] cfg80211: failed to load regulatory.db [ 86.972435][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 87.038322][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 87.131843][ T4638] hsr0 speed is unknown, defaulting to 1000 [ 87.339621][ T4625] syz.5.19 (4625) used greatest stack depth: 21136 bytes left [ 87.443769][ T4667] loop2: detected capacity change from 0 to 764 [ 87.735652][ T4679] loop3: detected capacity change from 0 to 128 [ 87.861562][ T4682] device team_slave_0 entered promiscuous mode [ 87.868102][ T4682] device team_slave_1 entered promiscuous mode [ 87.953239][ T4681] device team_slave_0 left promiscuous mode [ 87.959659][ T4681] device team_slave_1 left promiscuous mode [ 88.163053][ T4689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 88.282701][ T4294] device hsr_slave_0 left promiscuous mode [ 88.365966][ T4294] device hsr_slave_1 left promiscuous mode [ 88.467922][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.521050][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.594146][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.629256][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.673110][ T4294] device bridge_slave_1 left promiscuous mode [ 88.679528][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.776626][ T4713] loop3: detected capacity change from 0 to 7 [ 88.827739][ T4294] device bridge_slave_0 left promiscuous mode [ 88.839003][ T4510] Dev loop3: unable to read RDB block 7 [ 88.847855][ T4510] loop3: unable to read partition table [ 88.859176][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.873648][ T4510] loop3: partition table beyond EOD, truncated [ 88.913858][ T4713] Dev loop3: unable to read RDB block 7 [ 88.919619][ T4713] loop3: unable to read partition table [ 88.949590][ T4713] loop3: partition table beyond EOD, truncated [ 88.979532][ T4713] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 88.994697][ T4294] device veth1_macvtap left promiscuous mode [ 89.010005][ T4294] device veth0_macvtap left promiscuous mode [ 89.017816][ T4294] device veth1_vlan left promiscuous mode [ 89.031271][ T4294] device veth0_vlan left promiscuous mode [ 89.802703][ T4294] team0 (unregistering): Port device team_slave_1 removed [ 89.862854][ T4294] team0 (unregistering): Port device team_slave_0 removed [ 89.891275][ T4725] loop1: detected capacity change from 0 to 16 [ 89.905322][ T4294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.926864][ T4725] erofs: (device loop1): mounted with root inode @ nid 36. [ 89.955743][ T4294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.984016][ T4725] attempt to access beyond end of device [ 89.984016][ T4725] loop1: rw=524288, want=34359738368, limit=16 [ 90.094575][ T4725] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 90.113489][ T4725] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 90.129823][ T4725] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 90.140417][ T4725] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 90.157705][ T4725] attempt to access beyond end of device [ 90.157705][ T4725] loop1: rw=524288, want=56, limit=16 [ 90.192622][ T4725] attempt to access beyond end of device [ 90.192622][ T4725] loop1: rw=0, want=34359738368, limit=16 [ 90.255313][ T26] audit: type=1800 audit(1778688112.707:4): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.130" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 90.289576][ T4725] syz.1.130 (4725) used greatest stack depth: 19736 bytes left [ 90.313437][ T4294] bond0 (unregistering): Released all slaves [ 90.973216][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'. [ 91.673617][ T4773] loop1: detected capacity change from 0 to 256 [ 91.763766][ T4783] loop2: detected capacity change from 0 to 16 [ 91.850647][ T4783] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.904053][ T4773] FAT-fs (loop1): Directory bread(block 64) failed [ 91.910978][ T4773] FAT-fs (loop1): Directory bread(block 65) failed [ 91.929735][ T4783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.994476][ T4773] FAT-fs (loop1): Directory bread(block 66) failed [ 92.001067][ T4773] FAT-fs (loop1): Directory bread(block 67) failed [ 92.008285][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.096055][ T4773] FAT-fs (loop1): Directory bread(block 68) failed [ 92.140032][ T4773] FAT-fs (loop1): Directory bread(block 69) failed [ 92.181957][ T4773] FAT-fs (loop1): Directory bread(block 70) failed [ 92.188550][ T4773] FAT-fs (loop1): Directory bread(block 71) failed [ 92.219800][ T4773] FAT-fs (loop1): Directory bread(block 72) failed [ 92.243843][ T4773] FAT-fs (loop1): Directory bread(block 73) failed [ 92.274870][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 92.401858][ T21] usb 4-1: config 0 has no interfaces? [ 92.407401][ T21] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.437958][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.484558][ T21] usb 4-1: config 0 descriptor?? [ 92.742464][ T21] usb 4-1: USB disconnect, device number 3 [ 93.190480][ T4803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 93.467732][ T4820] device syzkaller0 entered promiscuous mode [ 93.474074][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.714682][ T26] audit: type=1326 audit(1778688116.167:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 93.741827][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 93.819705][ T26] audit: type=1326 audit(1778688116.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 93.901708][ T26] audit: type=1326 audit(1778688116.187:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 94.008582][ T26] audit: type=1326 audit(1778688116.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 94.109953][ T26] audit: type=1326 audit(1778688116.187:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 94.145123][ T4234] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 94.316421][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.568939][ T4234] usb 4-1: Product: syz [ 94.695799][ T4234] usb 4-1: Manufacturer: syz [ 94.811771][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 94.877835][ T4234] usb 4-1: SerialNumber: syz [ 95.001609][ T26] audit: type=1326 audit(1778688116.187:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 95.058207][ T4234] usb 4-1: config 0 descriptor?? [ 95.088809][ T4847] loop2: detected capacity change from 0 to 7 [ 95.189190][ T4847] Dev loop2: unable to read RDB block 7 [ 95.195226][ T4847] loop2: unable to read partition table [ 95.237800][ T4847] loop2: partition table beyond EOD, truncated [ 95.291676][ T4847] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 95.314785][ T26] audit: type=1326 audit(1778688116.187:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 95.339081][ T26] audit: type=1326 audit(1778688116.187:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 97.741860][ T13] usb 3-1: device descriptor read/all, error -71 [ 97.764119][ T26] audit: type=1326 audit(1778688116.187:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 97.899343][ T26] audit: type=1326 audit(1778688116.187:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 98.019884][ T26] audit: type=1326 audit(1778688116.187:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 