last executing test programs: 22m32.44130624s ago: executing program 0 (id=866): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x21, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0xf000, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x0, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x9, 0x4}}}}}]}}]}}, 0x0) 22m28.742843422s ago: executing program 0 (id=869): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendfile(r7, r8, 0x0, 0x10001) 22m25.113274842s ago: executing program 0 (id=877): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x21, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0xf000, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x0, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x9, 0x4}}}}}]}}]}}, 0x0) 22m21.788500906s ago: executing program 0 (id=882): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x200101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) bind$x25(0xffffffffffffffff, &(0x7f0000000e00), 0x12) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_clone(0x44011400, &(0x7f0000000680)="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"/317, 0x13d, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000e40)="a96f1d7b4dd9769cd098ca712fe44e01c165aef383e88501f2637635c93ecb91d6c93279bd209a65d8f7b6b32e2fc3e84495e5a1bd64280fb4af194b4062828f403945130770d6e75bd68786a97391c6082086a701796ea5bf169a24105cdff577a5464e85e2004b11bc251176efe619ce8a5f0aaf348220b35daa8f3b5553924c4854d9d57d2a280db1d291a8a09b1246ae38a389649e1159ae3c030524fef2f72f8b626c2dd8ae28b2848b86ad887df1fdb7a205e39ed8c213da6f3d676558db61f2a89d4021e52eadf88bd31f97bce710b90d7e3603e56a15a37047720ae74b32443849f332867f17d6a02d5980cc1648ebfa6149134832696d202ea8eae4b4f7e4dc8f7939675bad4ec93e499a2d7f672d32d2a1dc3029faa1e8b6a2b3c7b2fe53d9b58392832e5673aeedc682993ca32187f78f1cc2b9184c10ce3e236b9a248a3976eeaa9d73b45ec67d59a74887bac269e4b7c5d46a8e7d89b38f4af654f292508fbccd4318e8ef5ecbd6ebf5fc4dd17808ba97e303e82485ce7f5f9452034c49daec6a1da149be76e1b7cc6887c95a76cfc6f3056a1c316f7fa850760c3fab4dee90c76eaa6c0c309677981a7d6cfbc79d7a6ea9223090b62acccb4c147bca8028296c019a7300bc278ff946c5341dbc3556a1c1b9be38e97029027863e4633721b6dc17b90abd36e80fddbec467d1cd29fbf584cc6a6b3d026f408bb3b11cdd3918ff3f8f8a7b2ec280a2fc4785fed9914ccb81ac62131bf9563be5418b3efd7d1e34604cf0326d4ec817e66b417829abbc58120507fdd51b3dc013f03fc4b506cab9017d749e4174627a7ce39b63378c786a1e82fcd49e2998f351b7a43610435a54966c3400ad6e02910c5c02e5153914bebfa78e1db89d9668c1be2fc68e99a21f6fdbba9c53b49167a42937a40aae02fc1eccbb95fed863460da1ccdd61e7a6ae4fdbf1a2dbe3116e589792e7adc75c36868544911c8d766c10bfc4bb80a99ec68065474107a511e59ad7748579b4ab491f5e44023c117b21458e1a0ef33a5f7eae738c50e1890c3b49269c87ed9cc0c736c5f60dc25be602d5ed4fca3dfb02a91e3751f5f2eb8aed32886b5321c1d7f0c1526afab89527d87e5d3a2d9b1ab231fa2ea4ede63b901222f6fb99bc3480039e75ef617ae059b06318b07ac11dde43d829dca72a2e9c09d75bdc3926fe1913ec6aea95cce95e472e74c777f3b1c6e0c6ccd0c513e7c4c672b8e4d608b11f8a7d900e1db64f21c9430bb0dc9a99cb98ec151b3c0a7f1f2fa465e0b6be1eb665d98828ca6a92d7fc02c8b4701bf9589f6fd22a8112587fabcec76435c119ad7a18de597b566a2e07c34a29e3776a94a04e6e74a25cf3786c695d913dc33b4181c9698acc108605a5389e23be60651ec8eb691dbbe3f3dee3a80fe890ddb92e64e9cba5fcd089d9824889d2ea757d632e71a3d127a439f4017f42e81767b86aabcc4ec70720beb6d701ad53ec7c4b2dd98a35522621478f6d9eb27bf762f1bb74ebb8668d5e0f3d0875065a32ba721198bda832264a89be1774caea7da4bc13630f429519aa9a6e28bd8878b9733efe59a377e519574d8c5a8eb472a1093f7c478c29dfebbf6a22a907fef7e25327e680d66ec37c6b7f6708358584d98857f1de9ef312f05847403320e32996bd88d8b7e24d26693ecd0c54df9e2cecfc946476226ba7c9abab4bd06372fe74791c6e43e74dde06e958fc3a64c5303f1c8b285447dc8b2d40f25b3a2a992420d6655bb15c8305dd81a1eea9ce6f432e6c63613c95a6fe1c93463aeb8574ed4a7883687d3fdb6e80dfe1f73219da717fb1d1b3eab3b534eeb41aa605c044fd69c1057eeb111390cead31a451ae7633cca027944d37cf378f389d69d4fcb8c16e32c1706ae8780948176a4a872f118e47ce7a39485db4b6f582308b9305c3952779a666329a613787053587a0b129dc997a4a2ebfab0d719eae7f260ab8c9e10dbbbc7176753116c5264f7c45a00397b317d42a85f6c6d03d5cc42fca20e5ff46f7679ac9087a9b3d1ff551178ffc1d5095d69cc522cce3f3539d143bc8a715209dc2742a43f230bbb06f72be894849072699a7ecd4f56b94550b223f4614a2cbd9e8241469631996ad6022009f0b4fe23f8dcb3539844e706f599ef17283e05e27c403d00fc028117512f208b3eaaaae6425fd815c9856c4eb0de9ba7d43bee8e945710259285890e12d8610635281c0a5028748549be0a155b2d6dcefd2359432bff080b6558a1b82168111e4e4499e2860265a358d74dad2f1ed931001fb03c432a9aaeb2fdb5a2f77310bd5eedafce0e351328162685745bc0d894e041558e4a824b9f4fe3493e63eecc4bd33c043ff77305d2fdcbf75d46458f24bfa355225286ce82d28ed1ac71adca3950a62a3030bcaaa0c9d9445d88d1d0fa007b5908e932f3f3c07e53a41dff8a3ef3a481e60190a015322ddf025d3197abd802a9d2e0c197e5b9871d714bc1357c4caee2a22cac6c2087c5472deed9442e4c9a10d6b1744ad8360ee8d3d7cad7e8f9f6fddf28b3b253cb789d3bdc1e3557ab15f24cbd369e4cf3a9f401de7484e80ae82da731199b9dee55599833d67b1a98772582600b4e3cc59796242445ca54c3200a1f794fc8527b4711d62bd020686d12fc12190de6535a30d54bbca23066d8181add5781c5c60201e9075d57cf250d2589b025ece634612311588e90dbc0082d1b68079f55b882c8d6d304f13e97d7ea1f20570e118d53924d6e01feb8804da4104cc5f71ca9ce41e704a53aee2662a32dc4a693d650b4324997b5f2ece387ca130dbbd52db4dada694b967e9b06cd04804dad1907f326ae80440a218b97d5534417259920f442bd6ce9b4387343cc410e692bd94cf3ca3b973673005233e011936e307dd677a6654412a51b87526a4bf0da067b67e176d7239422f7f6d9dc4b885bd72bf3dda3acff44b40278f6223795bc29826031df87b03f9a63e07bdf96ab1e5f135ee681ac9e9bbe135ce282c902866fa650c454fc6e73054c5b5f1318094e71f113afe8c68f962a584a14a2b696af2477a7585b8b0ffbefbe6e045d292fd9e89a722fe26b386c85fc5fc8e3516037570faabb112470f84b161f7cec61cc9532bca17a64a13f6c7cdb2fb8900dd0636750a5cf9783e4de77c5f83d0412712bf9b9bbec8739a6a5688e97dd34dd586d8ff7647d981418cd3a62ba6e42d14477b0b2ec05bf2e0bc68989464b3b3a75a6ade41bf3832459ee878e61c3f9f6713f15c67a06cd0e99101853fa52bf491a8c91346196e60a0952022f5a7b06fc31f27aa6909a1f55d980d5ba93dedc861e792d6f01ad64b11e3b15e97eb59514e9c26895a2e7f716b5af18de822d15e06d5c92a9fb84e56a80766695fc46d980a83b4a11fa1c3ce2283a813aa406750554c675004e0759dcc86e0abf3054fcc06dd7c8c01595ada51343d26ad8f68b72ab9fd526d737c7889f5cb2404122f8fd60e9772f621602330a9cd86b8e7c9fd883e5a319100bbb39ecfc0ebd4207d0aadb37e53d26a7c1709b423646faf5629dd29718efee2d0f98923546344e9ffa4045500cd5bfe7466ee71dbe68fa924861f1ab75d2404f980c8c0dc5321983ef4b774b9dca9dea456a290f1975a4d46717bb27d2fc273e4916964f130547821cd246d651cef93c714f55afc09d36278f8739ef1b72a9b7489f99d3a25142792210ad34024e53545ac19ad263992d3af6a37e059bb5996d139e5d28af6b12724ea95eadda6911a1ea398d3591ede85692da6abeb6a20370e360865b32781480420d612be268ede1a449218c6073a5629c828c976a2901e52d6de4bda7b2d6a88d26910aa3340d68e466144d600f32d3fc0b83d08fc7e3b71270a60fe923ba91949916f5d6c6c908c24ad0174458c1e4ce775a0faf9c957222d17c7af0944b481e9267bb318b1fd09838052821a60d31e16a879c6fa790c11bb7673223cdd5e70415072458274ca4e0c77908e8f4faa991cfaeee9c339a357e3a4890d511b2b8e6e843b4e19ed8ae77ffcc0eddbad27c6f753fd6cdb64c81508a1c80028b0b88f8c3fefaa2077858e54466136ce89c8da397c75b282e41e678b4b02250c55d173177e293dc15cc666bbcbe657ca9cdc1bb5925efe24c0007abf38b8f64ec58ef52c4dcd555473c12c6cce15c05d656e10660768e9af41642a2c2744765ef394a777644f52d0d10f90bd31cfd8c29efec88fa8333b4aeb8f2d364dc7ad36c561c649446cdf289e420a93aab274a9d3a3f96f95f8c0624ce12d59aa8eac684bdbeb52c5f12cfb532432746155ed5d99ac6caca224ce218c2d7592794b76872c8f63f5243fecbd1cda2f416543f9da24a75bf87faaa4d782307eeddb387b63afcdb546cf7942bc2eb5ba6097c8ee7c0171546b97f6c94cfbbe8470a2502332c4adcbca4d54cac7d9d82f04797cae90d1d53eafa6f74cce247106561522b45767c8bc92ae35515b6089750a1b3d9980599c43efc9fb5800344158d020bd16ab42bea94023f87bedb887156f1935c2c9b03d8768cb3e857ff0e84b250a093bd584f7901b39488dcfe5871144d94e7d0932a3ffde58be0bab66a349758fbcc58aeac2e95e7985d9cc640a32c50aa6e58cbc2e8e6cf42fd6ff5fac7912f95edaf5f1d7c3cf81541f4e416726c0717195e7be75a4141b3b94bc1aa5fb10bf3bd11bc7227fd6bd4d570ff81a74d7d6504c6ab46b501b332d3c6bf98d013aa264d635843df0ed68dd1611670f542bee4f7d0882fbb42ae6ca720b1350e3d22847d13231835b7be74b0f7b4a044104c3256b8406e3c47444144e44d4eb93a6779cb98cee41168e22ec7ac198727d7de7a3b1040200e4b68198f98afeb76c1994288eb5ace80ac82a1715458a1bc054900d98c4d309b5fd3d8fd3dfb6cd90b6381a5d738140cac757755efd057e3c918640d7c59d5f310c90ebca72ed4d125c46ff5bd3dba5bb7d07957f6872cd5e145ce786626706787cbd77aa99cddec96b7e00f4ab1bb15adb394a834ac18b194828babb3f64023dca386b0461b36b944d04e8cf897b65ed09636e0b66ccab622ce098fe6f1a90b12709f897439f2551c19e848611cc7ab494871256daad0321abec170da9d87dac86e6284063f39568ffb99bb8c9e36d4e7a1c13c5c52f46c5452816a46bdf9d2ffd9fb56d9ba8c096ba4f3aac971469d9e9b330d16b1e042cf9ea7177dd334a3a9639c7c3fcf1175f58b5620761d1b747b42fc3542740b91803e182a58f270153a2bef46410030e8c63a5b4405d719fd302510857adb7e6d10933e6aa2f48c0ef71bea443836e0bd551b33b983f8d5af2df42e2472bfb62572e9ae07fb5701f9484795f95b3a9ca9d7ed17393c92011469b7438646221e24ee3a141c9a5e9a21a261abec973320db12351638f4037f51d7712c63aeae9c5af6d9c82f2012c7b4445c76f1a72091621f2e8a623e93103ee2aade2c4fb4dd2eb5b688411433f5ae7a9c35e12b58726161a0ac60dfe819b4d2edb067781cb1955da714f82763f888169b6b1d0e06b2a578581f9326c8d5e73ed4af7c565b61d976d0a9ca4610264850c16f09bcaf91f3ece5ec1a7fb1b2437a27450d82b0b46434ea8336b895c86e22d7ea2ce6878238c404ab3b5d612827c3aeecd6faf1445134f891038464135131716a04c2b984b8c49a6ec7399705f4e115e3965dcf5eb89bcf5653f9b40721073773b6c46e2677cec5728962c9d7be7bf9c8ea520cf691e") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000108000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="310300000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) 22m20.03835017s ago: executing program 0 (id=884): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000008], [0x9, 0xffb], 0x108}}) 22m17.265009544s ago: executing program 0 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 22m1.201168345s ago: executing program 32 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 10m44.412017375s ago: executing program 3 (id=2117): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8d}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003000), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 10m40.600849888s ago: executing program 3 (id=2122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) 10m39.47693885s ago: executing program 3 (id=2124): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x57, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff000000000000", @ANYBLOB="25347fe8"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m38.030425788s ago: executing program 3 (id=2127): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa45910476a7aee3f84", @ANYRES16=r5, @ANYBLOB="010040000000000000000300000018000180040002800e0001006574683a766c616e3000"], 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) pread64(r3, &(0x7f00000005c0)=""/213, 0xd5, 0x5) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') 10m35.962525599s ago: executing program 3 (id=2128): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) 10m34.583831905s ago: executing program 3 (id=2130): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 10m18.890883209s ago: executing program 33 (id=2130): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 15.901159384s ago: executing program 4 (id=3125): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, 0x0, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d2, &(0x7f0000000000)={0x0, 0xbc04, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 14.881977894s ago: executing program 4 (id=3129): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) socket$inet(0x2, 0x2, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x50, 0xbfff, 0x562c, {0x803, 0x5d5}, {0xfffa, 0x2}, @cond=[{0x6, 0x6, 0x3, 0xdc86, 0x30e}, {0x8f, 0x892b, 0xdc74, 0x0, 0x1, 0x7fff}]}) 11.116516196s ago: executing program 5 (id=3133): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000540)={{0x2, @broadcast, 0x4e24, 0x4, 'wrr\x00', 0x0, 0x9, 0x3f}, {@empty, 0x4e24, 0x4, 0xffff, 0x5, 0x8}}, 0x44) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 10.035312887s ago: executing program 5 (id=3134): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 9.423342569s ago: executing program 5 (id=3136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080) 9.293897371s ago: executing program 2 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x208, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) 9.165240264s ago: executing program 4 (id=3138): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) inotify_init() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 8.167639023s ago: executing program 2 (id=3139): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="060000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) 8.160519133s ago: executing program 4 (id=3140): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.124104033s ago: executing program 2 (id=3141): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08"], 0x44}, 0x1, 0x2}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044010) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) poll(&(0x7f0000000440)=[{r2, 0x202}], 0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r4, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') preadv(r5, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000f80)) 6.365119578s ago: executing program 1 (id=3142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x39, 0x0, 0x6b]}, &(0x7f00000004c0)={0x0, "3e06000000000000005ec82d4ee9df60f6ae1dfbea2c118ff9b3a3b132e4fde10e2600b0950b0477e801fc8a1be9b4ebbe9c22a8a2b0aa00"}, 0x48, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r2, 0x400, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000280)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "f38added437dd72297993768b63f2a8a", "a27fde8586236bcadd86dd7b660a3dae", "5bb94f4e09e225d2005f7e9884bfae0b", "bd7f57b7cd4b60572ec9e8a4d2cde59f"}}}, 0x4a) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) keyctl$update(0x2, r1, &(0x7f0000000040)="b8", 0x1) 5.20858074s ago: executing program 1 (id=3143): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f000062d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) 4.16711388s ago: executing program 5 (id=3144): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x57, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff000000000000", @ANYBLOB="25347fe8"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.829182046s ago: executing program 1 (id=3145): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x4020400) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.055690641s ago: executing program 5 (id=3146): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) socket$inet(0x2, 0x2, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x50, 0xbfff, 0x562c, {0x803, 0x5d5}, {0xfffa, 0x2}, @cond=[{0x6, 0x6, 0x3, 0xdc86, 0x30e}, {0x8f, 0x892b, 0xdc74, 0x0, 0x1, 0x7fff}]}) 2.993887813s ago: executing program 4 (id=3147): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") open(&(0x7f0000000240)='./file1\x00', 0xc4142, 0x0) r0 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r0, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) 2.789727547s ago: executing program 2 (id=3148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x208, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) 2.266744757s ago: executing program 1 (id=3149): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00') 1.835499925s ago: executing program 1 (id=3150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.681523918s