last executing test programs: 11.997110164s ago: executing program 1 (id=615): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) 11.8078226s ago: executing program 1 (id=617): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.849540968s ago: executing program 0 (id=636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r6, 0x0, 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.816245819s ago: executing program 2 (id=637): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) 8.755711181s ago: executing program 1 (id=638): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$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") 8.438860851s ago: executing program 0 (id=639): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7.166800103s ago: executing program 1 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) fstat(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.113895895s ago: executing program 2 (id=643): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f188", 0x31}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3", 0x1e}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.129651517s ago: executing program 3 (id=644): r0 = inotify_init() socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300), 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 6.108143918s ago: executing program 1 (id=645): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000c77392aace8d64f21577fc8294aba14a6f5e298a007d6df6c2e27c63c50092fc7840ea9baa602b40dbc48925ff68db39a69a216c855e721f3f396b090000000000005d160a024834b4da05d01ce91be2b6cded56f7e3391abed1df586991e2b7787a05d3c4b2263ce5d16e64216e189e", @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) dup2(r4, r4) 5.998015752s ago: executing program 2 (id=647): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 5.927076864s ago: executing program 2 (id=648): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.722152241s ago: executing program 4 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.544805216s ago: executing program 3 (id=651): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80), 0x0, 0x48014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300), 0x400) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.763150173s ago: executing program 4 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$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") 3.063732708s ago: executing program 0 (id=653): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) 2.868236746s ago: executing program 4 (id=654): socket$pppoe(0x18, 0x1, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') 2.825480637s ago: executing program 2 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) fstat(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.587721215s ago: executing program 0 (id=656): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.81421779s ago: executing program 2 (id=657): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.81344986s ago: executing program 4 (id=658): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f188", 0x31}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3", 0x1e}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.774749701s ago: executing program 3 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000084c5d574919ce9020948981b"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) unshare(0x26020480) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, &(0x7f00000006c0)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25070000001400018006000100020000000800030000000000bb121db643f8cef5efd9f3ad7a0307ecbdf82ca9bfd405bc550b6e30db218839d76a559bc58b5f74d2ab01b4c409f0eec83b88d1a6856301f4b58eab8c137fb0e13067653cce40797a381d7846805c6f10fd2bbcb0ee0a39f915bd21638744ab9c441bad32ea556b42b45e1730e13554eb8ad7b142269001c8b48b4dde70c8b268b30326726b0a269825b77751c6ad282ff463fc5ab732df9d95e6576d8a012d0bf380379acdff6bf0dcbce6a081a93bc6ff95666bb630"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc11000000167c0500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xc7}], 0x1}, 0x24004000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@broadcast, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x8, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x3}}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) listen(r6, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000a9fd687f3f13d7ea00000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = accept4(r6, 0x0, 0x0, 0x0) write(r9, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x8, 0xb812994c65c6d7a9, 0x10001, 0x4, {{0x20, 0x4, 0x1, 0x3b, 0x80, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, {[@timestamp={0x44, 0x8, 0xa3, 0x0, 0x4, [0xff]}, @lsrr={0x83, 0x1f, 0x55, [@multicast1, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @remote, @private=0xa010101]}, @cipso={0x86, 0x45, 0x2, [{0x7, 0x6, "97434332"}, {0x1, 0x12, "b616a2caf8b282cf366a66760989a1fe"}, {0x6, 0x2}, {0x0, 0xc, "5b4c7b653a89e8a10473"}, {0x1, 0x8, "6d1176e5a1f4"}, {0x2, 0x11, "3959799a4688216d1c9200c8cc7bc2"}]}]}}}}}) 1.549202709s ago: executing program 3 (id=660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.487729591s ago: executing program 0 (id=661): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 1.372826424s ago: executing program 0 (id=662): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r0, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3}) 1.363972545s ago: executing program 3 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) fstat(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.282349ms ago: executing program 3 (id=664): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 180.434264ms ago: executing program 1 (id=665): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$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") 43.056188ms ago: executing program 4 (id=666): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) 0s ago: executing program 4 (id=667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x5, 0x7d, 0x8001, 0x0, 0xfffffff8, 0x10}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0xfffffffd}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): h2 [ 62.252447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.263717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.273787][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.281299][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.300654][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.325208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.334122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.343660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.353273][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.360421][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.369646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.378541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.430219][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.446901][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.456729][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.466768][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.475845][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.485626][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.495311][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.504089][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.512674][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.525429][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.534489][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.559652][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.569170][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.591440][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.609285][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.673332][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.680310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.690649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.722924][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.733536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.744834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.754156][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.761340][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.797465][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.805459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.820549][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.845212][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.855021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.867603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.877962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.887926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.897529][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.904739][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.916529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.926180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.935679][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.942774][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.966127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.974564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.998294][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.014140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.023877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.032131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.039578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.047469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.055862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.064234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.073988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.082546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.089951][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.107172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.116381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.126589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.143079][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.162449][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.173522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.184558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.194402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.206740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.216506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.225994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.265205][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.285616][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.299608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.310741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.320468][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.327606][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.340302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.352339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.362015][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.369162][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.377166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.386293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.395326][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.402455][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.410217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.420023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.428766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.437483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.446390][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.453527][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.462421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.471066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.479572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.489441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.499978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.508581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.517257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.528347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.536907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.545600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.554154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.562602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.604410][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.614813][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.627089][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.644691][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.658838][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.670373][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.679694][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.681146][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 63.689468][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.703497][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.711464][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 63.717644][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 63.719479][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.731285][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 63.749160][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.761201][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 63.763887][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.782549][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.798010][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.806759][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.815774][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.848151][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.865449][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.879062][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.888346][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.897500][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.906351][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.915625][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.925245][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.934165][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.942371][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.956116][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.972706][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.002013][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.020519][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.084008][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.107567][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.136942][ T4189] device veth0_vlan entered promiscuous mode [ 64.147946][ T4184] device veth0_vlan entered promiscuous mode [ 64.156686][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.178922][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.194839][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.203870][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.231738][ T4189] device veth1_vlan entered promiscuous mode [ 64.242775][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.253253][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.263215][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.272004][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.279985][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.288662][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.299925][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.318272][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.329135][ T4184] device veth1_vlan entered promiscuous mode [ 64.345704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.354630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.362597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.393491][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.416359][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.424891][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.435155][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.443200][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.451893][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.460700][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.470946][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.479599][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.506216][ T4189] device veth0_macvtap entered promiscuous mode [ 64.525260][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.537503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.546085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.555667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.564775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.574147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.583546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.591844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.601735][ T4184] device veth0_macvtap entered promiscuous mode [ 64.611855][ T4189] device veth1_macvtap entered promiscuous mode [ 64.644409][ T4199] device veth0_vlan entered promiscuous mode [ 64.667397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.675741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.685187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.694349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.714040][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.730019][ T4199] device veth1_vlan entered promiscuous mode [ 64.741246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.751599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.762021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.770636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.779932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.789129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.798101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.806961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.817936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.826485][ T4184] device veth1_macvtap entered promiscuous mode [ 64.843361][ T4185] device veth0_vlan entered promiscuous mode [ 64.853523][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.869426][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.877990][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.887738][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.897428][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.916197][ T4185] device veth1_vlan entered promiscuous mode [ 64.927984][ T4191] device veth0_vlan entered promiscuous mode [ 64.943779][ T4191] device veth1_vlan entered promiscuous mode [ 64.957957][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.969883][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.978942][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.988287][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.005820][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.014001][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.023545][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.032554][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.044655][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.052703][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.080955][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.089577][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.106198][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.117217][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130586][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.150326][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.162075][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.174686][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.184467][ T4199] device veth0_macvtap entered promiscuous mode [ 65.211855][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.220166][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.229266][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.240377][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.249047][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.257646][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.266544][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.275682][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.284642][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.302140][ T4185] device veth0_macvtap entered promiscuous mode [ 65.314939][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.324603][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.333711][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.342712][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353587][ T4191] device veth0_macvtap entered promiscuous mode [ 65.371743][ T4185] device veth1_macvtap entered promiscuous mode [ 65.379678][ T4199] device veth1_macvtap entered promiscuous mode [ 65.405393][ T4191] device veth1_macvtap entered promiscuous mode [ 65.483874][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.508519][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.518781][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.530359][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.542481][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.549783][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.559237][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.567356][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.575700][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.584740][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.593024][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.603878][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.616657][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.628219][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.638178][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.648960][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.658809][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.669421][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.682735][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.690611][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.701868][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.712063][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.722794][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.733083][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.743802][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.754224][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.761623][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 65.765682][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.776574][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 65.782573][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.786822][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 65.797293][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.815915][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 65.818443][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833296][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.841606][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 65.844572][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861379][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.878793][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.889317][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.901377][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.911879][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.922295][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.933010][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.945041][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.952972][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.962699][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.971903][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.980348][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.989642][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.998661][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.007672][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.016589][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.027238][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.038155][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.049381][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.060187][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.070518][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.082869][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.092853][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.103317][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.114848][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.126223][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135670][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144769][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153651][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.180285][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.190300][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.201257][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.210065][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.219122][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.228738][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.241846][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.250587][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.259921][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.268681][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292236][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.305414][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.340467][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.349033][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.352814][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.364770][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.474040][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.486143][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.504663][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.519883][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.531458][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.568014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.597188][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.606420][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.614574][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.634336][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.670348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.681521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.720037][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.747924][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.761016][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.781643][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.794610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.802344][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.815080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.836454][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.849913][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.863029][ T4269] tipc: Started in network mode [ 66.877822][ T4269] tipc: Node identity 061c1630ba0a, cluster identity 4711 [ 66.883432][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.886995][ T4269] tipc: Enabled bearer , priority 0 [ 66.915500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.932555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.950983][ T4273] device syzkaller0 entered promiscuous mode [ 67.037633][ T4269] tipc: Resetting bearer [ 67.066360][ T4268] tipc: Resetting bearer [ 67.129736][ T4268] tipc: Disabling bearer [ 67.134839][ T4275] mmap: syz.4.5 (4275) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 67.215315][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 67.438363][ T4286] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 67.445108][ T4281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.501013][ T4281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.516439][ T4281] device gretap1 entered promiscuous mode [ 67.651970][ T4226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.747346][ T4298] tipc: Enabling of bearer rejected, failed to enable media [ 67.842424][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.848903][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 67.857990][ T4296] device syzkaller0 entered promiscuous mode [ 67.868338][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.899725][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 67.921475][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 67.932198][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 