98.121594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.141584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.151571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.161574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.171578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.181578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.191571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.201571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.211568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.221568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 98.247000][ T4234] usb read operation failed. (-71) [ 98.301901][ T4234] usb write operation failed. (-71) [ 98.337678][ T26] audit: type=1326 audit(1778688116.187:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 98.362244][ T4234] usb write operation failed. (-71) [ 98.393998][ T4234] usb write operation failed. (-71) [ 98.399269][ T4234] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 98.492895][ T26] audit: type=1326 audit(1778688116.187:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 98.625283][ T26] audit: type=1326 audit(1778688116.187:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8de2ce59 code=0x7ffc0000 [ 98.801760][ T26] audit: type=1326 audit(1778688116.187:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde8de2e6c7 code=0x7ffc0000 [ 98.932061][ T26] audit: type=1326 audit(1778688116.187:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fde8dded68e code=0x7ffc0000 [ 99.287689][ T4234] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 99.386352][ T4234] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 99.604425][ T4883] device syzkaller0 entered promiscuous mode [ 99.961687][ T4239] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.122227][ T4204] Bluetooth: unknown link type 16 [ 100.211707][ T4239] usb 6-1: Using ep0 maxpacket: 32 [ 100.332097][ T4239] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.350607][ T4239] usb 6-1: config 0 has no interface number 0 [ 100.374039][ T4239] usb 6-1: config 0 interface 184 has no altsetting 0 [ 100.571939][ T4239] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 100.599434][ T4239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.615383][ T4927] Zero length message leads to an empty skb [ 100.622043][ T4239] usb 6-1: Product: syz [ 100.627207][ T4239] usb 6-1: Manufacturer: syz [ 100.641892][ T4239] usb 6-1: SerialNumber: syz [ 100.682149][ T4239] usb 6-1: config 0 descriptor?? [ 100.723173][ T4239] smsc75xx v1.0.0 [ 102.258513][ T4235] Bluetooth: hci3: command 0x0409 tx timeout [ 102.271698][ T4239] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 102.297253][ T4239] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.670299][ T4975] device syzkaller0 entered promiscuous mode [ 102.784306][ T4239] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 102.821615][ T4239] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 102.851642][ T4239] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 102.882571][ T4239] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 102.922206][ T4239] usb 6-1: USB disconnect, device number 2 [ 103.045073][ T4983] device syzkaller0 entered promiscuous mode [ 103.652568][ T5005] loop8: detected capacity change from 0 to 8 [ 103.794463][ T5005] Dev loop8: unable to read RDB block 8 [ 103.811716][ T5005] loop8: unable to read partition table [ 103.843874][ T5005] loop8: partition table beyond EOD, truncated [ 103.892864][ T5005] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 105.015633][ T5020] netlink: 80 bytes leftover after parsing attributes in process `syz.4.197'. [ 105.082196][ T5020] netlink: 80 bytes leftover after parsing attributes in process `syz.4.197'. [ 105.211531][ C0] sched: RT throttling activated [ 107.902008][ T5098] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 108.327516][ T5125] process 'syz.4.222' launched './file2' with NULL argv: empty string added [ 109.981716][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.181738][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.238390][ T5155] hsr0 speed is unknown, defaulting to 1000 [ 110.894132][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 111.000697][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 111.024518][ T5158] device hsr_slave_0 left promiscuous mode [ 111.031295][ T5158] device hsr_slave_1 left promiscuous mode [ 111.041850][ T1108] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 111.050156][ T1108] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 111.064306][ T1108] usb 3-1: config 0 has no interface number 0 [ 111.078840][ T1108] usb 3-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 111.101767][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 111.202025][ T1108] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 111.231628][ T1108] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 111.287779][ T1108] usb 3-1: Product: syz [ 111.292546][ T1108] usb 3-1: Manufacturer: syz [ 111.329347][ T1108] usb 3-1: config 0 descriptor?? [ 111.351940][ T5134] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.381910][ T21] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.420065][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.444612][ T21] usb 6-1: Product: syz [ 111.450529][ T21] usb 6-1: Manufacturer: syz [ 111.455820][ T21] usb 6-1: SerialNumber: syz [ 111.486314][ T21] usb 6-1: config 0 descriptor?? [ 111.543707][ T1108] usb 3-1: USB disconnect, device number 4 [ 111.802834][ T21] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.927417][ T21] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 112.936648][ T21] usb 6-1: USB disconnect, device number 3 [ 114.138164][ T5216] hsr0 speed is unknown, defaulting to 1000 [ 114.320308][ T5239] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.521785][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.831820][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 114.969157][ T4232] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 115.191925][ T4232] usb 2-1: config 0 has no interface number 0 [ 115.198091][ T4232] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.944050][ T4232] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 115.975139][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.984967][ T4232] usb 2-1: Product: syz [ 115.990023][ T4232] usb 2-1: Manufacturer: syz [ 115.995543][ T4232] usb 2-1: SerialNumber: syz [ 116.026157][ T4232] usb 2-1: config 0 descriptor?? [ 116.084907][ T4232] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 116.208959][ T4232] em28xx 2-1:0.132: Video interface 132 found: [ 116.366584][ T5277] hsr0 speed is unknown, defaulting to 1000 [ 116.531664][ T4232] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 116.931718][ T4239] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.012315][ T4232] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 117.044278][ T4232] em28xx 2-1:0.132: board has no eeprom [ 118.009195][ T4232] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 118.035603][ T4232] em28xx 2-1:0.132: analog set to bulk mode. [ 118.081832][ T4232] usb 2-1: USB disconnect, device number 2 [ 118.119842][ T4232] em28xx 2-1:0.132: Disconnecting em28xx [ 118.152268][ T4239] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 118.177589][ T4239] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 118.232405][ T1108] em28xx 2-1:0.132: Registering V4L2 extension [ 118.381845][ T4239] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 118.391064][ T4239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.492949][ T4239] usb 6-1: Product: syz [ 119.831695][ T4239] usb 6-1: Manufacturer: syz [ 119.836457][ T4239] usb 6-1: SerialNumber: syz [ 