ago: executing program 2 (id=3151): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 1.05979545s ago: executing program 2 (id=3152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080) 425.181232ms ago: executing program 5 (id=3153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf22"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0xfed6}}, 0x1006) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 351.546044ms ago: executing program 1 (id=3154): r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f00000000c0)=0x400, 0x4) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x80000, 0xc) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00040008000300", @ANYRES32=r6, @ANYBLOB="680033008000e100ffffffffffff0802110000005050505050500000030000000000000001000140010003010e0406d897000002003c04010634002d1a02000cffffffffffffffff300001000f000000070006000000047206030303030303710700ff0100"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 0s ago: executing program 4 (id=3155): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x57, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff000000000000", @ANYBLOB="25347fe8"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 's value: 2 [ 1339.980133][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.007798][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.025186][ T193] bridge_slave_1: left allmulticast mode [ 1340.029975][ T8770] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1340.040917][ T193] bridge_slave_1: left promiscuous mode [ 1340.053522][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.063070][ T8770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.093912][ T193] bridge_slave_0: left allmulticast mode [ 1340.099710][ T193] bridge_slave_0: left promiscuous mode [ 1340.113830][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.145381][ T8770] usb 3-1: config 0 descriptor?? [ 1340.563615][ T8770] usbhid 3-1:0.0: can't add hid device: -71 [ 1340.569829][ T8770] usbhid: probe of 3-1:0.0 failed with error -71 [ 1340.843466][ T8770] usb 3-1: USB disconnect, device number 42 [ 1341.301427][ T193] veth1_macvtap: left promiscuous mode [ 1341.313442][ T193] veth0_macvtap: left promiscuous mode [ 1341.319387][ T193] veth1_vlan: left promiscuous mode [ 1341.353600][ T193] veth0_vlan: left promiscuous mode [ 1341.498030][T14706] siw: device registration error -23 [ 1344.479182][ T193] team_slave_1 (unregistering): left promiscuous mode [ 1344.486960][ T193] team_slave_1 (unregistering): left allmulticast mode [ 1344.498567][ T193] team0 (unregistering): Port device team_slave_1 removed [ 1344.558318][ T193] team_slave_0 (unregistering): left promiscuous mode [ 1344.565277][ T193] team_slave_0 (unregistering): left allmulticast mode [ 1344.577252][ T193] team0 (unregistering): Port device team_slave_0 removed [ 1344.638862][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.648709][ T193] bond_slave_1 (unregistering): left promiscuous mode [ 1344.656503][ T193] bond_slave_1 (unregistering): left allmulticast mode [ 1344.719891][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.731072][ T193] bond_slave_0 (unregistering): left promiscuous mode [ 1344.738123][ T193] bond_slave_0 (unregistering): left allmulticast mode [ 1345.436473][ T193] bond0 (unregistering): Released all slaves [ 1346.743297][T14726] infiniband syz2: set active [ 1346.750819][T14726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.851724][ T786] ip6gretap0 speed is unknown, defaulting to 1000 [ 1347.360369][T14735] overlayfs: missing 'lowerdir' [ 1347.613760][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.160876][T14740] infiniband syz2: set active [ 1348.168584][T14740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1348.269766][ T8770] ip6gretap0 speed is unknown, defaulting to 1000 [ 1348.341472][T14512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.467662][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.474916][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.562860][ T193] IPVS: stop unused estimator thread 0... [ 1348.598579][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.605889][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.664576][T14758] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2204'. [ 1350.124398][ T5104] Bluetooth: hci0: command 0x0405 tx timeout [ 1351.492785][T14512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.859585][T14780] infiniband syz2: set active [ 1352.525069][T14780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1352.620651][ T23] ip6gretap0 speed is unknown, defaulting to 1000 [ 1354.231121][T14794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1356.593510][T14797] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1356.862738][T14512] veth0_vlan: entered promiscuous mode [ 1356.929926][T14512] veth1_vlan: entered promiscuous mode [ 1357.516887][T14512] veth0_macvtap: entered promiscuous mode [ 1357.715682][T14512] veth1_macvtap: entered promiscuous mode [ 1358.204352][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.275945][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.331242][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.379724][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.551974][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.623112][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.639944][T14512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.395720][T14834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1361.523356][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.571355][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.646762][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.663042][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.699533][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.726402][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.034938][T14512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.050341][T14512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.823879][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.830486][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.842002][T14512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.899954][T14512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.913163][T14512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.129469][T14851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1363.499819][T11670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.667709][T14858] overlayfs: missing 'lowerdir' [ 1364.023100][T11670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.116879][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.183063][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.007097][T14891] lo: entered promiscuous mode [ 1368.012015][T14891] lo: entered allmulticast mode [ 1368.020496][T14891] tunl0: entered promiscuous mode [ 1368.026569][T14891] tunl0: entered allmulticast mode [ 1368.035775][T14891] gre0: entered promiscuous mode [ 1368.040930][T14891] gre0: entered allmulticast mode [ 1368.050653][T14891] gretap0: entered promiscuous mode [ 1368.056073][T14891] gretap0: entered allmulticast mode [ 1368.067211][T14891] erspan0: entered promiscuous mode [ 1368.072700][T14891] erspan0: entered allmulticast mode [ 1368.082186][T14891] ip_vti0: entered promiscuous mode [ 1368.087788][T14891] ip_vti0: entered allmulticast mode [ 1368.097204][T14891] ip6_vti0: entered promiscuous mode [ 1368.102757][T14891] ip6_vti0: entered allmulticast mode [ 1368.157394][T14891] sit0: entered promiscuous mode [ 1368.164440][T14891] sit0: entered allmulticast mode [ 1368.173548][T14891] ip6tnl0: entered promiscuous mode [ 1368.178883][T14891] ip6tnl0: entered allmulticast mode [ 1368.187859][T14891] ip6gre0: entered promiscuous mode [ 1368.193733][T14891] ip6gre0: entered allmulticast mode [ 1368.202725][T14891] syz_tun: entered promiscuous mode [ 1368.208169][T14891] syz_tun: entered allmulticast mode [ 1368.216927][T14891] ip6gretap0: entered promiscuous mode [ 1368.222552][T14891] ip6gretap0: entered allmulticast mode [ 1368.231504][T14891] bridge0: entered promiscuous mode [ 1368.237009][T14891] bridge0: entered allmulticast mode [ 1368.245919][T14891] vcan0: entered promiscuous mode [ 1368.251109][T14891] vcan0: entered allmulticast mode [ 1368.258991][T14891] bond0: entered promiscuous mode [ 1368.266988][T14891] bond_slave_0: entered promiscuous mode [ 1368.274619][T14891] bond_slave_1: entered promiscuous mode [ 1368.281563][T14891] bond0: entered allmulticast mode [ 1368.286916][T14891] bond_slave_0: entered allmulticast mode [ 1368.292863][T14891] bond_slave_1: entered allmulticast mode [ 1368.303967][T14891] team0: entered promiscuous mode [ 1368.309380][T14891] team_slave_0: entered promiscuous mode [ 1368.316407][T14891] team_slave_1: entered promiscuous mode [ 1368.323490][T14891] team0: entered allmulticast mode [ 1368.328790][T14891] team_slave_0: entered allmulticast mode [ 1368.334842][T14891] team_slave_1: entered allmulticast mode [ 1368.349682][T14891] dummy0: entered promiscuous mode [ 1368.355196][T14891] dummy0: entered allmulticast mode [ 1368.364481][T14891] nlmon0: entered promiscuous mode [ 1368.371604][T14891] nlmon0: entered allmulticast mode [ 1368.514686][T14891] caif0: entered promiscuous mode [ 1368.520032][T14891] caif0: entered allmulticast mode [ 1368.525849][T14891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.054911][T14912] overlayfs: missing 'lowerdir' [ 1372.560482][T14915] sctp: [Deprecated]: syz.4.2229 (pid 14915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1372.560482][T14915] Use struct sctp_sack_info instead [ 1372.882233][T14919] netlink: set zone limit has 8 unknown bytes [ 1373.674898][T14922] fuse: Unknown parameter '0x0000000000000003' [ 1375.372573][T14937] netlink: 'syz.2.2233': attribute type 21 has an invalid length. [ 1375.381045][T14937] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1375.391161][T14937] netlink: 'syz.2.2233': attribute type 5 has an invalid length. [ 1375.401616][T14937] netlink: 'syz.2.2233': attribute type 6 has an invalid length. [ 1375.419177][T14937] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1376.273667][T14941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1380.765603][T14966] overlayfs: missing 'lowerdir' [ 1384.428204][T15009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1387.516251][T15034] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2250'. [ 1390.734782][T13860] IPVS: starting estimator thread 0... [ 1391.443250][T15058] IPVS: using max 26 ests per chain, 62400 per kthread [ 1391.478587][T15059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1392.551352][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 1396.175400][T15100] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2266'. [ 1397.689113][T15109] infiniband syz2: set active [ 1398.393979][T15109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1398.502112][ T23] ip6gretap0 speed is unknown, defaulting to 1000 [ 1398.831694][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 1401.647709][T15131] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2272'. [ 1404.162743][T15148] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2276'. [ 1405.565216][T15157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1406.190664][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1406.871035][T15166] fuse: Unknown parameter '0x0000000000000003' [ 1410.556528][T15198] overlayfs: failed to resolve './file1': -2 [ 1411.881127][T15204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1412.751149][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 1414.114780][ T6767] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1414.391604][ T6767] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1414.413191][ T6767] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1414.422762][ T6767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.473231][ T6767] usb 3-1: config 0 descriptor?? [ 1415.054293][ T6767] usbhid 3-1:0.0: can't add hid device: -71 [ 1415.060422][ T6767] usbhid: probe of 3-1:0.0 failed with error -71 [ 1415.101075][ T6767] usb 3-1: USB disconnect, device number 43 [ 1416.703190][T15233] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1417.400486][T15260] loop1: detected capacity change from 0 to 1024 [ 1417.672337][T15262] infiniband syz2: set active [ 1418.413927][T15262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.511979][T13860] ip6gretap0 speed is unknown, defaulting to 1000 [ 1422.163328][ T6767] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1422.368973][ T6767] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1422.453641][ T6767] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1422.496076][ T6767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.597152][ T6767] usb 5-1: config 0 descriptor?? [ 1423.096482][ T6767] usbhid 5-1:0.0: can't add hid device: -71 [ 1423.454980][ T6767] usbhid: probe of 5-1:0.0 failed with error -71 [ 1423.474617][ T6767] usb 5-1: USB disconnect, device number 21 [ 1423.628215][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.634910][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.208809][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 1425.531505][T15321] loop1: detected capacity change from 0 to 1024 [ 1426.937973][T15322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.221746][T15328] fuse: Unknown parameter '0x0000000000000003' [ 1427.922348][T15342] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1430.573399][T14175] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1431.129807][T14175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1431.296603][T14175] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1431.358890][T14175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.414520][T14175] usb 2-1: config 0 descriptor?? [ 1431.491170][T15364] loop5: detected capacity change from 0 to 1024 [ 1432.239925][T14175] usbhid 2-1:0.0: can't add hid device: -71 [ 1432.458924][T14175] usbhid: probe of 2-1:0.0 failed with error -71 [ 1433.219865][T14175] usb 2-1: USB disconnect, device number 48 [ 1433.302805][ T5786] bond0: (slave syz_tun): Releasing backup interface [ 1433.367169][T15376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1433.695071][T14513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1433.720590][T14513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1433.756677][T14513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1433.767862][T14513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1433.801384][T14513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1433.815831][T14513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1433.828708][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1433.836701][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1433.863621][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1433.886494][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1433.896191][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1433.912625][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1433.949805][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.694362][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.805871][T15383] lo speed is unknown, defaulting to 1000 [ 1435.163866][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.015386][T15383] ip6gretap0 