68.001617][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.185733][ T4304] device syzkaller0 entered promiscuous mode [ 68.211314][ T4226] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 68.272542][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.291062][ T4226] usb 4-1: Product: syz [ 68.295502][ T4226] usb 4-1: Manufacturer: syz [ 68.301110][ T4226] usb 4-1: SerialNumber: syz [ 68.389396][ T4226] usb 4-1: config 0 descriptor?? [ 68.446151][ T4226] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 68.580905][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.700958][ T4226] pwc: send_video_command error -71 [ 68.706345][ T4226] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 68.732454][ T4226] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 68.779376][ T4226] usb 4-1: USB disconnect, device number 2 [ 68.846875][ T4309] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 68.851156][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 68.940306][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 68.971701][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.994656][ T4311] Zero length message leads to an empty skb [ 69.001382][ T4309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.022708][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 69.161192][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 69.179085][ T4314] ODEBUG: Out of memory. ODEBUG disabled [ 69.220063][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.296071][ T4227] usb 1-1: Product: syz [ 69.320670][ T4227] usb 1-1: Manufacturer: syz [ 69.340947][ T4227] usb 1-1: SerialNumber: syz [ 69.391913][ T4227] usb 1-1: config 0 descriptor?? [ 69.778656][ T4226] usb 1-1: USB disconnect, device number 2 [ 69.806097][ T4324] tipc: Started in network mode [ 69.821003][ T4324] tipc: Node identity ea50e9bb775d, cluster identity 4711 [ 69.841157][ T4324] tipc: Enabled bearer , priority 0 [ 69.855270][ T4324] device syzkaller0 entered promiscuous mode [ 69.890705][ T4324] tipc: Resetting bearer [ 69.954757][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.985335][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14'. [ 70.021313][ T4322] tipc: Resetting bearer [ 70.057415][ T4322] tipc: Disabling bearer [ 70.387151][ T4340] device syzkaller0 entered promiscuous mode [ 70.618947][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.636991][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.650077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.659147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.686746][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.846744][ T4227] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.051139][ T4359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 71.221204][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 71.242945][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.351007][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 71.381291][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.431321][ T1107] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 71.444259][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454599][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.511257][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 71.575562][ T4361] tipc: Started in network mode [ 71.586875][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.600108][ T4361] tipc: Node identity 6adabf4645de, cluster identity 4711 [ 71.658492][ T4361] tipc: Enabled bearer , priority 0 [ 71.741436][ T4361] device syzkaller0 entered promiscuous mode [ 71.791031][ T4227] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 71.859287][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.903921][ T4227] usb 2-1: Product: syz [ 71.925475][ T4227] usb 2-1: Manufacturer: syz [ 71.934429][ T4362] tipc: Resetting bearer [ 71.973413][ T4227] usb 2-1: SerialNumber: syz [ 71.973540][ T4360] tipc: Resetting bearer [ 72.033421][ T4227] usb 2-1: config 0 descriptor?? [ 72.060997][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.071392][ T4360] tipc: Disabling bearer [ 72.084644][ T4227] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 72.151009][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 72.167511][ T1107] usb 5-1: can't read configurations, error -71 [ 72.629406][ T4367] loop5: detected capacity change from 0 to 7 [ 72.677248][ T4272] Dev loop5: unable to read RDB block 7 [ 72.692581][ T4272] loop5: AHDI p1 p2 p3 [ 72.772387][ T4272] loop5: partition table partially beyond EOD, truncated [ 72.872485][ T4272] loop5: p1 start 1818582900 is beyond EOD, truncated [ 72.899975][ T4272] loop5: p3 start 335544320 is beyond EOD, truncated [ 72.949214][ T4367] Dev loop5: unable to read RDB block 7 [ 72.965628][ T4367] loop5: AHDI p1 p2 p3 [ 72.978619][ T4367] loop5: partition table partially beyond EOD, truncated [ 73.015556][ T4367] loop5: p1 start 1818582900 is beyond EOD, truncated [ 73.084735][ T4367] loop5: p3 start 335544320 is beyond EOD, truncated [ 73.107495][ T4369] device syzkaller0 entered promiscuous mode [ 73.255067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.490882][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.500880][ T4375] device syzkaller0 entered promiscuous mode [ 73.620016][ T4377] device syzkaller0 entered promiscuous mode [ 73.901662][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.926024][ T4266] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.079401][ T2351] usb 2-1: USB disconnect, device number 2 [ 74.171547][ T4266] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 74.194748][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.210930][ T4266] usb 4-1: Product: syz [ 74.221932][ T4266] usb 4-1: Manufacturer: syz [ 74.233883][ T4266] usb 4-1: SerialNumber: syz [ 74.258354][ T4266] usb 4-1: config 0 descriptor?? [ 74.381267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 74.500862][ T2351] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.538700][ T4266] usb 4-1: USB disconnect, device number 3 [ 74.740921][ T2351] usb 2-1: Using ep0 maxpacket: 16 [ 74.801448][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.860972][ T2351] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.872972][ T2351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.031088][ T2351] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 75.041715][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 75.051102][ T2351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.069230][ T2351] usb 2-1: Product: syz [ 75.081146][ T2351] usb 2-1: Manufacturer: syz [ 75.085916][ T2351] usb 2-1: SerialNumber: syz [ 75.127519][ T2351] usb 2-1: config 0 descriptor?? [ 75.150431][ T4395] fuse: Unknown parameter 'grou00000000000000000000' [ 75.161436][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.173475][ T4230] usb 5-1: config 0 has no interfaces? [ 75.331172][ T4230] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.340593][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.348809][ T4230] usb 5-1: Product: syz [ 75.353368][ T4230] usb 5-1: Manufacturer: syz [ 75.358002][ T4230] usb 5-1: SerialNumber: syz [ 75.374387][ T4230] usb 5-1: config 0 descriptor?? [ 75.410052][ T2351] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 75.452486][ T4266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.637578][ T4391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 75.648194][ T4391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 75.671328][ T4391] device team0 entered promiscuous mode [ 75.676924][ T4391] device team_slave_0 entered promiscuous mode [ 75.698917][ T4391] device team_slave_1 entered promiscuous mode [ 75.710214][ T4391] device bond0 entered promiscuous mode [ 75.717235][ T4391] device bond_slave_0 entered promiscuous mode [ 75.729565][ T4391] device bond_slave_1 entered promiscuous mode [ 75.730846][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 75.736221][ T2351] rc_core: IR keymap rc-imon-pad not found [ 75.753339][ T2351] Registered IR keymap rc-empty [ 75.760204][ T2351] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 75.776588][ T2351] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 75.788669][ T4391] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 75.802716][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 75.883700][ T4230] usb 5-1: USB disconnect, device number 4 [ 75.891523][ T4266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.981016][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.060942][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 76.070982][ T4266] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 76.071161][ T2351] imon:send_packet: packet tx failed (-71) [ 76.082580][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.113077][ T4266] usb 1-1: Product: syz [ 76.120966][ T2351] imon 2-1:0.0: remote input dev register failed [ 76.125843][ T4266] usb 1-1: Manufacturer: syz [ 76.136737][ T2351] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 76.139729][ T4266] usb 1-1: SerialNumber: syz [ 76.164593][ T4266] usb 1-1: config 0 descriptor?? [ 76.230024][ T2351] imon 2-1:0.0: unable to initialize intf0, err 0 [ 76.241355][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 76.245762][ T2351] imon:imon_probe: failed to initialize context! [ 76.253535][ T2351] imon 2-1:0.0: unable to register, err -19 [ 76.298946][ T2351] usb 2-1: USB disconnect, device number 3 [ 76.381035][ T4226] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.581265][ T4226] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 76.596733][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.621050][ T4226] usb 3-1: Product: syz [ 76.636290][ T4226] usb 3-1: Manufacturer: syz [ 76.646412][ T4226] usb 3-1: SerialNumber: syz [ 76.657555][ T23] usb 1-1: USB disconnect, device number 3 [ 76.677029][ T4226] usb 3-1: config 0 descriptor?? [ 76.941386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.950850][ T4226] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 77.092247][ T4230] usb 3-1: USB disconnect, device number 2 [ 77.391001][ T4226] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 77.402713][ T4226] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 77.436993][ T4226] usb 2-1: config 8 has no interface number 0 [ 77.454736][ T4226] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.494637][ T4226] usb 2-1: config 8 interface 177 has no altsetting 0 [ 77.523264][ T4226] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 77.581824][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.693104][ T4226] ir_toy 2-1:8.177: required endpoints not found [ 77.863150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.067917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.170242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.477326][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.477593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.885573][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 79.260930][ T4230] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 80.070937][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.161025][ T4230] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 80.168654][ T4230] usb 5-1: can't read configurations, error -71 [ 80.179928][ T4227] usb 2-1: USB disconnect, device number 4 [ 80.760856][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.760919][ T4227] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 81.000886][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 81.121430][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.171021][ T4232] usb 4-1: config 0 has no interfaces? [ 81.290942][ T4227] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 81.320925][ T4227] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 81.341068][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 81.357021][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.380871][ T4232] usb 4-1: Product: syz [ 81.395485][ T4232] usb 4-1: Manufacturer: syz [ 81.408893][ T4232] usb 4-1: SerialNumber: syz [ 81.433524][ T4232] usb 4-1: config 0 descriptor?? [ 81.510427][ T4227] usb 2-1: config 8 has no interface number 0 [ 81.550882][ T4227] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.614120][ T4227] usb 2-1: config 8 interface 177 has no altsetting 0 [ 81.646796][ T4227] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 81.683138][ T1110] cfg80211: failed to load regulatory.db [ 81.720661][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.721092][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 81.795976][ T4457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 81.842662][ T4227] ir_toy 2-1:8.177: required endpoints not found [ 81.927957][ T4457] device bond0 entered promiscuous mode [ 81.972294][ T4457] device bond_slave_0 entered promiscuous mode [ 82.029900][ T4457] device bond_slave_1 entered promiscuous mode [ 82.111026][ T4457] device bond0 left promiscuous mode [ 82.140956][ T4457] device bond_slave_0 left promiscuous mode [ 82.167709][ T4457] device bond_slave_1 left promiscuous mode [ 82.350992][ T4232] usb 4-1: USB disconnect, device number 4 [ 83.038456][ T4514] loop5: detected capacity change from 0 to 7 [ 83.103458][ T4272] Dev loop5: unable to read RDB block 7 [ 83.139253][ T4272] loop5: AHDI p1 p2 p3 [ 83.150985][ T4227] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.160296][ T4272] loop5: partition table partially beyond EOD, truncated [ 83.204272][ T4272] loop5: p1 start 1818582900 is beyond EOD, truncated [ 83.235079][ T4272] loop5: p3 start 335544320 is beyond EOD, truncated [ 83.272851][ T4514] Dev loop5: unable to read RDB block 7 [ 83.279865][ T4514] loop5: AHDI p1 p2 p3 [ 83.291515][ T4514] loop5: partition table partially beyond EOD, truncated [ 83.324924][ T4514] loop5: p1 start 1818582900 is beyond EOD, truncated [ 83.397066][ T4514] loop5: p3 start 335544320 is beyond EOD, truncated [ 83.461139][ T4226] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 83.551309][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.590897][ T4227] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.855385][ T4519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 83.891334][ T4227] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 83.915423][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.960858][ T4227] usb 5-1: Product: syz [ 83.971187][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 83.986400][ T4227] usb 5-1: Manufacturer: syz [ 84.017171][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 84.027242][ T4227] usb 5-1: SerialNumber: syz [ 84.062278][ T4227] usb 5-1: config 0 descriptor?? [ 84.180845][ T4232] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 84.249356][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 84.278099][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 84.349439][ T4227] usb 2-1: USB disconnect, device number 5 [ 84.402091][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 84.420604][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 84.436262][ T4266] usb 5-1: USB disconnect, device number 7 [ 84.611137][ T4226] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 84.648752][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.671075][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.693985][ T4226] usb 3-1: Product: syz [ 84.702252][ T4226] usb 3-1: Manufacturer: syz [ 84.707269][ T4226] usb 3-1: SerialNumber: syz [ 84.738018][ T4226] usb 3-1: config 0 descriptor?? [ 84.740908][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 84.769987][ T4232] usb 4-1: can't read configurations, error -71 [ 84.805046][ T4226] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 85.025084][ T4528] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.534009][ T4547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'. [ 85.548005][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.69'. [ 85.572259][ T4547] device gretap1 entered promiscuous mode [ 85.893865][ T4549] loop5: detected capacity change from 0 to 7 [ 85.906493][ T4549] Dev loop5: unable to read RDB block 7 [ 85.912453][ T4549] loop5: AHDI p1 p2 p3 [ 85.916785][ T4549] loop5: partition table partially beyond EOD, truncated [ 85.925245][ T4549] loop5: p1 start 1818582900 is beyond EOD, truncated [ 85.933791][ T4549] loop5: p3 start 335544320 is beyond EOD, truncated [ 86.360969][ T4226] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 86.377605][ T4230] usb 3-1: USB disconnect, device number 3 [ 86.390510][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 86.731120][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 86.760055][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 86.890943][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 86.939366][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 86.977736][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 87.061016][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 87.086943][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 87.272016][ T4226] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 87.291487][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.330923][ T4226] usb 2-1: Product: syz [ 87.366266][ T4226] usb 2-1: Manufacturer: syz [ 87.388578][ T4226] usb 2-1: SerialNumber: syz [ 87.431954][ T4226] usb 2-1: config 0 descriptor?? [ 87.472935][ T4226] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 88.713444][ T4618] loop0: detected capacity change from 0 to 64 [ 88.821168][ T4618] hfs: get root inode failed [ 89.149117][ T4637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 89.173083][ T4637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.86'. [ 89.193476][ T4637] device gretap1 entered promiscuous mode [ 89.736803][ T4232] usb 2-1: USB disconnect, device number 6 [ 89.770960][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.020856][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 90.141599][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.321501][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 90.331448][ T4232] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 90.347243][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.371290][ T4227] usb 1-1: Product: syz [ 90.378891][ T4227] usb 1-1: Manufacturer: syz [ 90.392833][ T4227] usb 1-1: SerialNumber: syz [ 90.425060][ T4227] usb 1-1: config 0 descriptor?? [ 90.741036][ T4232] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 90.762215][ T4232] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 90.807450][ T4232] usb 2-1: config 8 has no interface number 0 [ 90.904686][ T4232] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.055596][ T4232] usb 2-1: config 8 interface 177 has no altsetting 0 [ 91.106458][ T4232] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 91.190958][ T4227] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 91.218345][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.293794][ T4232] ir_toy 2-1:8.177: required endpoints not found [ 91.561305][ T4227] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 91.579942][ T4227] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 91.605463][ T4227] usb 5-1: config 8 has no interface number 0 [ 91.612209][ T4266] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.624864][ T4227] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.643675][ T4227] usb 5-1: config 8 interface 177 has no altsetting 0 [ 91.651858][ T4227] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 91.664051][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.715045][ T4227] ir_toy 5-1:8.177: required endpoints not found [ 91.870977][ T4266] usb 3-1: Using ep0 maxpacket: 16 [ 91.991123][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.161333][ T4266] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 92.175863][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.200949][ T4266] usb 3-1: Product: syz [ 92.214707][ T4266] usb 3-1: Manufacturer: syz [ 92.234169][ T4266] usb 3-1: SerialNumber: syz [ 92.256032][ T4266] usb 3-1: config 0 descriptor?? [ 92.451902][ T4230] usb 1-1: USB disconnect, device number 4 [ 92.756502][ T4226] usb 3-1: USB disconnect, device number 4 [ 92.799377][ T4677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 93.156012][ T4226] usb 5-1: USB disconnect, device number 8 [ 94.652012][ T4688] loop0: detected capacity change from 0 to 64 [ 94.695153][ T4688] hfs: get root inode failed [ 94.731149][ T4266] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 94.943390][ T1110] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 95.018958][ T1107] usb 2-1: USB disconnect, device number 7 [ 95.250978][ T4266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.271319][ T4226] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.311201][ T4266] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.318831][ T4266] usb 4-1: can't read configurations, error -71 [ 95.331050][ T1110] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 95.339476][ T1110] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 95.355874][ T1110] usb 3-1: config 8 has no interface number 0 [ 95.362625][ T1110] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.380866][ T1110] usb 3-1: config 8 interface 177 has no altsetting 0 [ 95.387719][ T1110] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 95.397120][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.444487][ T1110] ir_toy 3-1:8.177: required endpoints not found [ 95.541048][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.570915][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.661227][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.675029][ T4226] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.791010][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 95.841202][ T4226] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 95.851774][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.859810][ T4226] usb 1-1: Product: syz [ 95.864530][ T4226] usb 1-1: Manufacturer: syz [ 95.869157][ T4226] usb 1-1: SerialNumber: syz [ 95.877966][ T4226] usb 1-1: config 0 descriptor?? [ 95.921424][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.951037][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.962238][ T1107] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.121100][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 96.134272][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.143179][ T7] usb 5-1: Product: syz [ 96.147514][ T7] usb 5-1: Manufacturer: syz [ 96.152804][ T7] usb 5-1: SerialNumber: syz [ 96.159383][ T21] usb 1-1: USB disconnect, device number 5 [ 96.163677][ T7] usb 5-1: config 0 descriptor?? [ 96.171437][ T1107] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 96.182556][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.195669][ T1107] usb 2-1: Product: syz [ 96.199913][ T1107] usb 2-1: Manufacturer: syz [ 96.205438][ T1107] usb 2-1: SerialNumber: syz [ 96.214695][ T1107] usb 2-1: config 0 descriptor?? [ 96.471102][ T4266] usb 2-1: USB disconnect, device number 8 [ 96.694543][ T4266] usb 3-1: USB disconnect, device number 5 [ 97.085167][ T4713] loop0: detected capacity change from 0 to 64 [ 97.824712][ T4713] hfs: get root inode failed [ 98.198309][ T7] usb 5-1: USB disconnect, device number 9 [ 98.279023][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 98.325768][ T4729] tipc: Started in network mode [ 98.349093][ T4729] tipc: Node identity 7af76e2c7f36, cluster identity 4711 [ 98.383403][ T4729] tipc: Enabled bearer , priority 0 [ 98.425316][ T4729] tipc: Resetting bearer [ 98.447820][ T4728] tipc: Disabling bearer [ 98.802002][ T4738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.113'. [ 98.850896][ T4266] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 99.175198][ T4755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 99.291209][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.303486][ T4266] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.501081][ T4266] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 99.525450][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.555643][ T4266] usb 5-1: Product: syz [ 99.565817][ T4266] usb 5-1: Manufacturer: syz [ 99.578974][ T4266] usb 5-1: SerialNumber: syz [ 99.604970][ T4266] usb 5-1: config 0 descriptor?? [ 99.870829][ T4266] usb 5-1: USB disconnect, device number 10 [ 100.161358][ T1110] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 100.531229][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.549458][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.570864][ T1110] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 100.589848][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.613239][ T1110] usb 1-1: config 0 descriptor?? [ 100.956763][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 101.105549][ T1110] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 101.113457][ T1110] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 101.120362][ T1110] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 101.127514][ T1110] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 101.134619][ T1110] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 101.155768][ T1110] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 101.179364][ T1110] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 101.405686][ T1110] usb 1-1: USB disconnect, device number 6 [ 102.853576][ T4838] fuse: Bad value for 'fd' [ 103.062378][ T4846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 103.071497][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.350988][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 103.481106][ T1107] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.549048][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.603027][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.713792][ T4872] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 103.761071][ T1107] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 103.771393][ T4865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 103.801111][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.837017][ T4865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.145'. [ 103.899692][ T1107] usb 4-1: Product: syz [ 103.910389][ T1107] usb 4-1: Manufacturer: syz [ 103.926261][ T1107] usb 4-1: SerialNumber: syz [ 103.959437][ T1107] usb 4-1: config 0 descriptor?? [ 104.245706][ T1107] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 104.771036][ T4266] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.790905][ T1107] rc_core: IR keymap rc-imon-pad not found [ 104.800173][ T1107] Registered IR keymap rc-empty [ 104.806817][ T1107] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 104.826351][ T1107] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.890854][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 104.898112][ T1107] imon:send_packet: packet tx failed (-71) [ 104.920917][ T1107] imon 4-1:0.0: remote input dev register failed [ 104.928670][ T1107] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 104.982292][ T1107] imon 4-1:0.0: unable to initialize intf0, err 0 [ 105.005391][ T1107] imon:imon_probe: failed to initialize context! [ 105.020089][ T1107] imon 4-1:0.0: unable to register, err -19 [ 105.026669][ T4266] usb 5-1: Using ep0 maxpacket: 8 [ 105.038780][ T1107] usb 4-1: USB disconnect, device number 9 [ 105.151041][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.165179][ T4266] usb 5-1: config 0 has no interfaces? [ 105.341208][ T4266] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.355388][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.385188][ T4266] usb 5-1: Product: syz [ 105.413384][ T4266] usb 5-1: Manufacturer: syz [ 105.425097][ T4266] usb 5-1: SerialNumber: syz [ 105.444811][ T4266] usb 5-1: config 0 descriptor?? [ 105.739009][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'. [ 105.818687][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'. [ 105.964599][ T4230] usb 5-1: USB disconnect, device number 11 [ 106.561674][ T4925] tipc: Enabled bearer , priority 0 [ 106.600465][ T4925] tipc: Resetting bearer [ 106.612924][ T4924] tipc: Disabling bearer [ 107.040953][ T4266] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.281258][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 107.411159][ T4266] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.434799][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.661437][ T4266] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 107.677650][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.697191][ T4266] usb 1-1: Product: syz [ 107.707318][ T4266] usb 1-1: Manufacturer: syz [ 107.717490][ T4266] usb 1-1: SerialNumber: syz [ 107.725932][ T4942] loop2: detected capacity change from 0 to 32768 [ 107.741760][ T4266] usb 1-1: config 0 descriptor?? [ 107.812405][ T4942] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.164 (4942) [ 107.917044][ T4942] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 108.008321][ T4942] BTRFS info (device loop2): enabling auto defrag [ 108.013655][ T4266] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 108.046759][ T4942] BTRFS info (device loop2): force clearing of disk cache [ 108.078016][ T4942] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 108.128347][ T4942] BTRFS error (device loop2): open_ctree failed: -22 [ 108.318452][ T4962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 109.262999][ T4266] rc_core: IR keymap rc-imon-pad not found [ 109.268957][ T4266] Registered IR keymap rc-empty [ 109.429770][ T4266] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 109.440318][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 109.453690][ T4266] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 109.481796][ T4266] imon:send_packet: packet tx failed (-71) [ 109.529703][ T4266] imon 1-1:0.0: remote input dev register failed [ 109.582121][ T4266] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 109.636890][ T4266] imon 1-1:0.0: unable to initialize intf0, err 0 [ 109.649323][ T4266] imon:imon_probe: failed to initialize context! [ 109.665990][ T4266] imon 1-1:0.0: unable to register, err -19 [ 109.686287][ T4266] usb 1-1: USB disconnect, device number 7 [ 109.860831][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.566084][ T4979] tipc: Enabled bearer , priority 0 [ 110.601428][ T4979] tipc: Resetting bearer [ 110.614287][ T4978] tipc: Disabling bearer [ 110.980949][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.058891][ T4227] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.261068][ T4227] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 111.314453][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.356734][ T4227] usb 4-1: Product: syz [ 111.387402][ T4996] loop0: detected capacity change from 0 to 1024 [ 111.421368][ T4227] usb 4-1: Manufacturer: syz [ 111.426057][ T4227] usb 4-1: SerialNumber: syz [ 111.440059][ T4996] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 111.493326][ T4227] usb 4-1: config 0 descriptor?? [ 111.556570][ T4996] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 111.575523][ T4996] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 111.592677][ T4996] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.609294][ T4996] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.175: Inode bitmap for bg 0 marked uninitialized [ 111.636267][ T4996] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 111.791936][ T7] usb 4-1: USB disconnect, device number 10 [ 112.307491][ T5005] loop2: detected capacity change from 0 to 64 [ 113.010004][ T5005] hfs: get root inode failed [ 113.137895][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 114.544117][ T5012] loop2: detected capacity change from 0 to 32768 [ 114.626388][ T5012] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.183 (5012) [ 114.835319][ T5012] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 114.912167][ T5012] BTRFS info (device loop2): enabling auto defrag [ 114.952635][ T5012] BTRFS info (device loop2): force clearing of disk cache [ 114.984900][ T5012] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 115.070069][ T5012] BTRFS error (device loop2): open_ctree failed: -22 [ 116.877378][ T5048] loop0: detected capacity change from 0 to 64 [ 116.960963][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.692762][ T5048] hfs: get root inode failed [ 117.822255][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.979426][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.300970][ T7] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 118.310071][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.341311][ T5053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 118.384657][ T7] usb 5-1: Product: syz [ 118.397816][ T7] usb 5-1: Manufacturer: syz [ 118.407934][ T7] usb 5-1: SerialNumber: syz [ 118.447877][ T7] usb 5-1: config 0 descriptor?? [ 118.707828][ T1110] usb 5-1: USB disconnect, device number 12 [ 118.825862][ T5065] tipc: Enabled bearer , priority 0 [ 118.864783][ T5065] tipc: Resetting bearer [ 118.902242][ T5063] tipc: Disabling bearer [ 119.030176][ T5067] device syzkaller0 entered promiscuous mode [ 119.071907][ T5069] loop3: detected capacity change from 0 to 64 [ 120.647410][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 121.077073][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 121.520910][ T4230] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 121.693275][ T5113] loop3: detected capacity change from 0 to 64 [ 121.852112][ T5109] device syzkaller0 entered promiscuous mode [ 122.078129][ T5116] loop0: detected capacity change from 0 to 64 [ 123.170769][ C1] sched: RT throttling activated [ 123.173310][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.189397][ T4230] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.290266][ T5116] hfs: get root inode failed [ 123.530996][ T4230] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 123.576252][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.678071][ T4230] usb 5-1: Product: syz [ 123.687080][ T4230] usb 5-1: Manufacturer: syz [ 123.691792][ T4230] usb 5-1: SerialNumber: syz [ 123.712277][ T4230] usb 5-1: config 0 descriptor?? [ 123.888194][ T5101] loop1: detected capacity change from 0 to 32768 [ 123.933628][ T5101] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.207 (5101) [ 124.017025][ T5101] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 124.046891][ T4230] usb 5-1: USB disconnect, device number 13 [ 124.081422][ T5101] BTRFS info (device loop1): enabling auto defrag [ 124.111012][ T5101] BTRFS info (device loop1): force clearing of disk cache [ 124.134692][ T5101] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 124.169058][ T5101] BTRFS error (device loop1): open_ctree failed: -22 [ 125.361404][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 126.055593][ T5164] loop1: detected capacity change from 0 to 64 [ 127.565332][ T5170] device syzkaller0 entered promiscuous mode [ 128.383313][ T5177] loop1: detected capacity change from 0 to 64 [ 130.130928][ T4230] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.400924][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 130.521128][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.547468][ T4230] usb 5-1: config 0 has no interfaces? [ 130.690541][ T5202] loop1: detected capacity change from 0 to 64 [ 130.751275][ T4230] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.798759][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.925419][ T4230] usb 5-1: Product: syz [ 130.929775][ T4230] usb 5-1: Manufacturer: syz [ 130.934991][ T4230] usb 5-1: SerialNumber: syz [ 130.977601][ T4230] usb 5-1: config 0 descriptor?? [ 131.452200][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 131.531361][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 131.602624][ T5212] loop1: detected capacity change from 0 to 64 [ 131.645840][ T2351] usb 5-1: USB disconnect, device number 14 [ 132.900353][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907497][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.673683][ T5244] loop1: detected capacity change from 0 to 1024 [ 134.943627][ T5244] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 134.953280][ T5244] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 134.974664][ T5244] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 134.983322][ T5244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.991072][ T5244] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.244: Inode bitmap for bg 0 marked uninitialized [ 135.004683][ T5244] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 135.269898][ T5225] loop2: detected capacity change from 0 to 32768 [ 135.392019][ T5225] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.243 (5225) [ 135.525189][ T5225] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 135.601254][ T5225] BTRFS info (device loop2): enabling auto defrag [ 135.625830][ T5225] BTRFS info (device loop2): force clearing of disk cache [ 135.667159][ T5258] tipc: Enabling of bearer rejected, failed to enable media [ 135.680822][ T5225] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 135.726677][ T5225] BTRFS error (device loop2): open_ctree failed: -22 [ 137.151539][ T5284] tipc: Enabled bearer , priority 0 [ 137.860627][ T5291] loop1: detected capacity change from 0 to 64 [ 137.998977][ T5291] hfs: get root inode failed [ 138.606148][ T5284] tipc: Resetting bearer [ 138.900155][ T5276] tipc: Disabling bearer [ 138.926221][ T2351] tipc: Node number set to 3155564080 [ 140.860955][ T5317] loop0: detected capacity change from 0 to 1024 [ 140.904885][ T5317] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 140.926890][ T5317] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 140.999765][ T5317] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 141.008958][ T5317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.016034][ T5317] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.257: Inode bitmap for bg 0 marked uninitialized [ 141.029647][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 142.882011][ T5339] loop2: detected capacity change from 0 to 64 [ 144.067485][ T5343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.265'. [ 144.340530][ T5347] device syzkaller0 entered promiscuous mode [ 144.814719][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 144.824189][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'. [ 144.834651][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 144.843623][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'. [ 145.936091][ T5371] loop3: detected capacity change from 0 to 1024 [ 147.229935][ T5371] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 147.240499][ T5371] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 147.382027][ T5371] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.392994][ T5371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.415209][ T5380] loop2: detected capacity change from 0 to 64 [ 147.419747][ T5371] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.270: Inode bitmap for bg 0 marked uninitialized [ 147.462524][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 149.110906][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.402101][ T5395] loop2: detected capacity change from 0 to 64 [ 149.540894][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 150.193346][ T5395] hfs: get root inode failed [ 150.202129][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.273355][ T4230] usb 4-1: config 0 has no interfaces? [ 150.444968][ T5387] loop1: detected capacity change from 0 to 32768 [ 150.511011][ T4230] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.528082][ T5387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.275 (5387) [ 150.600403][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.629766][ T4230] usb 4-1: Product: syz [ 150.650602][ T4230] usb 4-1: Manufacturer: syz [ 150.676879][ T4230] usb 4-1: SerialNumber: syz [ 150.703904][ T4230] usb 4-1: config 0 descriptor?? [ 150.715694][ T5387] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.807002][ T5387] BTRFS info (device loop1): enabling auto defrag [ 150.837237][ T4230] usb 4-1: USB disconnect, device number 11 [ 150.846869][ T5387] BTRFS info (device loop1): force clearing of disk cache [ 150.915467][ T5387] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 150.972422][ T5387] BTRFS error (device loop1): open_ctree failed: -22 [ 151.012856][ T5402] device syzkaller0 entered promiscuous mode [ 151.599006][ T5412] loop3: detected capacity change from 0 to 64 [ 152.412768][ T5412] hfs: get root inode failed [ 153.282294][ T2351] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 154.885897][ T5428] loop0: detected capacity change from 0 to 1024 [ 155.027499][ T5428] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 155.039455][ T5428] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 155.061114][ T5428] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 155.070084][ T5428] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.079560][ T5428] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.285: Inode bitmap for bg 0 marked uninitialized [ 155.092888][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 155.330969][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.378361][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.511033][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.534200][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 155.661167][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 155.678528][ T2351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.693543][ T5446] loop2: detected capacity change from 0 to 64 [ 156.740989][ T2351] usb 5-1: string descriptor 0 read error: -71 [ 156.758168][ T2351] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 156.838991][ T2351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.001617][ T2351] usb 5-1: config 0 descriptor?? [ 157.048303][ T2351] usb 5-1: can't set config #0, error -71 [ 157.079152][ T2351] usb 5-1: USB disconnect, device number 15 [ 158.323393][ T5444] loop3: detected capacity change from 0 to 32768 [ 158.466460][ T5464] loop4: detected capacity change from 0 to 64 [ 160.124572][ T5464] hfs: get root inode failed [ 160.601516][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.296'. [ 161.140915][ T1110] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 162.160835][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 162.281185][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.309546][ T1110] usb 5-1: config 0 has no interfaces? [ 162.511107][ T1110] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.530988][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.600894][ T1110] usb 5-1: Product: syz [ 162.620275][ T1110] usb 5-1: Manufacturer: syz [ 162.652744][ T1110] usb 5-1: SerialNumber: syz [ 162.670324][ T1110] usb 5-1: config 0 descriptor?? [ 162.955785][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 162.994768][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 163.299234][ T1110] usb 5-1: USB disconnect, device number 16 [ 163.374798][ T5515] loop3: detected capacity change from 0 to 64 [ 164.182374][ T5515] hfs: get root inode failed [ 166.021889][ T5529] loop4: detected capacity change from 0 to 32768 [ 166.181174][ T5529] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.310 (5529) [ 167.036232][ T5529] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 167.123690][ T5529] BTRFS info (device loop4): enabling auto defrag [ 167.130188][ T5529] BTRFS info (device loop4): force clearing of disk cache [ 167.259465][ T5529] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 167.331905][ T5529] BTRFS error (device loop4): open_ctree failed: -22 [ 