120.109344][ T4239] usb 6-1: config 0 descriptor?? [ 120.271738][ T4239] usb 6-1: can't set config #0, error -71 [ 120.298016][ T4239] usb 6-1: USB disconnect, device number 4 [ 121.447655][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 121.468824][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 122.655976][ T1108] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 122.898226][ T1108] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 124.211818][ T1108] em28xx 2-1:0.132: No AC97 audio processor [ 124.224467][ T1108] usb 2-1: Decoder not found [ 124.229134][ T1108] em28xx 2-1:0.132: failed to create media graph [ 124.235893][ T1108] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 125.170212][ T1108] em28xx 2-1:0.132: Remote control support is not available for this card. [ 125.180008][ T4232] em28xx 2-1:0.132: Closing input extension [ 125.196471][ T4232] em28xx 2-1:0.132: Freeing device [ 125.655699][ T5431] netlink: 168 bytes leftover after parsing attributes in process `syz.4.288'. [ 126.881766][ T5453] syz.1.292 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.286015][ T5497] overlayfs: failed to resolve './file0': -2 [ 131.576032][ T4267] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.401688][ T4267] usb 2-1: device descriptor read/all, error -71 [ 132.685329][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709306][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.308598][ T5563] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.316740][ T5563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.464970][ T5583] loop2: detected capacity change from 0 to 7 [ 136.512593][ T5583] loop2: p1 [ 136.536269][ T5583] loop2: partition table partially beyond EOD, truncated [ 136.600708][ T5583] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 137.604952][ T5585] bridge0: port 3(batadv1) entered blocking state [ 137.611474][ T5585] bridge0: port 3(batadv1) entered disabled state [ 137.647933][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 137.659442][ T5585] device batadv1 entered promiscuous mode [ 137.974583][ T5605] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.982099][ T5605] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.727752][ T154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 138.737499][ T154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 140.441337][ T5629] tipc: Failed to remove unknown binding: 66,0,0/0:3048986768/3048986770 [ 140.462866][ T5629] tipc: Failed to remove unknown binding: 66,0,0/0:3048986768/3048986769 [ 140.484456][ T5629] tipc: Failed to remove unknown binding: 66,0,0/0:3048986768/3048986770 [ 140.539839][ T5629] tipc: Failed to remove unknown binding: 66,0,0/0:3048986768/3048986769 [ 147.055128][ T5715] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 147.726375][ T5734] hsr0 speed is unknown, defaulting to 1000 [ 153.335212][ T5774] overlayfs: failed to clone upperpath [ 154.216567][ T5789] capability: warning: `syz.5.375' uses deprecated v2 capabilities in a way that may be insecure [ 154.487734][ T5800] hsr0 speed is unknown, defaulting to 1000 [ 159.536621][ T3560] udevd[3560]: worker [4510] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 160.761573][ T5615] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 161.222359][ T5615] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 161.330070][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 161.565553][ T5615] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 161.692517][ T5615] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 161.706026][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.716600][ T5615] usb 3-1: config 0 descriptor?? [ 161.752948][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.066264][ T5805] loop2: detected capacity change from 0 to 4096 [ 163.353685][ T4234] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 163.374067][ T5805] EXT4-fs (loop2): inline encryption not supported [ 163.390404][ T5805] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.451080][ T5805] EXT4-fs: failed to create workqueue [ 163.481686][ T5805] EXT4-fs (loop2): mount failed [ 163.513634][ T4234] dvb_usb_az6007: probe of 4-1:0.0 failed with error -110 [ 163.573747][ T4234] usb 4-1: USB disconnect, device number 4 [ 163.711660][ T5615] usbhid 3-1:0.0: can't add hid device: -71 [ 163.717741][ T5615] usbhid: probe of 3-1:0.0 failed with error -71 [ 163.802393][ T5615] usb 3-1: USB disconnect, device number 5 [ 164.444723][ T5890] Device name cannot be null; rc = [-22] [ 165.701598][ T4236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.956049][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 166.081850][ T4236] usb 2-1: config 0 has no interfaces? [ 166.251763][ T4236] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 166.285426][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.299009][ T4236] usb 2-1: Product: syz [ 166.309668][ T4236] usb 2-1: Manufacturer: syz [ 166.325248][ T4236] usb 2-1: SerialNumber: syz [ 166.352368][ T4236] usb 2-1: config 0 descriptor?? [ 166.376110][ T5928] Set syz1 is full, maxelem 1029 reached [ 166.591826][ T5615] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.693206][ T4177] usb 2-1: USB disconnect, device number 5 [ 166.901884][ T5615] usb 4-1: Using ep0 maxpacket: 8 [ 167.071789][ T5615] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.090207][ T5615] usb 4-1: config 0 has no interface number 0 [ 167.099409][ T5615] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 167.122199][ T5615] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 167.148752][ T5615] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.182582][ T5615] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 167.201546][ T5615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.229092][ T5615] usb 4-1: config 0 descriptor?? [ 167.304531][ T5615] ldusb 4-1:0.55: Interrupt in endpoint not found [ 167.577418][ T4177] usb 4-1: USB disconnect, device number 5 [ 168.105270][ T5961] netlink: 'syz.5.438': attribute type 1 has an invalid length. [ 168.181898][ T5961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.191418][ T5966] device bond1 entered promiscuous mode [ 168.276376][ T5964] hsr0 speed is unknown, defaulting to 1000 [ 171.141981][ T6018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 171.999989][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 172.000005][ T26] audit: type=1326 audit(1778688194.447:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 172.223224][ T26] audit: type=1326 audit(1778688194.447:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 172.252029][ T26] audit: type=1326 audit(1778688194.447:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f549ff542ac code=0x7ffc0000 [ 172.545668][ T26] audit: type=1326 audit(1778688194.447:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f549ff5430e code=0x7ffc0000 [ 172.688123][ T26] audit: type=1326 audit(1778688194.447:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f549ff97aeb code=0x7ffc0000 [ 172.788974][ T26] audit: type=1326 audit(1778688194.447:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 172.949634][ T26] audit: type=1326 audit(1778688194.527:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 173.044197][ T26] audit: type=1326 audit(1778688194.527:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 173.090987][ T26] audit: type=1326 audit(1778688194.537:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f549ff5868e code=0x7ffc0000 [ 173.186242][ T26] audit: type=1326 audit(1778688194.597:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.5.