speed is unknown, defaulting to 1000 [ 1436.023895][T14513] Bluetooth: hci1: command tx timeout [ 1436.593865][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.706073][T15416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1438.103129][T14513] Bluetooth: hci1: command tx timeout [ 1438.307136][T15425] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1439.904035][T15430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1440.008721][ T11] tipc: Left network mode [ 1440.172103][ T11] infiniband syz2: set down [ 1440.183333][ T5104] Bluetooth: hci1: command tx timeout [ 1440.250492][T15438] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1440.377128][T13860] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1440.727112][T13860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1440.802927][T13860] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1440.847722][T13860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.953756][T13860] usb 5-1: config 0 descriptor?? [ 1441.064643][ T8094] smc: removing ib device syz2 [ 1441.097439][T14175] ip6gretap0 speed is unknown, defaulting to 1000 [ 1441.527201][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1441.854472][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1441.870776][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1441.878435][T13860] usbhid 5-1:0.0: can't add hid device: -32 [ 1441.884905][T13860] usbhid: probe of 5-1:0.0 failed with error -32 [ 1442.277869][ T5104] Bluetooth: hci1: command tx timeout [ 1442.752942][T13860] usb 5-1: USB disconnect, device number 22 [ 1444.343969][ T5104] Bluetooth: hci1: command tx timeout [ 1445.144123][T15383] chnl_net:caif_netlink_parms(): no params data found [ 1446.428592][T15493] siw: device registration error -23 [ 1448.652199][T15512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1448.777099][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.813210][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.856666][T15383] bridge_slave_0: entered allmulticast mode [ 1449.084647][T15383] bridge_slave_0: entered promiscuous mode [ 1449.094808][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.102122][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.109716][T15383] bridge_slave_1: entered allmulticast mode [ 1449.156767][T15383] bridge_slave_1: entered promiscuous mode [ 1450.527328][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.611430][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.279612][T15383] team0: Port device team_slave_0 added [ 1452.412766][T15383] team0: Port device team_slave_1 added [ 1453.942096][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.973081][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.061282][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.249604][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.361000][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.452613][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.567135][T15572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1457.179296][T15383] hsr_slave_0: entered promiscuous mode [ 1457.258053][T15383] hsr_slave_1: entered promiscuous mode [ 1457.297371][T15383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.331170][T15383] Cannot create hsr debugfs directory [ 1457.475819][ T11] hsr_slave_0: left promiscuous mode [ 1457.504078][ T11] hsr_slave_1: left promiscuous mode [ 1457.528000][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.541823][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.559300][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.583851][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.594705][ T11] bridge_slave_1: left allmulticast mode [ 1457.600519][ T11] bridge_slave_1: left promiscuous mode [ 1457.655525][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.701197][ T11] bridge_slave_0: left allmulticast mode [ 1457.716346][ T11] bridge_slave_0: left promiscuous mode [ 1457.722185][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.083372][ T11] veth1_macvtap: left promiscuous mode [ 1460.092798][ T11] veth0_macvtap: left promiscuous mode [ 1460.101511][ T11] veth1_vlan: left promiscuous mode [ 1460.112841][ T11] veth0_vlan: left promiscuous mode [ 1460.330433][ T11] bond5 (unregistering): Released all slaves [ 1460.424425][ T11] bond4 (unregistering): Released all slaves [ 1460.538523][ T11] bond3 (unregistering): Released all slaves [ 1460.646170][ T11] bond2 (unregistering): Released all slaves [ 1461.174358][ T11] bond1 (unregistering): Released all slaves [ 1462.906139][ T11] team_slave_1 (unregistering): left promiscuous mode [ 1462.937235][ T11] team_slave_1 (unregistering): left allmulticast mode [ 1462.977560][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1463.116544][ T11] team_slave_0 (unregistering): left promiscuous mode [ 1463.127696][ T11] team_slave_0 (unregistering): left allmulticast mode [ 1463.141978][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1463.242041][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.252074][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 1463.272540][ T11] bond_slave_1 (unregistering): left allmulticast mode [ 1463.384521][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.395645][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 1463.402678][ T11] bond_slave_0 (unregistering): left allmulticast mode [ 1464.460507][ T11] bond0 (unregistering): Released all slaves [ 1464.908439][T15597] syzkaller0: entered promiscuous mode [ 1464.914416][T15597] syzkaller0: entered allmulticast mode [ 1467.859340][T15620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1467.958722][T13860] lo speed is unknown, defaulting to 1000 [ 1471.219001][ T11] IPVS: stop unused estimator thread 0... [ 1476.481591][T15704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.100569][T15705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.248833][T15383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1477.341651][T15383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1477.376260][T15383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1477.401461][T15383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1479.591496][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.787872][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.834409][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.841634][ T8094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.900163][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.907703][ T8094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.784822][T15383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1482.031681][T15765] comedi comedi3: comedi_config --init_data is deprecated [ 1484.348182][T15774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.163906][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.170521][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.398598][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.280896][T15383] veth0_vlan: entered promiscuous mode [ 1488.077519][T15805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1488.234238][T15383] veth1_vlan: entered promiscuous mode [ 1488.376997][T15383] veth0_macvtap: entered promiscuous mode [ 1488.427049][T15383] veth1_macvtap: entered promiscuous mode [ 1488.529393][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.724923][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.745106][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.756615][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.769241][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.851559][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1489.439861][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.513323][T15383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.579887][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.632036][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.696424][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.733019][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.768970][T15383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.788412][T15383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.953558][T15383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.006803][T15383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.200969][T15383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.350946][T15383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.682631][T15383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.303252][T15830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.223612][T15852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.578834][T14513] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1495.593175][T14513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1495.604537][T14513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1495.684149][T14513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1495.789140][T14513] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1495.884268][T14513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1496.086728][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1496.094546][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1496.102381][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1496.112527][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1496.120578][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1496.128299][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1496.709591][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 1497.505853][ T6821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.522866][ T5104] Bluetooth: hci2: command tx timeout [ 1498.532040][T15889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.918065][ T6821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.004910][ T6821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.017344][ T5104] Bluetooth: hci2: command tx timeout [ 1501.046256][T15909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1501.808037][ T6821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.888982][T15855] chnl_net:caif_netlink_parms(): no params data found [ 1503.150890][ T5104] Bluetooth: hci2: command tx timeout [ 1503.596524][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 1504.445095][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.466861][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.020987][T15855] bridge_slave_0: entered allmulticast mode [ 1505.044938][T15855] bridge_slave_0: entered promiscuous mode [ 1505.084749][T15940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1505.233169][ T5104] Bluetooth: hci2: command tx timeout [ 1505.241743][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.627186][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.644729][T15855] bridge_slave_1: entered allmulticast mode [ 1505.667595][T15855] bridge_slave_1: entered promiscuous mode [ 1506.785757][T15955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.946772][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.303109][ T5104] Bluetooth: hci2: command tx timeout [ 1507.459019][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.397465][T15855] team0: Port device team_slave_0 added [ 1508.523982][T15855] team0: Port device team_slave_1 added [ 1509.317977][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.390051][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.463908][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.931047][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 1510.554212][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.561362][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.636762][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.119278][T16006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1513.241672][T16011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1513.484980][T15855] hsr_slave_0: entered promiscuous mode [ 1514.059002][T15855] hsr_slave_1: entered promiscuous mode [ 1514.237372][T15855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.270083][T15855] Cannot create hsr debugfs directory [ 1515.846324][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 1519.288181][T16051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1519.782626][ T6821] hsr_slave_0: left promiscuous mode [ 1519.814250][ T6821] hsr_slave_1: left promiscuous mode [ 1520.953545][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.038195][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.409323][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.421514][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.453809][ T6821] bridge_slave_1: left allmulticast mode [ 1522.459554][ T6821] bridge_slave_1: left promiscuous mode [ 1522.497953][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.572649][ T6821] bridge_slave_0: left allmulticast mode [ 1522.595616][ T6821] bridge_slave_0: left promiscuous mode [ 1522.601488][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.903181][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2439'. [ 1523.824092][ T6821] veth1_macvtap: left promiscuous mode [ 1523.846826][ T6821] veth0_macvtap: left promiscuous mode [ 1524.333161][ T6821] veth1_vlan: left promiscuous mode [ 1524.338998][ T6821] veth0_vlan: left promiscuous mode [ 1525.779280][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 1525.839944][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 1525.904974][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.970259][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.639040][ T6821] bond0 (unregistering): Released all slaves [ 1526.753915][T16071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.568418][T16111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.780446][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1532.437055][T16142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1534.643493][T16134] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1534.663444][T16160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1535.557332][T15855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1535.653533][T15855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1535.722149][T15855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1536.028179][T15855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1537.548824][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.591279][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.874230][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'. [ 1538.218423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.225830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.554542][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.561925][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.883116][T16204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1541.753466][T16209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1543.664289][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1544.691505][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.964523][T15855] veth0_vlan: entered promiscuous mode [ 1545.138040][T15855] veth1_vlan: entered promiscuous mode [ 1546.098717][T15855] veth0_macvtap: entered promiscuous mode [ 1546.220892][T15855] veth1_macvtap: entered promiscuous mode [ 