168.227701][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.236738][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.246365][ T5559] netlink: 'syz.0.317': attribute type 11 has an invalid length. [ 168.277675][ T5559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.286734][ T5559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.295486][ T5559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.304208][ T5559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.317642][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.326670][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.335692][ T5559] netlink: 'syz.0.317': attribute type 11 has an invalid length. [ 168.362494][ T4266] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.630939][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 168.841096][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.851742][ T5565] device syzkaller0 entered promiscuous mode [ 168.874470][ T4266] usb 3-1: config 0 has no interfaces? [ 169.860515][ T5575] loop1: detected capacity change from 0 to 64 [ 169.981093][ T4266] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.001690][ T5577] tipc: Enabled bearer , priority 0 [ 170.009337][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.027810][ T4266] usb 3-1: Product: syz [ 170.038484][ T4266] usb 3-1: Manufacturer: syz [ 170.051561][ T4266] usb 3-1: SerialNumber: syz [ 170.076943][ T5577] tipc: Resetting bearer [ 170.084548][ T4266] usb 3-1: config 0 descriptor?? [ 170.149444][ T5576] tipc: Disabling bearer [ 170.237357][ T7] usb 3-1: USB disconnect, device number 6 [ 171.676554][ T5564] loop3: detected capacity change from 0 to 32768 [ 172.453660][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 172.735452][ T5602] tipc: Enabling of bearer rejected, failed to enable media [ 173.779674][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 173.788600][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 173.797726][ T5616] netlink: 'syz.4.332': attribute type 11 has an invalid length. [ 173.824327][ T5616] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.833570][ T5616] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.843636][ T5616] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.852646][ T5616] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.866194][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 173.875147][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 173.884446][ T5616] netlink: 'syz.4.332': attribute type 11 has an invalid length. [ 174.433531][ T4272] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4272) [ 174.612489][ T5623] device syzkaller0 entered promiscuous mode [ 174.892870][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 174.902047][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 174.911249][ T5638] netlink: 'syz.3.335': attribute type 11 has an invalid length. [ 174.936356][ T5638] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.945463][ T5638] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.954368][ T5638] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.963189][ T5638] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.976651][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 174.985672][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 174.995131][ T5638] netlink: 'syz.3.335': attribute type 11 has an invalid length. [ 175.692004][ T5640] tipc: Enabling of bearer rejected, failed to enable media [ 175.806928][ T5647] loop0: detected capacity change from 0 to 64 [ 176.597478][ T5647] hfs: get root inode failed [ 178.014627][ T5687] device syzkaller0 entered promiscuous mode [ 178.516869][ T5680] loop0: detected capacity change from 0 to 32768 [ 178.546328][ T5678] loop4: detected capacity change from 0 to 32768 [ 178.586285][ T5697] loop1: detected capacity change from 0 to 1024 [ 178.632600][ T5678] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.344 (5678) [ 178.645228][ T5697] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 178.646248][ T5680] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 178.664411][ T5697] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 178.765895][ T5697] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 178.860906][ T5680] BTRFS info (device loop0): enabling auto defrag [ 178.867525][ T5680] BTRFS info (device loop0): force clearing of disk cache [ 178.924861][ T5680] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 178.969146][ T5680] BTRFS error (device loop0): open_ctree failed: -22 [ 178.986931][ T5697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.029756][ T5697] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.350: Inode bitmap for bg 0 marked uninitialized [ 179.787344][ T5697] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 179.824191][ T4272] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4272) [ 180.464071][ T5714] tipc: Enabled bearer , priority 0 [ 180.609628][ T5712] tipc: Disabling bearer [ 180.710908][ T4232] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 180.850150][ T5725] loop3: detected capacity change from 0 to 64 [ 181.150911][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.185784][ T4232] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.301133][ T4232] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 182.349344][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.406482][ T4232] usb 5-1: Product: syz [ 182.431029][ T4232] usb 5-1: Manufacturer: syz [ 182.441120][ T4232] usb 5-1: SerialNumber: syz [ 182.516342][ T4232] usb 5-1: config 0 descriptor?? [ 182.685713][ T5738] loop0: detected capacity change from 0 to 64 [ 182.978975][ T13] usb 5-1: USB disconnect, device number 17 [ 183.699443][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 183.708424][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 183.717446][ T5753] netlink: 'syz.1.361': attribute type 11 has an invalid length. [ 183.742845][ T5753] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.752116][ T5753] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.760919][ T5753] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.769634][ T5753] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.782970][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 183.791913][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 183.801025][ T5753] netlink: 'syz.1.361': attribute type 11 has an invalid length. [ 184.585456][ T5756] tipc: Started in network mode [ 184.591896][ T5756] tipc: Node identity feb097a2f918, cluster identity 4711 [ 184.608218][ T5756] tipc: Enabled bearer , priority 0 [ 184.752302][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 184.761416][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 184.770694][ T5761] netlink: 'syz.0.364': attribute type 11 has an invalid length. [ 184.780587][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 184.789503][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 184.798517][ T5761] netlink: 'syz.0.364': attribute type 11 has an invalid length. [ 185.417487][ T5747] loop2: detected capacity change from 0 to 32768 [ 185.429086][ T5755] tipc: Disabling bearer [ 185.492157][ T5747] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 185.550932][ T5747] BTRFS info (device loop2): enabling auto defrag [ 185.557419][ T5747] BTRFS info (device loop2): force clearing of disk cache [ 185.637171][ T5747] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 185.689194][ T5747] BTRFS error (device loop2): open_ctree failed: -22 [ 185.695688][ T5487] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (5487) [ 186.856611][ T2351] Bluetooth: hci1: command 0x0406 tx timeout [ 186.863437][ T2351] Bluetooth: hci2: command 0x0406 tx timeout [ 187.010916][ T2351] Bluetooth: hci3: command 0x0406 tx timeout [ 187.017019][ T2351] Bluetooth: hci4: command 0x0406 tx timeout [ 187.024279][ T2351] Bluetooth: hci0: command 0x0406 tx timeout [ 187.131437][ T5783] loop0: detected capacity change from 0 to 64 [ 187.181730][ T5783] hfs: get root inode failed [ 188.085575][ T5792] device syzkaller0 entered promiscuous mode [ 188.649863][ T5800] loop3: detected capacity change from 0 to 64 [ 188.698080][ T5800] hfs: get root inode failed [ 188.900953][ T5621] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.095773][ T5806] tipc: Enabled bearer , priority 0 [ 189.122190][ T5805] tipc: Disabling bearer [ 189.212807][ T1110] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.340996][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.356934][ T5621] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.460857][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 189.581386][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.591926][ T5621] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 189.597358][ T1110] usb 5-1: config 0 has no interfaces? [ 189.620563][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.645425][ T5621] usb 1-1: Product: syz [ 189.658314][ T5621] usb 1-1: Manufacturer: syz [ 189.669621][ T5621] usb 1-1: SerialNumber: syz [ 189.703246][ T5621] usb 1-1: config 0 descriptor?? [ 189.781194][ T1110] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.792745][ T5811] loop3: detected capacity change from 0 to 64 [ 189.799085][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.808453][ T1110] usb 5-1: Product: syz [ 189.819676][ T1110] usb 5-1: Manufacturer: syz [ 189.824788][ T1110] usb 5-1: SerialNumber: syz [ 189.838924][ T1110] usb 5-1: config 0 descriptor?? [ 190.052635][ T5621] usb 1-1: USB disconnect, device number 8 [ 190.996394][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 191.007718][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 191.092750][ T2351] usb 5-1: USB disconnect, device number 18 [ 191.690818][ T2351] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.980908][ T2351] usb 4-1: Using ep0 maxpacket: 16 [ 192.631071][ T2351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.674059][ T2351] usb 4-1: config 0 has no interfaces? [ 192.881138][ T2351] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 192.900890][ T2351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.943913][ T2351] usb 4-1: Product: syz [ 192.948129][ T2351] usb 4-1: Manufacturer: syz [ 192.977393][ T2351] usb 4-1: SerialNumber: syz [ 193.014515][ T2351] usb 4-1: config 0 descriptor?? [ 193.383059][ T1107] usb 4-1: USB disconnect, device number 12 [ 193.770857][ T5621] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.230696][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 194.239717][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 194.248835][ T5866] netlink: 'syz.3.397': attribute type 11 has an invalid length. [ 194.258594][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 194.267651][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 194.276724][ T5866] netlink: 'syz.3.397': attribute type 11 has an invalid length. [ 194.372946][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411362][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.901037][ T5621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.950793][ T5621] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.104385][ T5873] device syzkaller0 entered promiscuous mode [ 195.171058][ T5621] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 195.188360][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.216874][ T5621] usb 2-1: Product: syz [ 195.232684][ T5621] usb 2-1: Manufacturer: syz [ 195.248826][ T5621] usb 2-1: SerialNumber: syz [ 195.273546][ T5621] usb 2-1: config 0 descriptor?? [ 195.492310][ T5870] loop2: detected capacity change from 0 to 32768 [ 195.541999][ T5870] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 195.557430][ T5621] usb 2-1: USB disconnect, device number 9 [ 195.576654][ T5870] BTRFS info (device loop2): enabling auto defrag [ 195.612281][ T5870] BTRFS info (device loop2): force clearing of disk cache [ 195.636618][ T5870] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 195.687881][ T5870] BTRFS error (device loop2): open_ctree failed: -22 [ 195.695339][ T4272] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4272) [ 196.962802][ T5893] tipc: Enabled bearer , priority 0 [ 197.066330][ T5889] tipc: Disabling bearer [ 198.438315][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.447297][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.456384][ T5921] netlink: 'syz.1.412': attribute type 11 has an invalid length. [ 198.465869][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.474728][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.483722][ T5921] netlink: 'syz.1.412': attribute type 11 has an invalid length. [ 199.200864][ T1107] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 199.481099][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 199.550932][ T4227] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 199.620944][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.631523][ T1107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.730897][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.821271][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 199.826644][ T1107] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 199.836000][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.844372][ T1107] usb 4-1: Product: syz [ 199.848802][ T1107] usb 4-1: Manufacturer: syz [ 199.853459][ T1107] usb 4-1: SerialNumber: syz [ 199.860309][ T1107] usb 4-1: config 0 descriptor?? [ 199.971002][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.981321][ T4227] usb 5-1: config 0 has no interfaces? [ 200.091030][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.103859][ T4230] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.134920][ T21] usb 4-1: USB disconnect, device number 13 [ 200.171485][ T4227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.180800][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.189079][ T4227] usb 5-1: Product: syz [ 200.196859][ T4227] usb 5-1: Manufacturer: syz [ 200.201519][ T4227] usb 5-1: SerialNumber: syz [ 200.208240][ T4227] usb 5-1: config 0 descriptor?? [ 200.271075][ T4230] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 200.296734][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.306263][ T4230] usb 1-1: Product: syz [ 200.310544][ T4230] usb 1-1: Manufacturer: syz [ 200.317810][ T4230] usb 1-1: SerialNumber: syz [ 200.336463][ T4230] usb 1-1: config 0 descriptor?? [ 200.702229][ T5935] loop2: detected capacity change from 0 to 1024 [ 200.732150][ T4230] usb 1-1: USB disconnect, device number 9 [ 200.732511][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 