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7ffc0000 [ 174.412407][ T6068] syz.5.473 uses obsolete (PF_INET,SOCK_PACKET) [ 175.796683][ T6083] device wlan0 entered promiscuous mode [ 175.814054][ T6087] netlink: 52 bytes leftover after parsing attributes in process `syz.1.480'. [ 175.834040][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.477'. [ 175.849687][ T6087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.480'. [ 176.277503][ T6103] hsr0 speed is unknown, defaulting to 1000 [ 179.534119][ T6118] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.489'. [ 179.681724][ T6105] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 180.222827][ T6142] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.230236][ T6142] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.649112][ T6105] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.670649][ T6105] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.740208][ T6105] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.787878][ T6105] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.818322][ T6105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.902768][ T6105] hub 4-1:1.0: bad descriptor, ignoring hub [ 181.908774][ T6105] hub: probe of 4-1:1.0 failed with error -5 [ 181.943947][ T6105] cdc_wdm 4-1:1.0: skipping garbage [ 181.959424][ T6105] cdc_wdm 4-1:1.0: skipping garbage [ 181.980052][ T6105] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 182.208809][ T6105] usb 4-1: USB disconnect, device number 6 [ 183.328015][ T6188] hsr0 speed is unknown, defaulting to 1000 [ 183.351653][ T6190] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 184.063210][ T6203] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 184.070722][ T6203] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.911795][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 185.917878][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 186.839642][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.846226][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 188.750257][ T6230] netlink: 48 bytes leftover after parsing attributes in process `syz.5.528'. [ 191.331753][ T4200] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.663277][ T6273] hsr0 speed is unknown, defaulting to 1000 [ 191.695090][ T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 191.732940][ T4200] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.031759][ T4200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.054629][ T4200] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.074980][ T4200] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 192.092460][ T4200] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 192.106288][ T4200] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.117684][ T4200] usb 3-1: config 1 interface 1 has no altsetting 0 [ 192.312104][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.323558][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.334051][ T13] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 192.343574][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.558209][ T4200] usb 3-1: string descriptor 0 read error: -22 [ 192.566026][ T13] usb 2-1: config 0 descriptor?? [ 192.571235][ T4200] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 192.581295][ T4200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.478494][ T6282] udc-core: couldn't find an available UDC or it's busy [ 193.556219][ T4200] usb 3-1: can't set config #1, error -71 [ 193.567008][ T4200] usb 3-1: USB disconnect, device number 6 [ 193.578675][ T6282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.623097][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.680018][ T6282] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.689654][ T6282] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.698546][ T6282] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.707334][ T6282] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.733644][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.754141][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.772409][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 194.081753][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.088323][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.751642][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 194.757680][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 194.791241][ T13] usb 2-1: USB disconnect, device number 6 [ 199.077764][ T6359] kernel profiling enabled (shift: 3) [ 200.391797][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.591941][ T23] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 201.617031][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.650573][ T23] usb 2-1: Product: syz [ 201.669293][ T23] usb 2-1: Manufacturer: syz [ 201.681977][ T23] usb 2-1: SerialNumber: syz [ 201.700325][ T23] usb 2-1: config 0 descriptor?? [ 202.371887][ T23] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 202.390676][ T23] usb 2-1: Firmware version (0.0) predates our first public release. [ 202.442264][ T23] usb 2-1: Please update to version 0.2 or newer [ 202.511738][ T23] usb 2-1: Firmware: build [ 202.520402][ T23] usb 2-1: atusb_probe: initialization failed, error = -32 [ 202.562650][ T23] atusb: probe of 2-1:0.0 failed with error -32 [ 203.166772][ T6436] 9pnet: Insufficient options for proto=fd [ 204.115743][ T23] usb 2-1: USB disconnect, device number 7 [ 204.339528][ T6466] hsr0 speed is unknown, defaulting to 1000 [ 210.162753][ T6503] program syz.2.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.549957][ T6511] syz.3.619 sent an empty control message without MSG_MORE. [ 211.345281][ T6521] IPv6: NLM_F_REPLACE set, but no existing node found! [ 212.111530][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 215.101232][ T6566] overlayfs: failed to clone lowerpath [ 218.321636][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 218.321651][ T26] audit: type=1326 audit(1778688240.747:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.412871][ T26] audit: type=1326 audit(1778688240.747:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413010][ T26] audit: type=1326 audit(1778688240.747:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413104][ T26] audit: type=1326 audit(1778688240.747:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413156][ T26] audit: type=1326 audit(1778688240.747:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413266][ T26] audit: type=1326 audit(1778688240.747:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413377][ T26] audit: type=1326 audit(1778688240.747:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413486][ T26] audit: type=1326 audit(1778688240.747:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413621][ T26] audit: type=1326 audit(1778688240.747:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 218.413733][ T26] audit: type=1326 audit(1778688240.747:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7fc00000 [ 220.891598][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.638585][ T6640] bridge0: port 3(batadv1) entered blocking state [ 221.666379][ T6640] bridge0: port 3(batadv1) entered disabled state [ 221.680359][ T6640] device batadv1 entered promiscuous mode [ 221.790268][ T5351] batman_adv: batadv1: IGMP Querier appeared [ 221.796392][ T5351] batman_adv: batadv1: MLD Querier appeared [ 221.891905][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 221.903461][ T6652] netlink: 'syz.2.662': attribute type 2 has an invalid length. [ 222.172078][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 222.251816][ T4235] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 222.276796][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.430490][ T7] usb 2-1: Product: syz [ 222.514028][ T7] usb 2-1: Manufacturer: syz [ 222.558975][ T7] usb 2-1: SerialNumber: syz [ 222.819120][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 222.831196][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 222.843106][ T7] usb 2-1: config 0 descriptor?? [ 222.849603][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 222.863573][ T4235] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 222.873273][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.912958][ T4235] usb 4-1: config 0 descriptor?? [ 222.932314][ T6654] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 223.489599][ T6654] loop3: detected capacity change from 0 to 4096 [ 224.308026][ T6654] EXT4-fs (loop3): inline encryption not supported [ 224.357397][ T6654] EXT4-fs (loop3): Test dummy encryption mode enabled [ 224.422771][ T6654] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 224.484533][ T6654] System zones: 0-5 [ 224.509518][ T6654] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 224.998955][ T6689] hsr0 speed is unknown, defaulting to 1000 [ 226.116054][ T6698] netlink: 'syz.5.677': attribute type 2 has an invalid length. [ 226.581638][ T7] usb read operation failed. (-71) [ 226.639941][ T7] usb write operation failed. (-71) [ 226.671680][ T7] usb write operation failed. (-71) [ 226.691723][ T7] usb write operation failed. (-71) [ 226.704678][ T7] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 226.733901][ T7] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 226.768292][ T7] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 228.351640][ T4235] usbhid 4-1:0.0: can't add hid device: -32 [ 228.357822][ T4235] usbhid: probe of 4-1:0.0 failed with error -32 [ 228.624815][ T4266] usb 4-1: USB disconnect, device number 7 [ 228.687292][ T6732] hsr0 speed is unknown, defaulting to 1000 [ 229.592608][ T6740] netlink: 'syz.3.691': attribute type 2 has an invalid length. [ 231.034420][ T6754] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 231.797268][ T6780] netlink: 'syz.5.705': attribute type 2 has an invalid length. [ 231.826783][ T6781] hsr0 speed is unknown, defaulting to 1000 [ 235.143213][ T6823] netlink: 'syz.2.719': attribute type 2 has an invalid length. [ 237.083509][ T6844] hsr0 speed is unknown, defaulting to 1000 [ 238.107076][ T4235] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 239.002531][ T6860] syz.2.729 (6860): attempted to duplicate a private mapping with mremap. This is not supported. [ 239.771606][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 239.792004][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 239.813317][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 239.850412][ T4235] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 239.870603][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.895583][ T4235] usb 4-1: config 0 descriptor?? [ 239.942880][ T6877] netlink: 'syz.2.736': attribute type 2 has an invalid length. [ 239.962865][ T6848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.059804][ T6881] hsr0 speed is unknown, defaulting to 1000 [ 240.879031][ T6848] loop3: detected capacity change from 0 to 4096 [ 241.764598][ T6848] EXT4-fs (loop3): inline encryption not supported [ 241.781842][ T6848] EXT4-fs (loop3): Test dummy encryption mode enabled [ 241.986914][ T6848] EXT4-fs: failed to create workqueue [ 242.011579][ T6848] EXT4-fs (loop3): mount failed [ 242.132292][ T4235] usbhid 4-1:0.0: can't add hid device: -71 [ 242.145949][ T4235] usbhid: probe of 4-1:0.0 failed with error -71 [ 242.173000][ T4235] usb 4-1: USB disconnect, device number 8 [ 243.210106][ T6916] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 243.330341][ T6923] hsr0 speed is unknown, defaulting to 1000 [ 244.696648][ T4232] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 245.112652][ T4232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 245.178958][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 245.340852][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 245.479957][ T4232] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 245.489635][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.500413][ T4232] usb 4-1: config 0 descriptor?? [ 245.556653][ T6925] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.800144][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 245.819620][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 245.962302][ T6925] loop3: detected capacity change from 0 to 4096 [ 246.160200][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 246.160214][ T26] audit: type=1326 audit(1778688268.607:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 246.191115][ T26] audit: type=1326 audit(1778688268.607:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 246.259698][ T6925] EXT4-fs (loop3): inline encryption not supported [ 246.319761][ T26] audit: type=1326 audit(1778688268.607:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 246.394685][ T6925] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.888329][ T6925] EXT4-fs: failed to create workqueue [ 246.911045][ T6962] netlink: 'syz.2.765': attribute type 2 has an invalid length. [ 246.920636][ T6925] EXT4-fs (loop3): mount failed [ 246.927970][ T26] audit: type=1326 audit(1778688268.607:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.115983][ T26] audit: type=1326 audit(1778688268.607:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.157858][ T26] audit: type=1326 audit(1778688268.607:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.191070][ T26] audit: type=1326 audit(1778688268.617:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.224024][ T26] audit: type=1326 audit(1778688268.617:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.256681][ T26] audit: type=1326 audit(1778688268.617:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 247.291077][ T26] audit: type=1326 audit(1778688268.617:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.5.759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549ff97e59 code=0x7fc00000 [ 248.956330][ T6976] netlink: 'syz.4.779': attribute type 2 has an invalid length. [ 249.552192][ T4232] usbhid 4-1:0.0: can't add hid device: -71 [ 249.560134][ T4232] usbhid: probe of 4-1:0.0 failed with error -71 [ 249.580485][ T4232] usb 4-1: USB disconnect, device number 9 [ 250.184166][ T6992] hsr0 speed is unknown, defaulting to 1000 [ 255.514209][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.520564][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.571543][ T4266] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 257.138416][ T4266] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 257.159569][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 257.232833][ T4266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 258.086833][ T4266] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 258.097667][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.566965][ T4266] usb 3-1: config 0 descriptor?? [ 258.693236][ T4266] usb 3-1: can't set config #0, error -71 [ 258.722776][ T4266] usb 3-1: USB disconnect, device number 7 [ 258.791032][ T7054] hsr0 speed is unknown, defaulting to 1000 [ 265.795464][ T150] block nbd1: Attempted send on invalid socket [ 265.802866][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.816240][ T7098] vxfs: unable to read disk superblock at 1 [ 265.862194][ T150] block nbd1: Attempted send on invalid socket [ 265.868468][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.881684][ T7098] vxfs: unable to read disk superblock at 8 [ 265.929907][ T7098] vxfs: can't find superblock. [ 267.318718][ T7118] 9pnet: Insufficient options for proto=fd [ 271.915133][ T7153] hsr0 speed is unknown, defaulting to 1000 [ 279.355266][ T7204] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.362763][ T7204] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.090375][ T7217] hsr0 speed is unknown, defaulting to 1000 [ 284.858865][ T7245] bad cache= option: none+:$T}7R1HcKYd [ 284.858865][ T7245] [ 284.887276][ T7245] CIFS: VFS: bad cache= option: none+:$T}7R1HcKYd [ 285.754350][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 286.856844][ T7275] binder: 7274:7275 ioctl c0306201 0 returned -14 [ 286.958388][ T7281] binder: 7274:7281 unknown command 1074553619 [ 286.990217][ T7281] binder: 7274:7281 ioctl c0306201 200000000040 returned -22 [ 287.411706][ T4266] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 287.822075][ T4266] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 288.007314][ T4266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 288.091660][ T4266] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 288.162961][ T4266] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 288.213767][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.447685][ T4266] usb 4-1: config 0 descriptor?? [ 289.491808][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.789028][ T7282] loop3: detected capacity change from 0 to 4096 [ 289.863726][ T7282] EXT4-fs (loop3): inline encryption not supported [ 289.873426][ T7282] EXT4-fs (loop3): Test dummy encryption mode enabled [ 289.939630][ T7282] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 289.951668][ T7282] System zones: 0-5 [ 290.021224][ T7282] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 290.066289][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'. [ 290.132676][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 290.164480][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'. [ 290.256240][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 291.438517][ T7] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 291.456690][ T7] dvb_usb_az6007: probe of 2-1:0.0 failed with error -110 [ 291.472502][ T7] usb 2-1: USB disconnect, device number 8 [ 292.561827][ T4266] usbhid 4-1:0.0: can't add hid device: -71 [ 292.567844][ T4266] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.598381][ T4266] usb 4-1: USB disconnect, device number 10 [ 293.231617][ T4235] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 294.368349][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 294.379322][ T4234] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 294.401842][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 294.439926][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 294.482446][ T4235] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 294.512061][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.540611][ T4235] usb 4-1: config 0 descriptor?? [ 294.572416][ T7341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.640566][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 294.761729][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.811620][ T4234] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.877240][ T7341] loop3: detected capacity change from 0 to 4096 [ 294.888688][ T4234] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.928967][ T4234] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 294.997101][ T4234] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.009242][ T7341] EXT4-fs (loop3): inline encryption not supported [ 295.037689][ T7341] EXT4-fs (loop3): Test dummy encryption mode enabled [ 295.128684][ T7341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 295.172334][ T7341] System zones: 0-5 [ 295.343768][ T7341] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 295.471587][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.480727][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.489103][ T4234] usb 3-1: SerialNumber: syz [ 295.622328][ T4234] hub 3-1:1.0: bad descriptor, ignoring hub [ 295.628298][ T4234] hub: probe of 3-1:1.0 failed with error -5 [ 295.659391][ T4234] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 295.748797][ T4234] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 295.774029][ T4234] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 295.862150][ T4234] usb 3-1: USB disconnect, device number 8 [ 297.301727][ T6105] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 297.371677][ T4235] usbhid 4-1:0.0: can't add hid device: -71 [ 297.377831][ T4235] usbhid: probe of 4-1:0.0 failed with error -71 [ 297.401946][ T4235] usb 4-1: USB disconnect, device number 11 [ 297.712261][ T6105] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 297.750834][ T6105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 297.830630][ T6105] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 297.925256][ T6105] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 298.206943][ T6105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.506003][ T6105] usb 2-1: config 0 descriptor?? [ 298.641855][ T7375] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 298.652759][ T7399] netlink: 'syz.4.903': attribute type 2 has an invalid length. [ 299.308791][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.324160][ T7404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.194816][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 300.281675][ T4266] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 300.391813][ T6105] usbhid 2-1:0.0: can't add hid device: -71 [ 300.397887][ T6105] usbhid: probe of 2-1:0.0 failed with error -71 [ 300.615610][ T6105] usb 2-1: USB disconnect, device number 9 [ 300.621549][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 301.181615][ T6105] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 301.483177][ T4266] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 301.541281][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.691712][ T6105] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 301.733235][ T6105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 301.755696][ T4266] usb 3-1: Product: syz [ 301.780189][ T4266] usb 3-1: Manufacturer: syz [ 301.809634][ T6105] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 301.823032][ T4266] usb 3-1: SerialNumber: syz [ 301.853038][ T4266] usb 3-1: config 0 descriptor?? [ 301.880105][ T4266] usb 3-1: can't set config #0, error -71 [ 301.886131][ T6105] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 301.908633][ T4266] usb 3-1: USB disconnect, device number 9 [ 301.915266][ T6105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.962073][ T6105] usb 2-1: config 0 descriptor?? [ 301.991752][ T7415] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 303.149581][ T7447] netlink: 'syz.4.918': attribute type 2 has an invalid length. [ 303.342254][ T13] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 305.612085][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 305.627205][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 