1546.276253][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.543995][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.744612][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.781347][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.809478][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.820513][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.845362][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.879311][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.909431][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.932755][T16258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.062379][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.106009][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.320942][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.379560][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.582997][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.593956][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.618854][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.657969][T16267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.844888][T15855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.907498][T15855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.936438][T15855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.973895][T15855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.493151][T16314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1557.547928][T16320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1557.795054][T14513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1557.806706][T14513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1557.815891][T14513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1558.019608][T14513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1558.028849][T14513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1558.036603][T14513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1558.130069][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2483'. [ 1560.265214][ T5104] Bluetooth: hci1: command tx timeout [ 1560.545087][ T6821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.343402][ T5104] Bluetooth: hci1: command tx timeout [ 1563.124487][ T6821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.412673][T16323] chnl_net:caif_netlink_parms(): no params data found [ 1564.115890][T16368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1564.311214][ T6821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.429329][ T5104] Bluetooth: hci1: command tx timeout [ 1564.778193][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 1566.107178][ T6821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.195614][T16379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1566.503278][ T5104] Bluetooth: hci1: command tx timeout [ 1566.992094][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.173667][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.198409][T16323] bridge_slave_0: entered allmulticast mode [ 1567.243550][T16323] bridge_slave_0: entered promiscuous mode [ 1567.370071][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.391910][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.408843][T16323] bridge_slave_1: entered allmulticast mode [ 1567.436197][T16323] bridge_slave_1: entered promiscuous mode [ 1567.562355][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.616983][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.747793][T16323] team0: Port device team_slave_0 added [ 1568.305723][T16323] team0: Port device team_slave_1 added [ 1568.593367][ T5104] Bluetooth: hci1: command tx timeout [ 1569.159955][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.170664][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.198202][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.252117][T16414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.351498][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.390180][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.439497][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.629924][T16323] hsr_slave_0: entered promiscuous mode [ 1570.664194][T16323] hsr_slave_1: entered promiscuous mode [ 1570.684870][T16323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.702876][T16323] Cannot create hsr debugfs directory [ 1572.768196][T16431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.270097][ T6821] hsr_slave_0: left promiscuous mode [ 1573.281354][ T6821] hsr_slave_1: left promiscuous mode [ 1573.370600][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.407993][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.736643][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.773257][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.969154][ T6821] bridge_slave_1: left allmulticast mode [ 1573.993444][ T6821] bridge_slave_1: left promiscuous mode [ 1574.032792][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.068122][ T6821] bridge_slave_0: left allmulticast mode [ 1574.123679][ T6821] bridge_slave_0: left promiscuous mode [ 1574.129621][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.346233][ T6821] veth1_macvtap: left promiscuous mode [ 1574.351868][ T6821] veth0_macvtap: left promiscuous mode [ 1574.382392][ T6821] veth1_vlan: left promiscuous mode [ 1574.419333][ T6821] veth0_vlan: left promiscuous mode [ 1581.908438][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 1581.976770][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 1582.034249][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.097436][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.970403][ T6821] bond0 (unregistering): Released all slaves [ 1583.110142][T16460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1583.223692][T16472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1586.561170][T16323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1586.624200][T16323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1587.135083][T16323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1587.180421][T16323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1588.358211][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.416789][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.544282][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.551464][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.595961][T16537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1589.745049][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.752413][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.949751][T16546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1592.942574][T16323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1593.018269][T16323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1596.583467][T16587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1596.854148][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.489810][T16323] veth0_vlan: entered promiscuous mode [ 1597.569866][T16323] veth1_vlan: entered promiscuous mode [ 1597.875777][T16323] veth0_macvtap: entered promiscuous mode [ 1598.676943][T16602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1598.805503][T16323] veth1_macvtap: entered promiscuous mode [ 1598.969110][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.443014][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.505458][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.556661][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.588413][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1599.634187][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.658986][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.725824][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.768986][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1599.812512][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1599.847977][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.001716][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.013482][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.041548][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.058163][T16323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.291470][T16323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.843697][T16323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.872235][T16323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.378838][ T6821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.233019][ T6821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.299200][T16643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1606.400970][T16652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1606.865468][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.984505][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.053836][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.061109][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.078836][T16670] overlayfs: failed to resolve './bus': -2 [ 1610.687004][ T6820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.575382][T16690] lo: entered promiscuous mode [ 1611.580344][T16690] lo: entered allmulticast mode [ 1611.586150][T16690] tunl0: entered promiscuous mode [ 1611.591235][T16690] tunl0: entered allmulticast mode [ 1611.597623][T16690] gre0: entered promiscuous mode [ 1611.602622][T16690] gre0: entered allmulticast mode [ 1611.609104][T16690] gretap0: entered promiscuous mode [ 1611.614692][T16690] gretap0: entered allmulticast mode [ 1611.621465][T16690] erspan0: entered promiscuous mode [ 1611.629532][T16690] erspan0: entered allmulticast mode [ 1611.646052][T16690] ip_vti0: entered promiscuous mode [ 1611.651405][T16690] ip_vti0: entered allmulticast mode [ 1611.660798][T16690] ip6_vti0: entered promiscuous mode [ 1611.667122][T16690] ip6_vti0: entered allmulticast mode [ 1611.724681][T16690] sit0: entered promiscuous mode [ 1611.729927][T16690] sit0: entered allmulticast mode [ 1611.743014][T16690] ip6tnl0: entered promiscuous mode [ 1611.748469][T16690] ip6tnl0: entered allmulticast mode [ 1611.759408][T16690] ip6gre0: entered promiscuous mode [ 1611.765106][T16690] ip6gre0: entered allmulticast mode [ 1611.806993][T16690] syz_tun: entered promiscuous mode [ 1611.812481][T16690] syz_tun: entered allmulticast mode [ 1611.821031][T16690] ip6gretap0: entered promiscuous mode [ 1611.826984][T16690] ip6gretap0: entered allmulticast mode [ 1611.835148][T16690] bridge0: entered promiscuous mode [ 1611.840685][T16690] bridge0: entered allmulticast mode [ 1611.848980][T16690] vcan0: entered promiscuous mode [ 1611.854865][T16690] vcan0: entered allmulticast mode [ 1611.862052][T16690] bond0: entered promiscuous mode [ 1611.867659][T16690] bond_slave_0: entered promiscuous mode [ 1611.882982][T16690] bond_slave_1: entered promiscuous mode [ 1611.893087][T16690] bond0: entered allmulticast mode [ 1611.898490][T16690] bond_slave_0: entered allmulticast mode [ 1611.905222][T16690] bond_slave_1: entered allmulticast mode [ 1611.915235][T16690] team0: entered promiscuous mode [ 1611.920487][T16690] team_slave_0: entered promiscuous mode [ 1611.932038][T16690] team_slave_1: entered promiscuous mode [ 1611.943057][T16690] team0: entered allmulticast mode [ 1611.948295][T16690] team_slave_0: entered allmulticast mode [ 1611.954303][T16690] team_slave_1: entered allmulticast mode [ 1611.964376][T16690] dummy0: entered promiscuous mode [ 1611.969623][T16690] dummy0: entered allmulticast mode [ 1611.996626][T16690] nlmon0: entered promiscuous mode [ 1612.002014][T16690] nlmon0: entered allmulticast mode [ 1613.013215][T16690] caif0: entered promiscuous mode [ 1613.018357][T16690] caif0: entered allmulticast mode [ 1613.023596][T16690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.206386][T16693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1613.380326][T14513] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1613.401219][T14513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1613.439457][ T6820] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.684244][T14513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1614.772564][T14513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1614.792662][T14513] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1614.808026][T14513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1615.346139][ T6820] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.723383][ T6820] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.165440][T16725] overlayfs: failed to resolve './bus': -2 [ 1616.561565][ T6820] tipc: Left network mode [ 1618.489543][T16740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1619.787954][T16746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1620.129786][ T6767] IPVS: starting estimator thread 0... [ 1620.887699][T16695] chnl_net:caif_netlink_parms(): no params data found [ 1621.013031][T16756] IPVS: using max 19 ests per chain, 45600 per kthread [ 1623.469476][T16695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.491142][T16695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.513641][T16695] bridge_slave_0: entered allmulticast mode [ 1623.522694][T16695] bridge_slave_0: entered promiscuous mode [ 1624.866055][T16695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.897286][T16695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.933841][T16695] bridge_slave_1: entered allmulticast mode [ 1624.949173][T16695] bridge_slave_1: entered promiscuous mode [ 1625.019754][T16789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.353834][T16796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.684314][T16802] overlayfs: failed to resolve './bus': -2 [ 1627.559080][T16695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.623359][T16695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.646264][T16695] team0: Port device team_slave_0 added [ 1628.699355][T16695] team0: Port device team_slave_1 added [ 1628.771641][ T6820] hsr_slave_0: left promiscuous mode [ 1628.801158][ T6820] hsr_slave_1: left promiscuous mode [ 1628.855607][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1628.883483][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.922112][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1628.956252][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.008447][ T6820] bridge_slave_1: left allmulticast mode [ 1629.021627][ T6820] bridge_slave_1: left promiscuous mode [ 1629.049155][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.101942][ T6820] bridge_slave_0: left allmulticast mode [ 1629.116794][ T6820] bridge_slave_0: left promiscuous mode [ 1629.127786][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.394540][ T6820] veth1_macvtap: left promiscuous mode [ 1630.400933][ T6820] veth0_macvtap: left promiscuous mode [ 1631.183479][ T6820] veth1_vlan: left promiscuous mode [ 1631.188914][ T6820] veth0_vlan: left promiscuous mode [ 1631.511396][ T6820] bond2 (unregistering): Released all slaves [ 1631.546942][ T6820] bond1 (unregistering): Released all slaves [ 1635.829738][ T6820] team_slave_1 (unregistering): left promiscuous mode [ 1635.846735][ T6820] team_slave_1 (unregistering): left allmulticast mode [ 1635.862694][ T6820] team0 (unregistering): Port device team_slave_1 removed [ 1635.949867][ T6820] team_slave_0 (unregistering): left promiscuous mode [ 1635.959725][ T6820] team_slave_0 (unregistering): left allmulticast mode [ 1635.973976][ T6820] team0 (unregistering): Port device team_slave_0 removed [ 1636.512425][ T6820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.523672][ T6820] bond_slave_1 (unregistering): left promiscuous mode [ 1636.561035][ T6820] bond_slave_1 (unregistering): left allmulticast mode [ 1636.665108][ T6820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.674912][ T6820] bond_slave_0 (unregistering): left promiscuous mode [ 1636.681888][ T6820] bond_slave_0 (unregistering): left allmulticast mode [ 1637.501148][ T6820] bond0 (unregistering): Released all slaves [ 1637.773501][T16838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1637.935779][T16852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1638.064817][T16695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.072011][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.179852][T16695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.316339][T16872] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2584'. [ 1638.323249][T16695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.337365][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.368204][T16695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.945247][T16695] hsr_slave_0: entered promiscuous mode [ 1639.972790][T16695] hsr_slave_1: entered promiscuous mode [ 1640.023798][T16695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.031558][T16695] Cannot create hsr debugfs directory [ 1642.056983][ T6820] IPVS: stop unused estimator thread 0... [ 1644.078821][T16906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1644.679096][T16920] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2593'. [ 1647.874822][T16929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1648.494238][T16695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1649.897623][T16695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1649.954145][T16695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1650.010775][T16695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1651.079019][T16963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1651.492204][T16695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.607401][T16695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.678745][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.686489][ T6820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.719123][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.726787][ T6820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.459961][T16695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.716219][T16695] veth0_vlan: entered promiscuous mode [ 1652.795784][T16695] veth1_vlan: entered promiscuous mode [ 1652.988343][T16695] veth0_macvtap: entered promiscuous mode [ 1653.030420][T16695] veth1_macvtap: entered promiscuous mode [ 1653.161530][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.234988][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.266087][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.297070][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.496888][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1654.305301][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.342030][T16695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.385552][T16997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1654.554960][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.595356][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.638088][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.653690][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.663680][T16695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1654.674366][T16695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1654.694802][T16695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.828150][T16695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.874773][T16695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.982992][T16695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.992522][T16695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.666595][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.693145][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.821863][T17015] loop2: detected capacity change from 0 to 128 [ 1655.833702][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.868588][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.965361][T17015] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1656.008497][T17015] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.179767][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1656.321389][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2606'. [ 1658.555784][T17038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1659.964369][T17048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.193121][T17095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.366452][T17103] overlayfs: missing 'lowerdir' [ 1666.083079][ T8770] IPVS: starting estimator thread 0... [ 1666.502453][T17115] IPVS: using max 18 ests per chain, 43200 per kthread [ 1668.455057][T17144] loop5: detected capacity change from 0 to 1024 [ 1669.388919][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.395597][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.778050][T17157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1671.849765][T17172] overlayfs: missing 'lowerdir' [ 1672.463732][T14175] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1672.689835][T14175] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1672.725608][T14175] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 1672.850885][T14175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.881092][T13860] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1673.095152][T14175] usb 5-1: config 0 descriptor?? [ 1673.194660][T13860] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1673.249049][T13860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.494101][T13860] usb 3-1: Product: syz [ 1673.532994][T13860] usb 3-1: Manufacturer: syz [ 1673.542342][T13860] usb 3-1: SerialNumber: syz [ 1673.564600][T13860] usb 3-1: config 0 descriptor?? [ 1673.793083][T13860] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1673.881553][T14175] usbhid 5-1:0.0: can't add hid device: -71 [ 1673.902116][T14175] usbhid: probe of 5-1:0.0 failed with error -71 [ 1673.979768][T14175] usb 5-1: USB disconnect, device number 23 [ 1675.637069][T17208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1675.838593][T13860] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1675.881026][T13860] usb 3-1: USB disconnect, device number 44 [ 1677.910218][T17225] overlayfs: missing 'lowerdir' [ 1678.753627][T17236] loop2: detected capacity change from 0 to 8 [ 1678.884148][T17236] unable to read xattr id index table [ 1680.300788][T17244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1682.848446][T17260] loop5: detected capacity change from 0 to 32768 [ 1682.958930][T17260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2652 (17260) [ 1683.099082][T17260] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1683.126127][T17260] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1683.168931][T17260] BTRFS info (device loop5): enabling auto defrag [ 1683.194910][T17260] BTRFS info (device loop5): doing ref verification [ 1683.212246][T17260] BTRFS info (device loop5): use no compression [ 1683.240555][T17260] BTRFS info (device loop5): force clearing of disk cache [ 1683.450876][T17268] overlayfs: missing 'lowerdir' [ 1683.752225][T17260] BTRFS info (device loop5): max_inline at 4096 [ 1683.759458][T17260] BTRFS info (device loop5): disabling free space tree [ 1684.254805][T17290] lo: entered promiscuous mode [ 1684.259914][T17290] lo: entered allmulticast mode [ 1684.268415][T17290] tunl0: entered promiscuous mode [ 1684.275045][T17290] tunl0: entered allmulticast mode [ 1684.284140][T17290] gre0: entered promiscuous mode [ 1684.289456][T17290] gre0: entered allmulticast mode [ 1684.298691][T17290] gretap0: entered promiscuous mode [ 1684.304150][T17290] gretap0: entered allmulticast mode [ 1684.313279][T17290] erspan0: entered promiscuous mode [ 1684.319195][T17290] erspan0: entered allmulticast mode [ 1684.327765][T17290] ip_vti0: entered promiscuous mode [ 1684.333194][T17290] ip_vti0: entered allmulticast mode [ 1684.342247][T17290] ip6_vti0: entered promiscuous mode [ 1684.347714][T17290] ip6_vti0: entered allmulticast mode [ 1684.357527][T17290] sit0: entered promiscuous mode [ 1684.362769][T17290] sit0: entered allmulticast mode [ 1684.418955][T17290] ip6tnl0: entered promiscuous mode [ 1684.424520][T17290] ip6tnl0: entered allmulticast mode [ 1684.433522][T17290] ip6gre0: entered promiscuous mode [ 1684.438984][T17290] ip6gre0: entered allmulticast mode [ 1684.448810][T17290] syz_tun: entered promiscuous mode [ 1684.454207][T17290] syz_tun: entered allmulticast mode [ 1684.463275][T17290] ip6gretap0: entered promiscuous mode [ 1684.468902][T17290] ip6gretap0: entered allmulticast mode [ 1684.479196][T17290] bridge0: entered promiscuous mode [ 1684.484765][T17290] bridge0: entered allmulticast mode [ 1684.493496][T17290] vcan0: entered promiscuous mode [ 1684.498650][T17290] vcan0: entered allmulticast mode [ 1684.506803][T17290] bond0: entered promiscuous mode [ 1684.511936][T17290] bond_slave_0: entered promiscuous mode [ 1684.518823][T17290] bond_slave_1: entered promiscuous mode [ 1684.527438][T17290] bond0: entered allmulticast mode [ 1684.532669][T17290] bond_slave_0: entered allmulticast mode [ 1684.538635][T17290] bond_slave_1: entered allmulticast mode [ 1684.549744][T17290] team0: entered promiscuous mode [ 1684.555325][T17290] team_slave_0: entered promiscuous mode [ 1684.562155][T17290] team_slave_1: entered promiscuous mode [ 1684.568935][T17290] team0: entered allmulticast mode [ 1684.574262][T17290] team_slave_0: entered allmulticast mode [ 1684.581489][T17290] team_slave_1: entered allmulticast mode [ 1684.594510][T17290] dummy0: entered promiscuous mode [ 1684.599831][T17290] dummy0: entered allmulticast mode [ 1684.608796][T17290] nlmon0: entered promiscuous mode [ 1684.614295][T17290] nlmon0: entered allmulticast mode [ 1684.808172][T17290] caif0: entered promiscuous mode [ 1684.813329][T17290] caif0: entered allmulticast mode [ 1684.818539][T17290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1685.137175][T17260] BTRFS error (device loop5): open_ctree failed: -4 [ 1687.664454][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 1688.675799][T17320] overlayfs: missing 'lowerdir' [ 1689.597242][T17325] overlayfs: missing 'lowerdir' [ 1691.325680][T17332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1692.706400][T17341] loop2: detected capacity change from 0 to 4096 [ 1692.772578][T17347] loop4: detected capacity change from 0 to 128 [ 1692.780336][T17341] ntfs3: loop2: It is recommened to use chkdsk. [ 1692.798950][T17347] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1692.811879][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1692.820604][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1692.928295][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1693.076033][T17347] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.100030][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1693.301742][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 1693.390235][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'. [ 1693.655760][T17347] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1693.671475][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 1693.946580][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 1693.973806][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 1693.982601][T17341] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 1694.357395][ T9291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1695.576304][T17361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1695.989990][T17365] overlayfs: missing 'lowerdir' [ 1696.844347][T17373] overlayfs: missing 'lowerdir' [ 1699.813099][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 1700.759862][T17392] loop2: detected capacity change from 0 to 128 [ 1700.889852][T17392] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1700.992726][T17392] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1701.055815][T17392] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1701.219576][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1701.629452][ T8770] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1702.663179][T17403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1702.786514][ T8770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1702.837148][ T8770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.863325][ T8770] usb 6-1: Product: syz [ 1702.885043][ T8770] usb 6-1: Manufacturer: syz [ 1702.890022][ T8770] usb 6-1: SerialNumber: syz [ 1702.966551][T17407] overlayfs: missing 'lowerdir' [ 1703.034784][ T8770] usb 6-1: config 0 descriptor?? [ 1703.584981][ T8770] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1705.070551][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 1705.835509][ T8770] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1705.875816][T17435] overlayfs: missing 'lowerdir' [ 1705.952001][ T8770] usb 6-1: USB disconnect, device number 2 [ 1708.023431][T17443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1708.965548][T17450] overlayfs: missing 'lowerdir' [ 1710.505843][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 1712.836294][T17487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1713.166495][T17495] loop4: detected capacity change from 0 to 64 [ 1715.097185][T17504] overlayfs: missing 'lowerdir' [ 1717.835286][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1719.363321][T17527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1719.793185][T13860] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1720.011305][T13860] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1720.030439][T13860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.048546][T13860] usb 3-1: Product: syz [ 1720.057516][T13860] usb 3-1: Manufacturer: syz [ 1720.083692][T13860] usb 3-1: SerialNumber: syz [ 1720.097549][T13860] usb 3-1: config 0 descriptor?? [ 1720.233997][ T28] audit: type=1326 audit(1759213995.732:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.5.2720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd7378eec9 code=0x0 [ 1720.336228][T13860] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1720.714559][T17548] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2721'. [ 1721.459996][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 1721.898229][T13860] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1722.143776][T17559] loop1: detected capacity change from 0 to 256 [ 1722.161702][T17559] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1722.174263][T17559] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1722.205012][T17559] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1722.562979][T13860] usb 3-1: USB disconnect, device number 45 [ 1723.939310][T17567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1724.231613][T17569] overlayfs: missing 'lowerdir' [ 1724.328318][T17573] loop2: detected capacity change from 0 to 128 [ 1724.486538][T17573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1724.600396][T17573] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1724.775738][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1725.147964][T17584] loop2: detected capacity change from 0 to 64 [ 1727.773006][ T5791] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1728.097067][ T5791] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1728.124735][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.898695][T17600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1729.022994][ T5791] usb 5-1: Product: syz [ 1729.044253][ T5791] usb 5-1: Manufacturer: syz [ 1729.051760][ T5791] usb 5-1: SerialNumber: syz [ 1729.068306][ T5791] usb 5-1: config 0 descriptor?? [ 1729.118680][T17604] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2737'. [ 1730.192547][ T5791] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 1730.201202][ T5791] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 1730.244580][T13860] usb 5-1: USB disconnect, device number 24 [ 1730.360630][T17612] loop1: detected capacity change from 0 to 128 [ 1730.451799][T17612] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1730.536558][T17612] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.560209][T17612] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1730.666079][T16695] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1730.836742][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.853488][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.973030][T17628] overlayfs: missing 'lowerdir' [ 1733.020346][T17633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1734.703000][ T6767] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1734.888188][T17647] loop4: detected capacity change from 0 to 128 [ 1734.919921][ T6767] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1734.929464][ T8770] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1734.944590][T17647] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1734.979083][T17647] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.994543][ T6767] usb 3-1: config 1 has no interface number 0 [ 1735.000826][ T6767] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1735.012907][ T6767] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1735.057603][ T6767] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1735.076554][T17647] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1735.112958][ T6767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.121036][ T6767] usb 3-1: Product: syz [ 1735.163147][ T6767] usb 3-1: Manufacturer: syz [ 1735.169219][ T6767] usb 3-1: SerialNumber: syz [ 1735.218698][T17641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1735.231210][ T8770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1735.241326][ T8770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.245024][ T6767] usb 3-1: Expected 3 endpoints, found: 1 [ 1735.259766][ T8770] usb 6-1: Product: syz [ 1735.265681][ T9291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1735.276568][ T8770] usb 6-1: Manufacturer: syz [ 1735.281361][ T8770] usb 6-1: SerialNumber: syz [ 1735.324995][ T8770] usb 6-1: config 0 descriptor?? [ 1735.449131][T17654] kvm: pic: non byte write [ 1735.547813][ T8770] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1735.728929][T13860] usb 3-1: USB disconnect, device number 46 [ 1737.466018][ T8770] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1737.629998][ T8770] usb 6-1: USB disconnect, device number 3 [ 1738.475268][T17673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1740.082319][T17691] loop5: detected capacity change from 0 to 128 [ 1740.170108][T17691] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1740.291038][T17691] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.324702][T17692] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1740.346071][T17692] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1740.368090][T17691] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1740.541772][T14512] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1740.753064][T17699] loop5: detected capacity change from 0 to 256 [ 1741.258597][T17704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1743.358665][T17709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1743.771812][T17720] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2766'. [ 1743.837951][T17719] loop2: detected capacity change from 0 to 2048 [ 1743.939964][T17719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1743.993845][T17719] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.689380][ T28] audit: type=1800 audit(1759214020.182:3): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2767" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 1744.748032][T17719] fs-verity: sha256 using implementation "sha256-avx2" [ 1744.995189][T17731] loop1: detected capacity change from 0 to 128 [ 1745.053489][T17719] fs-verity (loop2, inode 13): Error -4 building Merkle tree [ 1745.077947][T17731] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1745.112576][T17731] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.150743][T17731] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1745.267299][T16323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.325542][T16695] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1745.373214][ T8770] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1745.703164][ T8770] usb 6-1: Using ep0 maxpacket: 16 [ 1745.715713][ T8770] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1746.478734][ T8770] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1746.651691][ T8770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.697438][ T8770] usb 6-1: Product: syz [ 1747.296843][ T8770] usb 6-1: Manufacturer: syz [ 1747.301728][ T8770] usb 6-1: SerialNumber: syz [ 1747.312662][ T8770] usb 6-1: config 0 descriptor?? [ 1747.336703][T17748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1747.622031][T17754] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1747.640060][T17754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1748.825191][ T786] usb 6-1: USB disconnect, device number 4 [ 1749.683262][T17772] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2779'. [ 1749.860959][T17776] loop2: detected capacity change from 0 to 128 [ 1749.987885][T17776] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1750.002796][T17779] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1750.735915][T17776] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1750.939614][T17776] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1752.466836][T17789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1752.669752][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1755.600635][T17805] loop2: detected capacity change from 0 to 32768 [ 1755.833640][T17805] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1756.385888][T17826] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1756.395085][T17805] XFS (loop2): Ending clean mount [ 1756.413206][T17826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1757.366004][T17805] XFS (loop2): Quotacheck needed: Please wait. [ 1758.217520][T17805] XFS (loop2): Quotacheck: Done. [ 1758.357019][T16323] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1758.499099][T17838] loop4: detected capacity change from 0 to 128 [ 1758.554455][T17838] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1758.612355][T17838] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.713784][T17838] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 1758.853156][ T8770] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1758.895940][ T9291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1759.045349][ T8770] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1759.212943][ T8770] usb 2-1: config 1 has no interface number 0 [ 1759.229128][ T8770] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1759.243252][ T8770] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1760.269327][ T8770] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1760.303222][ T8770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.037686][T17850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1761.182478][ T8770] usb 2-1: Product: syz [ 1761.229917][ T8770] usb 2-1: Manufacturer: syz [ 1761.283373][ T8770] usb 2-1: SerialNumber: syz [ 1761.326547][T17841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1761.386327][ T8770] usb 2-1: Expected 3 endpoints, found: 1 [ 1761.960611][ T8770] usb 2-1: USB disconnect, device number 49 [ 1763.437219][T17874] overlayfs: missing 'lowerdir' [ 1764.083919][T17859] loop4: detected capacity change from 0 to 65536 [ 1764.108189][T17859] (syz.4.2800,17859,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1764.184103][T17859] (syz.4.2800,17859,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1764.313706][T17879] loop2: detected capacity change from 0 to 128 [ 1764.441233][T17879] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1764.555219][T17879] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1764.801500][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1765.872703][T17889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1766.220205][T17894] overlayfs: missing 'lowerdir' [ 1768.016175][T17908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 1768.697816][T17915] overlayfs: missing 'lowerdir' [ 1769.022550][T17916] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1769.481650][T17922] loop4: detected capacity change from 0 to 128 [ 1769.580872][T17922] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1769.645994][T17922] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1769.776955][ T9291] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1771.256094][T17938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1772.012978][T11653] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1772.234955][T11653] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1772.279257][T11653] usb 3-1: config 0 has no interface number 0 [ 1772.341073][T11653] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice=f5.d2 [ 1772.361169][T11653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.382186][T11653] usb 3-1: Product: syz [ 1772.394560][T11653] usb 3-1: Manufacturer: syz [ 1772.409899][T11653] usb 3-1: SerialNumber: syz [ 1772.430524][T11653] usb 3-1: config 0 descriptor?? [ 1772.467766][T11653] kvaser_usb 3-1:0.48: Cannot get usb endpoint(s) [ 1772.676288][T11653] usb 3-1: USB disconnect, device number 47 [ 1773.974029][T17957] overlayfs: missing 'lowerdir' [ 1774.767966][T17963] loop2: detected capacity change from 0 to 128 [ 1774.822285][T17963] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1774.903413][T17963] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1775.054842][T16323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1775.076635][T17949] loop1: detected capacity change from 0 to 32768 [ 1776.143773][T17977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1776.269477][T17949] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 1776.287321][T17970] overlayfs: missing 'lowerdir' [ 1778.443619][T18004] overlayfs: missing 'lowerdir' [ 1779.155200][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1779.422965][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1779.467791][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.525545][ T23] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1779.564650][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.612974][ T23] usb 6-1: Product: syz [ 1779.643071][ T23] usb 6-1: Manufacturer: syz [ 1779.653844][ T23] usb 6-1: SerialNumber: syz [ 1779.703698][ T23] usb 6-1: config 0 descriptor?? [ 1780.068266][T11653] usb 6-1: USB disconnect, device number 5 [ 1780.908584][T18016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1782.528716][T18035] overlayfs: missing 'lowerdir' [ 1782.855562][T18043] overlayfs: missing 'lowerdir' [ 1784.314749][T18048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1787.268801][T18070] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2854'. [ 1788.258412][T18058] loop2: detected capacity change from 0 to 32768 [ 1788.992031][T18074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1789.358950][T18083] overlayfs: missing 'workdir' [ 1789.726946][T18090] overlayfs: missing 'lowerdir' [ 1789.791728][T18089] loop4: detected capacity change from 0 to 2048 [ 1789.943621][T18089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1792.136825][T18105] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2864'. [ 1792.283655][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.290169][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.324815][T18112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1794.485212][T18115] loop1: detected capacity change from 0 to 2048 [ 1794.560297][T18115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1794.677507][T18117] loop5: detected capacity change from 0 to 512 [ 1794.870818][T18117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.963094][T18117] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.033454][ T28] audit: type=1800 audit(1759214070.532:4): pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2867" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1795.204601][T14512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.497822][T18124] loop2: detected capacity change from 0 to 32768 [ 1797.129418][T18124] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 1797.129418][T18124] [ 1797.590605][T18141] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2873'. [ 1797.613833][T18124] ERROR: (device loop2): remounting filesystem as read-only [ 1797.644581][T18124] xtLookup: xtSearch returned -5 [ 1797.675598][T18124] free_index: error reading directory table [ 1797.843203][T18143] overlayfs: missing 'workdir' [ 1798.834183][T18149] overlayfs: missing 'lowerdir' [ 1799.943710][T18156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1800.352962][ T23] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1800.603033][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1801.352572][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.440514][ T23] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1801.479592][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.518475][ T23] usb 5-1: Product: syz [ 1801.542663][ T23] usb 5-1: Manufacturer: syz [ 1801.558026][ T23] usb 5-1: SerialNumber: syz [ 1801.594904][ T23] usb 5-1: config 0 descriptor?? [ 1802.600959][ T5791] usb 5-1: USB disconnect, device number 25 [ 1805.442428][T18204] overlayfs: missing 'workdir' [ 1806.597110][T18211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1810.192027][T18233] overlayfs: missing 'lowerdir' [ 1810.293358][T18237] tc_dump_action: action bad kind [ 1811.531775][T18247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1817.826915][T18285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1817.939772][T18283] loop2: detected capacity change from 0 to 4096 [ 1818.096197][T18290] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1818.341931][T18276] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1818.803313][T18297] overlayfs: missing 'lowerdir' [ 1819.276664][T18304] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1822.370806][T18318] comedi comedi3: comedi_config --init_data is deprecated [ 1822.383927][T18319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1823.661492][T18329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1825.268332][T18332] loop1: detected capacity change from 0 to 32768 [ 1825.390873][T18332] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1825.390873][T18332] [ 1825.432281][T18332] ERROR: (device loop1): remounting filesystem as read-only [ 