200.753522][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'. [ 200.762645][ T5935] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 200.772432][ T5935] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 200.789723][ T5935] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 200.798491][ T5935] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.805535][ T5935] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.420: Inode bitmap for bg 0 marked uninitialized [ 200.823625][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 200.975700][ T21] usb 5-1: USB disconnect, device number 19 [ 201.480796][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.140185][ T5975] loop0: detected capacity change from 0 to 1024 [ 202.196624][ T5975] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 202.206289][ T5975] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 202.216323][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.230838][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.241130][ T5975] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 202.249722][ T5975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 202.258073][ T5975] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.432: Inode bitmap for bg 0 marked uninitialized [ 202.275187][ T5975] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 202.440922][ T21] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 202.460359][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.490848][ T21] usb 3-1: Product: syz [ 202.495079][ T21] usb 3-1: Manufacturer: syz [ 202.530165][ T21] usb 3-1: SerialNumber: syz [ 202.563187][ T21] usb 3-1: config 0 descriptor?? [ 203.715437][ T5621] usb 3-1: USB disconnect, device number 7 [ 204.242583][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 204.251598][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 204.260553][ T6008] netlink: 'syz.1.439': attribute type 11 has an invalid length. [ 204.270216][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 204.279100][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 204.288109][ T6008] netlink: 'syz.1.439': attribute type 11 has an invalid length. [ 204.957922][ T5621] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.341051][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.965372][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 205.974270][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 205.983185][ T6017] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 205.993009][ T6017] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.001733][ T6017] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.010406][ T6017] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.019127][ T6017] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.028721][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 206.037652][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 206.046635][ T6017] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 206.107134][ T5621] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.300088][ T5621] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 206.364796][ T6022] loop4: detected capacity change from 0 to 1024 [ 206.372804][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.385865][ T5621] usb 1-1: Product: syz [ 206.390063][ T5621] usb 1-1: Manufacturer: syz [ 206.395347][ T5621] usb 1-1: SerialNumber: syz [ 206.402089][ T5621] usb 1-1: config 0 descriptor?? [ 206.414512][ T6022] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 206.425961][ T6022] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 206.452372][ T6022] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 206.461431][ T6022] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.468474][ T6022] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.444: Inode bitmap for bg 0 marked uninitialized [ 206.485226][ T6022] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 206.731379][ T21] usb 1-1: USB disconnect, device number 10 [ 208.008671][ T6053] loop1: detected capacity change from 0 to 64 [ 208.248181][ T6053] hfs: get root inode failed [ 210.410941][ T5621] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.618433][ T6078] loop4: detected capacity change from 0 to 1024 [ 210.670653][ T6078] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 210.680953][ T6078] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 210.767188][ T6078] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 210.776545][ T6078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.794353][ T6078] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.460: Inode bitmap for bg 0 marked uninitialized [ 210.807637][ T6078] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 210.824033][ T5621] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.858912][ T5621] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.072014][ T5621] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 211.084252][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.094868][ T5621] usb 3-1: Product: syz [ 211.100121][ T5621] usb 3-1: Manufacturer: syz [ 211.109600][ T5621] usb 3-1: SerialNumber: syz [ 211.126938][ T5621] usb 3-1: config 0 descriptor?? [ 211.200818][ T1110] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.400983][ T4232] usb 3-1: USB disconnect, device number 8 [ 211.601259][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.635829][ T1110] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.842120][ T1110] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 211.865105][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.910447][ T1110] usb 1-1: Product: syz [ 211.960110][ T1110] usb 1-1: Manufacturer: syz [ 212.003371][ T1110] usb 1-1: SerialNumber: syz [ 212.150366][ T1110] usb 1-1: config 0 descriptor?? [ 212.433883][ T4232] usb 1-1: USB disconnect, device number 11 [ 212.460968][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 212.554989][ T6097] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.570176][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 212.583430][ T6097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.467'. [ 213.022289][ T6111] device syzkaller0 entered promiscuous mode [ 213.602550][ T13] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 214.810917][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 214.833804][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.991124][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 215.015936][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 215.153850][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 215.177528][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 215.450823][ T13] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 215.460411][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.581302][ T6135] binder: BINDER_SET_CONTEXT_MGR already set [ 216.498375][ T6135] binder: 6134:6135 ioctl 4018620d 200000000040 returned -16 [ 216.536924][ T13] usb 1-1: Product: syz [ 216.629304][ T6144] loop3: detected capacity change from 0 to 64 [ 216.738587][ T6144] hfs: get root inode failed [ 217.503290][ T13] usb 1-1: Manufacturer: syz [ 217.580895][ T13] usb 1-1: SerialNumber: syz [ 217.651256][ T13] usb 1-1: config 0 descriptor?? [ 217.957165][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 218.063370][ T6159] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.425414][ T6163] loop2: detected capacity change from 0 to 1024 [ 218.497063][ T6163] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 218.506715][ T6163] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 218.526902][ T6163] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.536374][ T6163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.545197][ T6163] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.484: Inode bitmap for bg 0 marked uninitialized [ 218.568385][ T6163] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 218.780934][ T13] usb 1-1: can't set config #0, error -71 [ 218.809756][ T13] usb 1-1: USB disconnect, device number 12 [ 219.677180][ T6175] fuse: Bad value for 'group_id' [ 220.500834][ T4230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.881232][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.912110][ T4230] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.102221][ T4230] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 221.136189][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.167670][ T4230] usb 3-1: Product: syz [ 221.208219][ T4230] usb 3-1: Manufacturer: syz [ 221.222970][ T4230] usb 3-1: SerialNumber: syz [ 221.279787][ T4230] usb 3-1: config 0 descriptor?? [ 222.520875][ T6218] loop1: detected capacity change from 0 to 1024 [ 222.714413][ T6218] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 222.724690][ T6218] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 223.100068][ T6218] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 223.115995][ T6218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.133754][ T6218] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.500: Inode bitmap for bg 0 marked uninitialized [ 223.151608][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 223.354473][ T4227] usb 3-1: USB disconnect, device number 9 [ 223.438811][ T6222] device syzkaller0 entered promiscuous mode [ 223.580368][ T6226] fuse: Bad value for 'group_id' [ 224.649161][ T6258] loop2: detected capacity change from 0 to 1024 [ 225.318698][ T6258] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 225.333536][ T6258] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 225.365219][ T6258] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 225.374668][ T6258] EXT4-fs (loop2): orphan cleanup on readonly fs [ 225.381882][ T6258] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.514: Inode bitmap for bg 0 marked uninitialized [ 225.395210][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 225.407924][ T6264] fuse: Bad value for 'group_id' [ 225.476430][ T6263] device syzkaller0 entered promiscuous mode [ 226.161057][ T4227] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 226.601243][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.618296][ T4227] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.857285][ T4227] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 226.866863][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.882457][ T4227] usb 1-1: Product: syz [ 226.886779][ T4227] usb 1-1: Manufacturer: syz [ 226.896948][ T4227] usb 1-1: SerialNumber: syz [ 226.917458][ T4227] usb 1-1: config 0 descriptor?? [ 227.228986][ T4227] usb 1-1: USB disconnect, device number 13 [ 227.569000][ T6312] loop2: detected capacity change from 0 to 1024 [ 227.831281][ T6312] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 227.842921][ T6312] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 227.980406][ T6312] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 227.996073][ T6312] EXT4-fs (loop2): orphan cleanup on readonly fs [ 228.011098][ T6312] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.531: Inode bitmap for bg 0 marked uninitialized [ 228.028498][ T6312] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 228.294048][ T6317] device syzkaller0 entered promiscuous mode [ 229.189231][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.252390][ T6355] loop4: detected capacity change from 0 to 1024 [ 229.294888][ T6355] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 229.321395][ T6355] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 229.352452][ T6355] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 229.361395][ T6355] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.368540][ T6355] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.547: Inode bitmap for bg 0 marked uninitialized [ 229.382142][ T6355] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 229.631261][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.667000][ T13] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.804901][ T6363] device syzkaller0 entered promiscuous mode [ 229.884387][ T13] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 229.950886][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.993715][ T13] usb 4-1: Product: syz [ 230.019906][ T13] usb 4-1: Manufacturer: syz [ 230.037567][ T13] usb 4-1: SerialNumber: syz [ 230.054375][ T13] usb 4-1: config 0 descriptor?? [ 230.311294][ T13] usb 4-1: USB disconnect, device number 14 [ 230.955536][ T6393] device syzkaller0 entered promiscuous mode [ 231.361236][ T6400] loop0: detected capacity change from 0 to 1024 [ 231.416272][ T6400] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 231.426245][ T6400] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 231.461421][ T6400] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 231.471521][ T6400] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.479021][ T6400] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.562: Inode bitmap for bg 0 marked uninitialized [ 231.492694][ T6400] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 232.736219][ T6434] device syzkaller0 entered promiscuous mode [ 232.870848][ T4232] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 233.216517][ T6443] loop3: detected capacity change from 0 to 1024 [ 233.265329][ T6443] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 233.287678][ T6443] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 233.301129][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.324511][ T6443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 233.334129][ T6443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 233.336707][ T4232] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.350024][ T6443] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.578: Inode bitmap for bg 0 marked uninitialized [ 233.363602][ T6443] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 233.561778][ T4232] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 233.571165][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.579411][ T4232] usb 1-1: Product: syz [ 233.584093][ T4232] usb 1-1: Manufacturer: syz [ 233.588847][ T4232] usb 1-1: SerialNumber: syz [ 233.609412][ T4232] usb 1-1: config 0 descriptor?? [ 233.918706][ T7] usb 1-1: USB disconnect, device number 14 [ 234.481509][ T6474] device syzkaller0 entered promiscuous mode [ 236.249784][ T6488] loop4: detected capacity change from 0 to 1024 [ 236.326209][ T6488] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 236.337025][ T6488] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 236.368680][ T6488] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 236.377539][ T6488] EXT4-fs (loop4): orphan cleanup on readonly fs [ 236.386505][ T6488] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.593: Inode bitmap for bg 0 marked uninitialized [ 236.399937][ T6488] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 236.980983][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 237.020219][ T6515] tipc: Enabling of bearer rejected, failed to enable media [ 237.040247][ T6515] device syzkaller0 entered promiscuous mode [ 237.383895][ T6531] fuse: Unknown parameter 'grou00000000000000000000' [ 237.397004][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.410882][ T13] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.601386][ T13] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 237.622973][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.674472][ T13] usb 4-1: Product: syz [ 237.693694][ T13] usb 4-1: Manufacturer: syz [ 237.715059][ T13] usb 4-1: SerialNumber: syz [ 237.879269][ T6539] loop1: detected capacity change from 0 to 1024 [ 238.005615][ T6539] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 238.019574][ T6539] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 238.102966][ T6539] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 238.116667][ T6539] EXT4-fs (loop1): orphan cleanup on readonly fs [ 238.131103][ T6539] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.611: Inode bitmap for bg 0 marked uninitialized [ 238.149730][ T6539] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 238.476348][ T13] usb 4-1: config 0 descriptor?? [ 238.719768][ T13] usb 4-1: USB disconnect, device number 15 [ 239.994844][ T6574] device syzkaller0 entered promiscuous mode [ 242.721434][ T6614] loop1: detected capacity change from 0 to 1024 [ 242.825820][ T6614] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 242.847186][ T6614] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 242.962416][ T6614] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 242.976009][ T6614] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.990236][ T6614] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.638: Inode bitmap for bg 0 marked uninitialized [ 243.007330][ T6614] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 243.464865][ T6629] tipc: Enabling of bearer rejected, failed to enable media [ 243.674956][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 243.684080][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 243.693438][ T6635] netlink: 'syz.1.641': attribute type 11 has an invalid length. [ 243.703177][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 243.712081][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 243.721282][ T6635] netlink: 'syz.1.641': attribute type 11 has an invalid length. [ 244.255187][ T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 244.711062][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.734109][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.860920][ T13] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 245.875696][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.913173][ T13] usb 1-1: Product: syz [ 245.917560][ T13] usb 1-1: Manufacturer: syz [ 245.926390][ T13] usb 1-1: SerialNumber: syz [ 245.944657][ T13] usb 1-1: config 0 descriptor?? [ 247.314467][ T6663] loop4: detected capacity change from 0 to 1024 [ 247.356641][ T5621] usb 1-1: USB disconnect, device number 15 [ 247.378262][ T6663] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 247.390410][ T6663] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 247.420207][ T6663] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 247.429105][ T6663] EXT4-fs (loop4): orphan cleanup on readonly fs [ 247.436549][ T6663] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.652: Inode bitmap for bg 0 marked uninitialized [ 247.452510][ T6663] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 247.953081][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 247.962141][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 247.971414][ T6677] netlink: 'syz.2.655': attribute type 11 has an invalid length. [ 247.981213][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 247.990044][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 247.999056][ T6677] netlink: 'syz.2.655': attribute type 11 has an invalid length. [ 248.658465][ T6676] tipc: Enabling of bearer rejected, failed to enable media [ 248.990841][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.011855][ T6692] binder: 6691:6692 ioctl c0306201 0 returned -14 [ 249.436625][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 249.445599][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 249.454655][ T6701] netlink: 'syz.3.663': attribute type 11 has an invalid length. [ 249.464449][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 249.473314][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 249.482350][ T6701] netlink: 'syz.3.663': attribute type 11 has an invalid length. [ 250.141003][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.200136][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.652555][ T13] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 251.653093][ C1] ================================================================== [ 251.670012][ C1] BUG: KASAN: slab-out-of-bounds in rose_timer_expiry+0x470/0x490 [ 251.677865][ C1] Read of size 2 at addr ffff888079ea4c2a by task ksoftirqd/1/20 [ 251.685597][ C1] [ 251.687938][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 251.695215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.705259][ C1] Call Trace: [ 251.708595][ C1] [ 251.711526][ C1] dump_stack_lvl+0x188/0x250 [ 251.716285][ C1] ? show_regs_print_info+0x20/0x20 [ 251.721560][ C1] ? _printk+0xda/0x130 [ 251.725705][ C1] ? rose_timer_expiry+0x470/0x490 [ 251.730830][ C1] ? load_image+0x400/0x400 [ 251.735325][ C1] print_address_description+0x60/0x2d0 [ 251.740879][ C1] ? rose_timer_expiry+0x470/0x490 [ 251.745980][ C1] kasan_report+0xdf/0x130 [ 251.750388][ C1] ? rose_timer_expiry+0x470/0x490 [ 251.755594][ C1] rose_timer_expiry+0x470/0x490 [ 251.760522][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 251.766099][ C1] call_timer_fn+0x17b/0x540 [ 251.770869][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 251.775935][ C1] ? __run_timers+0x800/0x800 [ 251.780621][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 251.785914][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 251.791289][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 251.796361][ C1] __run_timers+0x53e/0x800 [ 251.800951][ C1] ? detach_timer+0x2b0/0x2b0 [ 251.805621][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 251.810463][ C1] run_timer_softirq+0x63/0xf0 [ 251.815220][ C1] handle_softirqs+0x339/0x830 [ 251.819986][ C1] ? run_ksoftirqd+0xa4/0x100 [ 251.824658][ C1] ? do_softirq+0x210/0x210 [ 251.829160][ C1] ? run_ksoftirqd+0x81/0x100 [ 251.833836][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 251.839023][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 251.844295][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 251.849500][ C1] run_ksoftirqd+0xa4/0x100 [ 251.854006][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 251.859205][ C1] smpboot_thread_fn+0x4f6/0x970 [ 251.864139][ C1] kthread+0x436/0x520 [ 251.868197][ C1] ? cpu_report_death+0x180/0x180 [ 251.873206][ C1] ? kthread_blkcg+0xd0/0xd0 [ 251.877787][ C1] ret_from_fork+0x1f/0x30 [ 251.882208][ C1] [ 251.885237][ C1] [ 251.887549][ C1] Allocated by task 6546: [ 251.891861][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 251.896716][ C1] slab_post_alloc_hook+0x4c/0x380 [ 251.901849][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 251.907115][ C1] __alloc_skb+0xf4/0x750 [ 251.911441][ C1] tipc_msg_build+0xc9/0xde0 [ 251.916021][ C1] __tipc_sendmsg+0x192a/0x2bf0 [ 251.920858][ C1] tipc_sendmsg+0x51/0x70 [ 251.925168][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 251.929917][ C1] ___sys_sendmsg+0x236/0x2e0 [ 251.934581][ C1] __sys_sendmmsg+0x2ba/0x500 [ 251.939269][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 251.944110][ C1] do_syscall_64+0x4c/0xa0 [ 251.948515][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.954485][ C1] [ 251.956795][ C1] Freed by task 6546: [ 251.960758][ C1] kasan_set_track+0x4b/0x70 [ 251.965347][ C1] kasan_set_free_info+0x1f/0x40 [ 251.970276][ C1] ____kasan_slab_free+0xd5/0x110 [ 251.975302][ C1] slab_free_freelist_hook+0xea/0x170 [ 251.980710][ C1] kmem_cache_free+0x8f/0x210 [ 251.985478][ C1] tipc_msg_reverse+0x1a4/0x900 [ 251.990316][ C1] tipc_sk_filter_rcv+0xa14/0x30c0 [ 251.995408][ C1] tipc_sk_rcv+0x847/0x29f0 [ 251.999983][ C1] tipc_node_xmit+0x1eb/0xf20 [ 252.004654][ C1] __tipc_sendmsg+0x1ea5/0x2bf0 [ 252.009488][ C1] tipc_sendmsg+0x51/0x70 [ 252.013797][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 252.018545][ C1] ___sys_sendmsg+0x236/0x2e0 [ 252.023202][ C1] __sys_sendmmsg+0x2ba/0x500 [ 252.027862][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 252.032784][ C1] do_syscall_64+0x4c/0xa0 [ 252.037200][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.043079][ C1] [ 252.045392][ C1] The buggy address belongs to the object at ffff888079ea4a00 [ 252.045392][ C1] which belongs to the cache skbuff_fclone_cache of size 472 [ 252.060224][ C1] The buggy address is located 82 bytes to the right of [ 252.060224][ C1] 472-byte region [ffff888079ea4a00, ffff888079ea4bd8) [ 252.073919][ C1] The buggy address belongs to the page: [ 252.079635][ C1] page:ffffea0001e7a900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79ea4 [ 252.089869][ C1] head:ffffea0001e7a900 order:1 compound_mapcount:0 [ 252.096470][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 252.104463][ C1] raw: 00fff00000010200 ffffea0001f4b680 0000000400000004 ffff88801bbe5280 [ 252.113058][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 252.121635][ C1] page dumped because: kasan: bad access detected [ 252.128131][ C1] page_owner tracks the page as allocated [ 252.133840][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6321, ts 228567274902, free_ts 162367079634 [ 252.154668][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 252.160214][ C1] __alloc_pages+0x1ee/0x480 [ 252.164881][ C1] new_slab+0xc0/0x4b0 [ 252.170793][ C1] ___slab_alloc+0x80a/0xdd0 [ 252.175388][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 252.180668][ C1] __alloc_skb+0xf4/0x750 [ 252.185248][ C1] tipc_msg_build+0xc9/0xde0 [ 252.189855][ C1] __tipc_sendmsg+0x192a/0x2bf0 [ 252.194702][ C1] tipc_sendmsg+0x51/0x70 [ 252.199028][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 252.203795][ C1] ___sys_sendmsg+0x236/0x2e0 [ 252.208491][ C1] __sys_sendmmsg+0x2ba/0x500 [ 252.213183][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 252.218047][ C1] do_syscall_64+0x4c/0xa0 [ 252.222481][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.228493][ C1] page last free stack trace: [ 252.233173][ C1] free_unref_page_prepare+0x637/0x6c0 [ 252.238660][ C1] free_unref_page+0x8f/0x2a0 [ 252.243338][ C1] __vunmap+0x8b9/0xa50 [ 252.247490][ C1] kcov_mmap+0x89/0x120 [ 252.251635][ C1] mmap_file+0x5d/0xb0 [ 252.255697][ C1] mmap_region+0xf88/0x1650 [ 252.260217][ C1] do_mmap+0x819/0xe90 [ 252.264268][ C1] vm_mmap_pgoff+0x1c1/0x2d0 [ 252.268856][ C1] ksys_mmap_pgoff+0x54b/0x790 [ 252.273603][ C1] do_syscall_64+0x4c/0xa0 [ 252.278024][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.283919][ C1] [ 252.286270][ C1] Memory state around the buggy address: [ 252.291960][ C1] ffff888079ea4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.300023][ C1] ffff888079ea4b80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 252.308074][ C1] >ffff888079ea4c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 252.316135][ C1] ^ [ 252.321643][ C1] ffff888079ea4c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.329884][ C1] ffff888079ea4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.337947][ C1] ================================================================== [ 252.346007][ C1] Disabling lock debugging due to kernel taint [ 252.352257][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.359459][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 252.368225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.378268][ C1] Call Trace: [ 252.381539][ C1] [ 252.384474][ C1] dump_stack_lvl+0x188/0x250 [ 252.389153][ C1] ? show_regs_print_info+0x20/0x20 [ 252.394337][ C1] ? load_image+0x400/0x400 [ 252.398825][ C1] panic+0x2e5/0x810 [ 252.402709][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 252.407196][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 252.413071][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.418947][ C1] ? _raw_spin_unlock+0x40/0x40 [ 252.423779][ C1] ? print_memory_metadata+0x314/0x400 [ 252.429353][ C1] ? rose_timer_expiry+0x470/0x490 [ 252.434545][ C1] check_panic_on_warn+0x80/0xa0 [ 252.439472][ C1] ? rose_timer_expiry+0x470/0x490 [ 252.444568][ C1] end_report+0x6d/0xf0 [ 252.448713][ C1] kasan_report+0x102/0x130 [ 252.453213][ C1] ? rose_timer_expiry+0x470/0x490 [ 252.458333][ C1] rose_timer_expiry+0x470/0x490 [ 252.463269][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 252.468278][ C1] call_timer_fn+0x17b/0x540 [ 252.472968][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 252.477992][ C1] ? __run_timers+0x800/0x800 [ 252.482652][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.487947][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 252.493253][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 252.498262][ C1] __run_timers+0x53e/0x800 [ 252.502748][ C1] ? detach_timer+0x2b0/0x2b0 [ 252.507433][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 252.512363][ C1] run_timer_softirq+0x63/0xf0 [ 252.517112][ C1] handle_softirqs+0x339/0x830 [ 252.521859][ C1] ? run_ksoftirqd+0xa4/0x100 [ 252.526527][ C1] ? do_softirq+0x210/0x210 [ 252.531117][ C1] ? run_ksoftirqd+0x81/0x100 [ 252.535777][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 252.540968][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 252.546243][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 252.551528][ C1] run_ksoftirqd+0xa4/0x100 [ 252.556131][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 252.561337][ C1] smpboot_thread_fn+0x4f6/0x970 [ 252.566268][ C1] kthread+0x436/0x520 [ 252.570430][ C1] ? cpu_report_death+0x180/0x180 [ 252.575464][ C1] ? kthread_blkcg+0xd0/0xd0 [ 252.580102][ C1] ret_from_fork+0x1f/0x30 [ 252.584751][ C1] [ 252.587905][ C1] Kernel Offset: disabled [ 252.592347][ C1] Rebooting in 86400 seconds..