305.639036][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 305.659533][ T13] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 305.668892][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.753723][ T13] usb 4-1: config 0 descriptor?? [ 305.771960][ T7448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.832226][ T6105] usbhid 2-1:0.0: can't add hid device: -71 [ 305.847565][ T6105] usbhid: probe of 2-1:0.0 failed with error -71 [ 305.883939][ T6105] usb 2-1: USB disconnect, device number 10 [ 306.309502][ T7481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.316801][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 306.324137][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 306.331397][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 306.465538][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 306.483576][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 306.502495][ T13] usb 4-1: USB disconnect, device number 12 [ 307.697690][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 307.715267][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.734759][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.748801][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.076970][ T7486] syz.4.931 (7486) used greatest stack depth: 18512 bytes left [ 310.174324][ T5615] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 310.533915][ T13] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 311.783211][ T5615] usb 2-1: unable to read config index 0 descriptor/all [ 311.790218][ T5615] usb 2-1: can't read configurations, error -71 [ 312.833944][ T13] usb 4-1: device not accepting address 13, error -71 [ 315.041710][ T13] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 315.240681][ T7576] binder: 7574:7576 ioctl c06864ce 0 returned -22 [ 315.258742][ T7576] binder: 7574:7576 ioctl 80089419 0 returned -22 [ 316.221875][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 316.256764][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 316.291046][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 316.358509][ T13] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 316.402900][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.455361][ T13] usb 4-1: config 0 descriptor?? [ 316.491924][ T7563] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 316.831595][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 316.838897][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 316.860710][ T13] usb 4-1: USB disconnect, device number 14 [ 317.106273][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201491][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.466890][ T7604] program syz.1.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.169913][ T7618] netlink: 'syz.1.972': attribute type 2 has an invalid length. [ 319.591931][ T13] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 319.991820][ T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 320.029755][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 320.082158][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 320.141542][ T13] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 320.295799][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.313321][ T13] usb 2-1: config 0 descriptor?? [ 320.331816][ T7645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 320.591672][ T4234] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 320.648894][ T7666] netlink: 'syz.5.986': attribute type 2 has an invalid length. [ 320.841569][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 321.908033][ T7] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 321.951637][ T4234] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 321.971168][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.982498][ T4234] usb 4-1: Product: syz [ 321.986685][ T4234] usb 4-1: Manufacturer: syz [ 322.001564][ T4234] usb 4-1: SerialNumber: syz [ 322.008367][ T4234] usb 4-1: config 0 descriptor?? [ 323.063252][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 323.074807][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 323.090444][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 323.134985][ T7] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 323.246132][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 323.261928][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.272227][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 323.288485][ T7] usb 3-1: config 0 descriptor?? [ 324.011550][ T13] usb 2-1: USB disconnect, device number 13 [ 324.062021][ T7] usb 3-1: can't set config #0, error -71 [ 324.092696][ T7] usb 3-1: USB disconnect, device number 10 [ 325.127917][ T4234] usb read operation failed. (-71) [ 325.151633][ T4234] usb write operation failed. (-71) [ 325.326984][ T4234] usb write operation failed. (-71) [ 325.361640][ T4234] usb write operation failed. (-71) [ 325.366916][ T4234] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 325.387096][ T7713] netlink: 'syz.2.1001': attribute type 2 has an invalid length. [ 325.392869][ T4234] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 325.415357][ T4234] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 327.001544][ T7] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 327.371761][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 327.389156][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 327.401588][ T6105] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 327.527835][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 327.527976][ T26] audit: type=1326 audit(1778688349.937:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.067257][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 328.127883][ T7] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 328.152095][ T26] audit: type=1326 audit(1778688349.937:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.190789][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.220228][ T7] usb 2-1: config 0 descriptor?? [ 328.252045][ T7734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 328.279518][ T26] audit: type=1326 audit(1778688349.947:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.315409][ T26] audit: type=1326 audit(1778688349.957:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.340211][ T26] audit: type=1326 audit(1778688349.957:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.365017][ T6105] usb 3-1: Using ep0 maxpacket: 8 [ 328.370407][ T26] audit: type=1326 audit(1778688349.957:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd7332168e code=0x7ffc0000 [ 328.400297][ T26] audit: type=1326 audit(1778688349.957:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.426733][ T26] audit: type=1326 audit(1778688349.967:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.451134][ T26] audit: type=1326 audit(1778688349.967:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.475901][ T26] audit: type=1326 audit(1778688349.967:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.3.1013" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd73360e59 code=0x7ffc0000 [ 328.702571][ T6105] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 328.723304][ T6105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.733112][ T6105] usb 3-1: Product: syz [ 328.737458][ T6105] usb 3-1: Manufacturer: syz [ 328.767800][ T6105] usb 3-1: SerialNumber: syz [ 328.927113][ T6105] usb 3-1: config 0 descriptor?? [ 330.054575][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 