1825.440641][T18332] xtLookup: xtSearch returned -5 [ 1825.448062][T18332] free_index: error reading directory table [ 1825.464285][T18340] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1827.439895][T18354] overlayfs: missing 'lowerdir' [ 1828.457187][T18361] comedi comedi3: comedi_config --init_data is deprecated [ 1828.520980][T18362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1829.931982][T18378] loop5: detected capacity change from 0 to 2048 [ 1830.027340][T18384] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1830.313219][T18378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.350414][T18391] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1832.479314][T18396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1833.751385][T18403] overlayfs: missing 'lowerdir' [ 1834.303890][T18422] loop4: detected capacity change from 0 to 512 [ 1837.180758][T18422] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 1837.800182][T18428] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1838.670446][T18430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1838.955994][T18436] input: syz0 as /devices/virtual/input/input13 [ 1839.459232][T18442] overlayfs: missing 'lowerdir' [ 1842.377114][T18467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1842.974163][T18472] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1844.389419][T18480] overlayfs: missing 'lowerdir' [ 1846.153522][T18497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1847.296448][T18508] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1847.876805][T18510] loop1: detected capacity change from 0 to 32768 [ 1848.043038][T18519] overlayfs: missing 'lowerdir' [ 1848.100887][T18510] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1850.109001][T18534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1850.277182][T18510] XFS (loop1): Ending clean mount [ 1850.372761][T16695] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1850.968349][T18544] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1851.428666][T18554] overlayfs: missing 'lowerdir' [ 1853.539743][T18566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1853.710297][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.725842][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.250418][T18583] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1855.750368][T18585] overlayfs: missing 'lowerdir' [ 1857.176025][T18598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.811009][T18612] overlayfs: missing 'lowerdir' [ 1858.854325][T18617] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1861.123214][T18631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1861.233034][ T6767] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1861.472907][ T6767] usb 2-1: Using ep0 maxpacket: 8 [ 1862.263839][ T6767] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1862.272210][ T6767] usb 2-1: config 179 has no interface number 0 [ 1862.285170][ T6767] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1862.303002][ T6767] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1862.332191][ T6767] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1862.357845][ T6767] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1862.394265][ T6767] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1862.476063][ T6767] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1862.503288][ T6767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.537829][T18628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1862.585686][T18644] loop2: detected capacity change from 0 to 128 [ 1862.700476][T18644] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1862.757515][T18644] hpfs: filesystem error: improperly stopped [ 1862.765035][T18644] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1862.795408][T18644] hpfs: You really don't want any checks? You are crazy... [ 1862.830843][T18644] hpfs: hpfs_map_sector(): read error [ 1862.874995][T18646] overlayfs: missing 'lowerdir' [ 1862.890373][T18644] hpfs: code page support is disabled [ 1862.925589][T18644] hpfs: hpfs_map_4sectors(): unaligned read [ 1863.006225][T18644] hpfs: hpfs_map_4sectors(): unaligned read [ 1863.012237][T18644] hpfs: filesystem error: unable to find root dir [ 1863.250535][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.258762][ T6767] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 1863.302727][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.323585][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.333770][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.383081][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.392315][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.413739][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.455275][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.476864][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.487098][T13860] usb 2-1: USB disconnect, device number 50 [ 1863.490297][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1863.501031][T18650] loop5: detected capacity change from 0 to 2048 [ 1863.504897][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1863.524912][T18650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1863.579380][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 1863.787712][T13860] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1865.212924][ T8770] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1865.554151][ T8770] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1865.563838][ T8770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.572128][ T8770] usb 6-1: Product: syz [ 1865.576901][ T8770] usb 6-1: Manufacturer: syz [ 1865.581670][ T8770] usb 6-1: SerialNumber: syz [ 1866.340331][T18674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1866.478936][ T8770] usb 6-1: config 0 descriptor?? [ 1866.713107][T18678] loop1: detected capacity change from 0 to 1024 [ 1867.040330][ T8770] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1868.151820][T18687] overlayfs: missing 'lowerdir' [ 1868.275178][ T8770] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1868.316767][ T8770] usb 6-1: USB disconnect, device number 6 [ 1869.012444][T18698] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1870.973115][T18706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1871.349155][T18713] loop5: detected capacity change from 0 to 1024 [ 1873.333282][T18724] overlayfs: missing 'lowerdir' [ 1877.586879][T18763] loop1: detected capacity change from 0 to 1024 [ 1878.053356][ T786] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1878.217312][T18769] overlayfs: missing 'lowerdir' [ 1878.454594][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 1878.563622][ T786] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1878.602964][ T786] usb 3-1: config 179 has no interface number 0 [ 1878.622962][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1878.822401][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1878.853559][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1879.695924][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1879.758702][ T786] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1879.770844][T18779] loop1: detected capacity change from 0 to 2048 [ 1879.801087][ T786] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1879.821308][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.827473][T18779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1879.844062][T18767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1880.397573][ T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 1881.393398][T18364] usb 3-1: USB disconnect, device number 48 [ 1881.393441][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1881.408444][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1881.444133][T18364] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1888.384477][T18847] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1892.663332][T18879] loop2: detected capacity change from 0 to 4096 [ 1892.756023][T18882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1893.600985][ T28] audit: type=1800 audit(1759214169.102:5): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3078" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1893.714267][ T28] audit: type=1800 audit(1759214169.112:6): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3078" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1894.345183][ T28] audit: type=1800 audit(1759214169.822:7): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3078" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1898.646943][T18920] loop5: detected capacity change from 0 to 128 [ 1898.745359][T18920] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1898.817319][T18920] hpfs: filesystem error: improperly stopped [ 1898.843106][T18920] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1898.913245][T18920] hpfs: You really don't want any checks? You are crazy... [ 1898.921176][T18920] hpfs: hpfs_map_sector(): read error [ 1898.927336][T18920] hpfs: code page support is disabled [ 1898.933856][T18920] hpfs: hpfs_map_4sectors(): unaligned read [ 1898.940259][T18920] hpfs: hpfs_map_4sectors(): unaligned read [ 1898.946624][T18920] hpfs: filesystem error: unable to find root dir [ 1899.998622][T18926] __nla_validate_parse: 44 callbacks suppressed [ 1899.998638][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.061405][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.072975][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.089925][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.100516][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.115799][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.131273][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.147876][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.165759][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1900.184900][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1901.550676][T18925] loop4: detected capacity change from 0 to 32768 [ 1901.681627][T18925] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1902.452080][ T9291] (syz-executor,9291,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1902.526491][ T9291] ocfs2: Unmounting device (7,4) on (node local) [ 1902.567541][T18950] loop5: detected capacity change from 0 to 2048 [ 1902.670230][T18950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1902.913334][T13860] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1903.207092][T13860] usb 2-1: Using ep0 maxpacket: 8 [ 1903.258208][T13860] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1903.297773][T13860] usb 2-1: config 179 has no interface number 0 [ 1903.333007][T13860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1903.412735][T13860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1903.487173][T13860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1903.541638][T13860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1906.354987][T13860] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1906.452928][T13860] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1906.462052][T13860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.677012][T13860] usb 2-1: can't set config #179, error -71 [ 1906.685336][T13860] usb 2-1: USB disconnect, device number 51 [ 1908.682960][ T5791] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1909.198247][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1909.355069][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1909.414292][T18996] loop5: detected capacity change from 0 to 4096 [ 1909.432983][ T5791] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1909.448131][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.485506][ T5791] usb 3-1: config 0 descriptor?? [ 1909.611900][T18996] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1910.191152][T19004] loop5: detected capacity change from 0 to 4096 [ 1910.223147][T14444] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1910.265092][T19007] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1911.343788][T14444] usb 2-1: Using ep0 maxpacket: 8 [ 1911.357975][T14444] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1911.378829][ T28] audit: type=1800 audit(1759214186.882:8): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3111" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1911.394611][ T5791] usbhid 3-1:0.0: can't add hid device: -71 [ 1911.420991][T14444] usb 2-1: config 179 has no interface number 0 [ 1911.421075][ T5791] usbhid: probe of 3-1:0.0 failed with error -71 [ 1911.433049][T14444] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1911.487526][ T28] audit: type=1800 audit(1759214186.942:9): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3111" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1911.516582][ T5791] usb 3-1: USB disconnect, device number 49 [ 1911.519864][T14444] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1911.596560][T14444] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1911.648857][T14444] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1911.688616][T14444] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1911.704058][T14444] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1911.715639][T14444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.739123][T19002] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1911.988331][ T28] audit: type=1800 audit(1759214187.492:10): pid=19011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3111" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1912.056060][T14444] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 1912.325672][ T5791] usb 2-1: USB disconnect, device number 52 [ 1912.325726][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1912.340580][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1912.358451][ T5791] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1913.288204][T19026] comedi comedi3: comedi_config --init_data is deprecated [ 1915.458040][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.473508][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.151423][T19041] loop5: detected capacity change from 0 to 32768 [ 1917.229743][T19041] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1917.332599][T19041] XFS (loop5): Ending clean mount [ 1917.366030][T19041] XFS (loop5): Quotacheck needed: Please wait. [ 1917.509389][T19041] XFS (loop5): Quotacheck: Done. [ 1917.805621][T14512] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1920.412627][ T8770] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1920.972968][ T8770] usb 5-1: Using ep0 maxpacket: 8 [ 1921.833392][ T8770] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1921.857074][ T8770] usb 5-1: config 179 has no interface number 0 [ 1921.879019][ T8770] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1921.955418][T19088] loop2: detected capacity change from 0 to 128 [ 1921.978448][ T8770] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1921.993865][T19088] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1922.012963][ T8770] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1922.014205][T19088] hpfs: filesystem error: improperly stopped [ 1922.038550][T19088] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1922.048004][T19088] hpfs: You really don't want any checks? You are crazy... [ 1922.213294][ T8770] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1922.233567][T19088] hpfs: hpfs_map_sector(): read error [ 1922.239390][ T8770] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1922.256347][T19091] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 1922.278472][T19088] hpfs: code page support is disabled [ 1922.295327][T19088] hpfs: hpfs_map_4sectors(): unaligned read [ 1922.303766][T19088] hpfs: hpfs_map_4sectors(): unaligned read [ 1922.310237][T19088] hpfs: filesystem error: unable to find root dir [ 1922.339077][ T8770] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1922.362512][ T8770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.387613][T19073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1922.647131][ T8770] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 1922.691897][T19093] __nla_validate_parse: 43 callbacks suppressed [ 1922.691913][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.729653][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.742703][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.767253][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.787488][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.801734][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.813776][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1922.941184][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1923.064402][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1923.093004][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1923.094604][ T786] usb 5-1: USB disconnect, device number 26 [ 1923.094721][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1923.118733][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1923.209867][ T786] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1923.217101][T19097] loop5: detected capacity change from 0 to 2048 [ 1923.285602][T19097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1926.012952][T18364] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1926.204203][T18364] usb 5-1: Using ep0 maxpacket: 32 [ 1926.223717][T18364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.260217][T18364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.292538][T18364] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1926.343346][T18364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.382285][T18364] usb 5-1: config 0 descriptor?? [ 1927.043186][T18364] ft260 0003:0403:6030.0015: unknown main item tag 0x7 [ 1927.780406][T18364] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 1928.164030][T18364] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1928.221671][T18364] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 1929.788233][T19140] comedi comedi3: comedi_config --init_data is deprecated [ 1929.852878][T19146] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1930.353133][T19154] loop4: detected capacity change from 0 to 4096 [ 1930.543995][ T8770] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1930.648388][T19159] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1930.740715][ T28] audit: type=1800 audit(1759214206.242:11): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3147" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1930.768145][T19161] __nla_validate_parse: 44 callbacks suppressed [ 1930.768165][T19161] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1930.795373][ T8770] usb 6-1: Using ep0 maxpacket: 8 [ 1930.986429][ T28] audit: type=1800 audit(1759214206.272:12): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3147" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1931.036487][T18364] usb 5-1: USB disconnect, device number 27 [ 1931.193199][ T8770] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1931.211319][ T8770] usb 6-1: config 179 has no interface number 0 [ 1931.227520][ T8770] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1931.241931][ T8770] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1931.273198][ T8770] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1931.318208][ T8770] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1931.340096][ T8770] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1931.388046][ T8770] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1931.414129][ T8770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.446671][T19150] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1931.502649][T19167] loop2: detected capacity change from 0 to 2048 [ 1931.602052][T19167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1931.734422][ T8770] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input18 [ 1931.955961][ T5791] usb 6-1: USB disconnect, device number 7 [ 1931.955964][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1931.956107][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1932.011002][ T5791] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1932.873004][ T8770] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1933.093184][ T8770] usb 6-1: Using ep0 maxpacket: 16 [ 1933.131702][ T8770] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1933.154396][ T8770] usb 6-1: config 0 has no interface number 0 [ 1933.181202][ T8770] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1933.212373][ T8770] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1933.232568][ T8770] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1933.253080][ T8770] usb 6-1: Product: syz [ 1933.260016][ T8770] usb 6-1: SerialNumber: syz [ 1933.279264][ T8770] usb 6-1: config 0 descriptor?? [ 1933.301937][ T8770] cm109 6-1:0.8: invalid payload size 34, expected 4 [ 1933.352484][ T8770] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input19 [ 1934.004514][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1934.011565][ C1] ------------[ cut here ]------------ [ 1934.017976][ C1] URB ffff888025ccd300 submitted while active [ 1934.024927][ C1] WARNING: CPU: 1 PID: 22 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf35/0x17d0 [ 1934.034497][ C1] Modules linked in: [ 1934.038465][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1934.045983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1934.056195][ C1] RIP: 0010:usb_submit_urb+0xf35/0x17d0 [ 1934.061987][ C1] Code: 4a 8b 44 89 fa e8 bb ac 17 04 e9 28 fc ff ff e8 81 22 36 fb c6 05 46 b4 e5 07 01 48 c7 c7 c0 d7 4a 8b 48 89 de e8 db 96 00 fb <0f> 0b e9 45 f1 ff ff e8 5f 22 36 fb eb 11 e8 58 22 36 fb bd 80 00 [ 1934.081747][ C1] RSP: 0018:ffffc900001f0868 EFLAGS: 00010046 [ 1934.087902][ C1] RAX: 76d3e26ab98a2200 RBX: ffff888025ccd300 RCX: 0000000000040000 [ 1934.096126][ C1] RDX: ffffc900022c1000 RSI: 0000000000007059 RDI: 000000000000705a [ 1934.104427][ C1] RBP: 000000000000000f R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1934.112723][ C1] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 1934.120756][ C1] R13: ffff8880782b3030 R14: ffff888025ccd308 R15: 0000000000000820 [ 1934.128797][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1934.137926][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1934.144570][ C1] CR2: 000000110c26fcf1 CR3: 000000005e304000 CR4: 00000000003506e0 [ 1934.152605][ C1] Call Trace: [ 1934.155935][ C1] [ 1934.158833][ C1] ? _raw_spin_lock+0x40/0x40 [ 1934.163584][ C1] ? kcov_remote_start+0x8f/0x7f0 [ 1934.168684][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1934.174735][ C1] cm109_urb_irq_callback+0x72c/0xc90 [ 1934.180299][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 1934.185765][ C1] dummy_timer+0x8a3/0x31b0 [ 1934.190357][ C1] ? debug_deactivate+0x1d/0x1d0 [ 1934.195399][ C1] ? lock_chain_count+0x20/0x20 [ 1934.200369][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1934.206412][ C1] ? dummy_free_streams+0x530/0x530 [ 1934.211754][ C1] ? debug_object_deactivate+0x67/0x350 [ 1934.217554][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1934.222839][ C1] ? dummy_free_streams+0x530/0x530 [ 1934.228381][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1934.233687][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1934.239839][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1934.245029][ C1] handle_softirqs+0x280/0x820 [ 1934.249858][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1934.254699][ C1] ? do_softirq+0x180/0x180 [ 1934.259888][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1934.265349][ C1] __irq_exit_rcu+0xc7/0x190 [ 1934.270003][ C1] ? irq_exit_rcu+0x20/0x20 [ 1934.274669][ C1] ? rcu_is_watching+0x15/0xb0 [ 1934.279500][ C1] irq_exit_rcu+0x9/0x20 [ 1934.283807][ C1] sysvec_irq_work+0xa1/0xc0 [ 1934.288477][ C1] [ 1934.291463][ C1] [ 1934.294453][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1934.299452][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1934.305321][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 a0 a4 1b 09 e8 7b ae 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1934.325164][ C1] RSP: 0018:ffffc900001c7bb8 EFLAGS: 00000286 [ 1934.331408][ C1] RAX: 76d3e26ab98a2200 RBX: 0000000000000000 RCX: 76d3e26ab98a2200 [ 1934.339446][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 1934.347611][ C1] RBP: ffffc900001c7c10 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 1934.355651][ C1] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: ffff88801ca43c00 [ 1934.363711][ C1] R13: dffffc0000000000 R14: ffff888024a13c00 R15: ffff8880b8f3ccc8 [ 1934.371952][ C1] ? finish_task_switch+0x265/0x920 [ 1934.377228][ C1] __schedule+0x14da/0x44d0 [ 1934.381845][ C1] ? __might_sleep+0xe0/0xe0 [ 1934.386607][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1934.392830][ C1] ? asan.module_dtor+0x20/0x20 [ 1934.397868][ C1] ? run_ksoftirqd+0xa1/0xf0 [ 1934.402612][ C1] ? run_ksoftirqd+0xb5/0xf0 [ 1934.407392][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1934.412651][ C1] ? takeover_tasklets+0x810/0x810 [ 1934.417841][ C1] schedule+0xbd/0x170 [ 1934.421994][ C1] ? takeover_tasklets+0x810/0x810 [ 1934.427393][ C1] smpboot_thread_fn+0x710/0xa00 [ 1934.432522][ C1] ? smpboot_thread_fn+0x50/0xa00 [ 1934.437636][ C1] kthread+0x2fa/0x390 [ 1934.441757][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1934.448348][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1934.453082][ C1] ret_from_fork+0x48/0x80 [ 1934.457558][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1934.462308][ C1] ret_from_fork_asm+0x11/0x20 [ 1934.467523][ C1] [ 1934.470587][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1934.478017][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1934.485545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1934.495752][ C1] Call Trace: [ 1934.499081][ C1] [ 1934.501996][ C1] dump_stack_lvl+0x16c/0x230 [ 1934.506738][ C1] ? show_regs_print_info+0x20/0x20 [ 1934.512002][ C1] ? load_image+0x3b0/0x3b0 [ 1934.512095][T19189] loop2: detected capacity change from 0 to 1024 [ 1934.522992][ C1] panic+0x2c0/0x710 [ 1934.526961][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1934.531516][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1934.536506][ C1] __warn+0x2e0/0x470 [ 1934.540539][ C1] ? usb_submit_urb+0xf35/0x17d0 [ 1934.545510][ C1] ? usb_submit_urb+0xf35/0x17d0 [ 1934.550570][ C1] report_bug+0x2be/0x4f0 [ 1934.554942][ C1] ? usb_submit_urb+0xf35/0x17d0 [ 1934.559904][ C1] ? usb_submit_urb+0xf35/0x17d0 [ 1934.564866][ C1] ? usb_submit_urb+0xf37/0x17d0 [ 1934.569845][ C1] handle_bug+0xcf/0x120 [ 1934.574133][ C1] exc_invalid_op+0x1a/0x50 [ 1934.579046][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1934.584153][ C1] RIP: 0010:usb_submit_urb+0xf35/0x17d0 [ 1934.589874][ C1] Code: 4a 8b 44 89 fa e8 bb ac 17 04 e9 28 fc ff ff e8 81 22 36 fb c6 05 46 b4 e5 07 01 48 c7 c7 c0 d7 4a 8b 48 89 de e8 db 96 00 fb <0f> 0b e9 45 f1 ff ff e8 5f 22 36 fb eb 11 e8 58 22 36 fb bd 80 00 [ 1934.609792][ C1] RSP: 0018:ffffc900001f0868 EFLAGS: 00010046 [ 1934.616612][ C1] RAX: 76d3e26ab98a2200 RBX: ffff888025ccd300 RCX: 0000000000040000 [ 1934.624887][ C1] RDX: ffffc900022c1000 RSI: 0000000000007059 RDI: 000000000000705a [ 1934.633149][ C1] RBP: 000000000000000f R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1934.641359][ C1] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 1934.649380][ C1] R13: ffff8880782b3030 R14: ffff888025ccd308 R15: 0000000000000820 [ 1934.657538][ C1] ? usb_submit_urb+0xf35/0x17d0 [ 1934.662624][ C1] ? _raw_spin_lock+0x40/0x40 [ 1934.667342][ C1] ? kcov_remote_start+0x8f/0x7f0 [ 1934.672403][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1934.677631][ C1] cm109_urb_irq_callback+0x72c/0xc90 [ 1934.683078][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 1934.688664][ C1] dummy_timer+0x8a3/0x31b0 [ 1934.693218][ C1] ? debug_deactivate+0x1d/0x1d0 [ 1934.698267][ C1] ? lock_chain_count+0x20/0x20 [ 1934.703404][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1934.709320][ C1] ? dummy_free_streams+0x530/0x530 [ 1934.714553][ C1] ? debug_object_deactivate+0x67/0x350 [ 1934.720330][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1934.725734][ C1] ? dummy_free_streams+0x530/0x530 [ 1934.731049][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1934.736290][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1934.742931][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1934.748188][ C1] handle_softirqs+0x280/0x820 [ 1934.753183][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1934.758154][ C1] ? do_softirq+0x180/0x180 [ 1934.762683][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1934.767998][ C1] __irq_exit_rcu+0xc7/0x190 [ 1934.772617][ C1] ? irq_exit_rcu+0x20/0x20 [ 1934.777149][ C1] ? rcu_is_watching+0x15/0xb0 [ 1934.781941][ C1] irq_exit_rcu+0x9/0x20 [ 1934.786228][ C1] sysvec_irq_work+0xa1/0xc0 [ 1934.790879][ C1] [ 1934.793833][ C1] [ 1934.796925][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1934.802012][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1934.807889][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 a0 a4 1b 09 e8 7b ae 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1934.827800][ C1] RSP: 0018:ffffc900001c7bb8 EFLAGS: 00000286 [ 1934.833890][ C1] RAX: 76d3e26ab98a2200 RBX: 0000000000000000 RCX: 76d3e26ab98a2200 [ 1934.842066][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 1934.850062][ C1] RBP: ffffc900001c7c10 R08: ffffffff8e4a7fef R09: 1ffffffff1c94ffd [ 1934.858063][ C1] R10: dffffc0000000000 R11: fffffbfff1c94ffe R12: ffff88801ca43c00 [ 1934.866051][ C1] R13: dffffc0000000000 R14: ffff888024a13c00 R15: ffff8880b8f3ccc8 [ 1934.874090][ C1] ? finish_task_switch+0x265/0x920 [ 1934.879331][ C1] __schedule+0x14da/0x44d0 [ 1934.883936][ C1] ? __might_sleep+0xe0/0xe0 [ 1934.888548][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1934.894633][ C1] ? asan.module_dtor+0x20/0x20 [ 1934.899598][ C1] ? run_ksoftirqd+0xa1/0xf0 [ 1934.904224][ C1] ? run_ksoftirqd+0xb5/0xf0 [ 1934.908841][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1934.914064][ C1] ? takeover_tasklets+0x810/0x810 [ 1934.919208][ C1] schedule+0xbd/0x170 [ 1934.923330][ C1] ? takeover_tasklets+0x810/0x810 [ 1934.928562][ C1] smpboot_thread_fn+0x710/0xa00 [ 1934.933650][ C1] ? smpboot_thread_fn+0x50/0xa00 [ 1934.938720][ C1] kthread+0x2fa/0x390 [ 1934.942983][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1934.949443][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1934.954079][ C1] ret_from_fork+0x48/0x80 [ 1934.958528][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1934.963225][ C1] ret_from_fork_asm+0x11/0x20 [ 1934.968109][ C1] [ 1934.971468][ C1] Kernel Offset: disabled [ 1934.976053][ C1] Rebooting in 86400 seconds..