330.067680][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 330.080104][ T7] usb 2-1: USB disconnect, device number 14 [ 330.501473][ C1] hrtimer: interrupt took 44262 ns [ 330.911625][ T6105] usb read operation failed. (-71) [ 330.931566][ T6105] usb write operation failed. (-71) [ 330.952066][ T6105] usb write operation failed. (-71) [ 330.981641][ T6105] usb write operation failed. (-71) [ 330.987019][ T6105] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 331.417829][ T7800] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.425345][ T7800] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.125614][ T21] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 335.835940][ T21] usb 2-1: device descriptor read/all, error -71 [ 341.241598][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 341.515769][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 341.682283][ T7901] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 341.689793][ T7901] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 342.136743][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 342.264022][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.272665][ T7] usb 2-1: Product: syz [ 342.277910][ T7] usb 2-1: Manufacturer: syz [ 342.431714][ T7] usb 2-1: SerialNumber: syz [ 342.472668][ T7] usb 2-1: config 0 descriptor?? [ 345.152295][ T7] usb read operation failed. (-71) [ 345.187366][ T7] usb write operation failed. (-71) [ 345.372963][ T7] usb write operation failed. (-71) [ 345.391637][ T7] usb write operation failed. (-71) [ 345.397132][ T7] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 345.425478][ T7941] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 345.433076][ T7941] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.570488][ T7958] netlink: 'syz.5.1079': attribute type 2 has an invalid length. [ 351.060336][ T8005] netlink: 'syz.1.1091': attribute type 2 has an invalid length. [ 352.354380][ T8019] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 352.361904][ T8019] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 355.782727][ T8046] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 356.643655][ T8046] [ 356.646030][ T8046] ================================ [ 356.651155][ T8046] WARNING: inconsistent lock state [ 356.656280][ T8046] syzkaller #0 Not tainted [ 356.660704][ T8046] -------------------------------- [ 356.665818][ T8046] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 356.672680][ T8046] syz.1.1104/8046 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 356.679028][ T8046] ffff88805c18bf20 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980 [ 356.688743][ T8046] {IN-SOFTIRQ-W} state was registered at: [ 356.694473][ T8046] lock_acquire+0x19e/0x400 [ 356.699191][ T8046] _raw_spin_lock_nested+0x2e/0x40 [ 356.704475][ T8046] __sk_receive_skb+0x17b/0x980 [ 356.709427][ T8046] __sk_receive_skb+0x42c/0x980 [ 356.714390][ T8046] phonet_rcv+0x7e4/0xc70 [ 356.718879][ T8046] __netif_receive_skb+0xcc/0x290 [ 356.724149][ T8046] process_backlog+0x370/0x790 [ 356.729033][ T8046] __napi_poll+0xc0/0x430 [ 356.733474][ T8046] net_rx_action+0x4d4/0xa10 [ 356.738212][ T8046] handle_softirqs+0x339/0x830 [ 356.743174][ T8046] run_ksoftirqd+0xa4/0x100 [ 356.747784][ T8046] smpboot_thread_fn+0x4f6/0x970 [ 356.752900][ T8046] kthread+0x436/0x520 [ 356.757077][ T8046] ret_from_fork+0x1f/0x30 [ 356.761677][ T8046] irq event stamp: 827 [ 356.765753][ T8046] hardirqs last enabled at (827): [] __local_bh_enable_ip+0x136/0x1c0 [ 356.775580][ T8046] hardirqs last disabled at (825): [] __local_bh_enable_ip+0xd7/0x1c0 [ 356.785327][ T8046] softirqs last enabled at (826): [] __release_sock+0xa8/0x450 [ 356.794580][ T8046] softirqs last disabled at (824): [] release_sock+0x2b/0x1b0 [ 356.803622][ T8046] [ 356.803622][ T8046] other info that might help us debug this: [ 356.811731][ T8046] Possible unsafe locking scenario: [ 356.811731][ T8046] [ 356.819196][ T8046] CPU0 [ 356.822489][ T8046] ---- [ 356.825781][ T8046] lock(slock-AF_PHONET/1); [ 356.830389][ T8046] [ 356.833853][ T8046] lock(slock-AF_PHONET/1); [ 356.838640][ T8046] [ 356.838640][ T8046] *** DEADLOCK *** [ 356.838640][ T8046] [ 356.846791][ T8046] 1 lock held by syz.1.1104/8046: [ 356.851822][ T8046] #0: ffff88805c18b960 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0xb5/0x1190 [ 356.861693][ T8046] [ 356.861693][ T8046] stack backtrace: [ 356.867612][ T8046] CPU: 0 PID: 8046 Comm: syz.1.1104 Not tainted syzkaller #0 [ 356.875004][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.885104][ T8046] Call Trace: [ 356.888457][ T8046] [ 356.891445][ T8046] dump_stack_lvl+0x188/0x250 [ 356.896331][ T8046] ? show_regs_print_info+0x20/0x20 [ 356.901560][ T8046] ? unwind_get_return_address+0x49/0x80 [ 356.907264][ T8046] valid_state+0x13b/0x1d0 [ 356.911701][ T8046] mark_lock_irq+0xa9/0x900 [ 356.916233][ T8046] ? stack_trace_save+0xa6/0xf0 [ 356.921145][ T8046] ? save_trace+0xa80/0xa80 [ 356.925664][ T8046] ? lockdep_count_forward_deps+0x200/0x200 [ 356.931582][ T8046] ? save_trace+0x5a/0xa80 [ 356.936034][ T8046] mark_lock+0x208/0x320 [ 356.940305][ T8046] __lock_acquire+0xd47/0x7d10 [ 356.945096][ T8046] ? try_to_wake_up+0x6cf/0x1050 [ 356.950065][ T8046] ? mark_lock+0x94/0x320 [ 356.954409][ T8046] ? __lock_acquire+0x13bc/0x7d10 [ 356.959463][ T8046] ? verify_lock_unused+0x140/0x140 [ 356.964698][ T8046] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 356.970717][ T8046] lock_acquire+0x19e/0x400 [ 356.975243][ T8046] ? __sk_receive_skb+0x17b/0x980 [ 356.980299][ T8046] ? read_lock_is_recursive+0x10/0x10 [ 356.985702][ T8046] ? sk_filter_trim_cap+0x59c/0x810 [ 356.990925][ T8046] ? __local_bh_enable_ip+0x136/0x1c0 [ 356.996323][ T8046] ? lockdep_hardirqs_on+0x94/0x140 [ 357.001593][ T8046] _raw_spin_lock_nested+0x2e/0x40 [ 357.006737][ T8046] ? __sk_receive_skb+0x17b/0x980 [ 357.011785][ T8046] __sk_receive_skb+0x17b/0x980 [ 357.016688][ T8046] ? pep_do_rcv+0x4ea/0x800 [ 357.021223][ T8046] __release_sock+0x1e1/0x450 [ 357.025930][ T8046] release_sock+0x5b/0x1b0 [ 357.030385][ T8046] pep_sock_accept+0xc73/0x1190 [ 357.035275][ T8046] ? pep_sock_connect+0x1b0/0x1b0 [ 357.040347][ T8046] ? aa_sk_perm+0x7dc/0x910 [ 357.044956][ T8046] pn_socket_accept+0x126/0x360 [ 357.049819][ T8046] ? pn_socket_connect+0xb90/0xb90 [ 357.054952][ T8046] ? bpf_lsm_socket_accept+0x5/0x10 [ 357.060247][ T8046] ? pn_socket_connect+0xb90/0xb90 [ 357.065388][ T8046] do_accept+0x509/0x6f0 [ 357.069689][ T8046] ? __ia32_sys_listen+0x60/0x60 [ 357.074647][ T8046] ? alloc_fd+0x598/0x630 [ 357.079031][ T8046] __sys_accept4+0x103/0x170 [ 357.083652][ T8046] __x64_sys_accept4+0x96/0xb0 [ 357.088434][ T8046] do_syscall_64+0x4c/0xa0 [ 357.092894][ T8046] ? clear_bhb_loop+0x30/0x80 [ 357.097590][ T8046] ? clear_bhb_loop+0x30/0x80 [ 357.102295][ T8046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.108240][ T8046] RIP: 0033:0x7fde8de2ce59 [ 357.112727][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.132529][ T8046] RSP: 002b:00007fde8c086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 357.140974][ T8046] RAX: ffffffffffffffda RBX: 00007fde8e0a5fa0 RCX: 00007fde8de2ce59 [ 357.149001][ T8046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 357.157005][ T8046] RBP: 00007fde8dec2d6f R08: 0000000000000000 R09: 0000000000000000 [ 357.165013][ T8046] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 357.173005][ T8046] R13: 00007fde8e0a6038 R14: 00007fde8e0a5fa0 R15: 00007ffde3bb7df8 [ 357.181006][ T8046]