last executing test programs: 2m16.341001394s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m15.768967425s ago: executing program 4 (id=5): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 2m14.851958408s ago: executing program 4 (id=11): r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x7f, 0x3, 0xfffffffffffffffb, 0x8000000000000001, 0x7, 0x3, 0x100000001, 0x81, 0x1, 0x0, 0x404, 0x6, 0x6, 0x6, 0x0, 0xfffffffffffffffc], 0xd000, 0x308000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m14.522848869s ago: executing program 3 (id=13): time(&(0x7f0000000040)) time(0x0) time(0x0) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m13.305821529s ago: executing program 4 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(r0, 0x0) 2m11.464983926s ago: executing program 4 (id=17): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x1080000, 0x0, 0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 2m10.872555715s ago: executing program 3 (id=18): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m9.644919816s ago: executing program 4 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000380)="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", 0x9d4}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240080e4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') listen(0xffffffffffffffff, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x22) 2m9.331274844s ago: executing program 3 (id=22): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000400)="a00a58", 0x3, 0x20000041, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2e", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94", 0x6b}], 0x1}}], 0x2, 0xc0) 2m8.161954064s ago: executing program 3 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2m5.950210191s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x14000}, 0x0, 0x0, 0x16b, 0xffffffffffffffff, 0x6, 0x9, 0x2e, 0xffff}}], 0x58, 0x40014}, 0x0) 2m4.097312068s ago: executing program 4 (id=30): syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x203, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) 1m50.529485889s ago: executing program 32 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x14000}, 0x0, 0x0, 0x16b, 0xffffffffffffffff, 0x6, 0x9, 0x2e, 0xffff}}], 0x58, 0x40014}, 0x0) 1m48.813302466s ago: executing program 33 (id=30): syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x203, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) 28.376838696s ago: executing program 5 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6126d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 26.375211799s ago: executing program 2 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 25.193469911s ago: executing program 2 (id=198): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.349022805s ago: executing program 5 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000004480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x28, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x4, 0x0, 0x3, {[@sack={0x5, 0x12, [0x9, 0x1, 0x7, 0x7503a938]}]}}}}}}}}, 0x0) 22.130865799s ago: executing program 5 (id=205): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 21.481541934s ago: executing program 2 (id=207): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={0x0}}, 0x0) 20.968838805s ago: executing program 5 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001880)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "321cf805a460d7a3", "7e322fd262b534ec587468d4379400fc", "33f2d63d", "2a0a4f27709f891a"}, 0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) 19.928776116s ago: executing program 2 (id=211): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 18.754250198s ago: executing program 6 (id=213): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 17.82940666s ago: executing program 6 (id=216): syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2c, &(0x7f0000000580)=@string={0x2c, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b"}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 16.69210515s ago: executing program 2 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.012315906s ago: executing program 6 (id=221): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee01, 0x0) 15.584802686s ago: executing program 5 (id=223): io_uring_setup(0x5259, &(0x7f00000000c0)={0x0, 0xbffc, 0x400, 0x2, 0x20}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000004480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x28, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x4, 0x0, 0x3, {[@sack={0x5, 0x12, [0x9, 0x1, 0x7, 0x7503a938]}]}}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88852086800095d8b601020301090212000100000000090401000015cc1c00"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x3) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000000c0), 0x0) writev(r3, &(0x7f0000000300), 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_usb_control_io$printer(r1, &(0x7f0000000480)={0xc, &(0x7f0000000340)={0x40, 0x9, 0x27, {0x27, 0x0, "c50bc43c573f6cb3c9396db87168da842963f57aa7a0bbbb58aebb5b2fbb99e16adfbeb1a4"}}, 0x0}, &(0x7f0000000700)={0x1c, &(0x7f00000004c0)={0x40, 0x18, 0x2b, "6f8c10e6654be1d709d5e9a5b5abbf16a03e23b7f5a8eb972aa70094d2e6e91038b2af12d46025409f75b6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x0, 0x2}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x6}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="2e00000011008108097162e1919d8fc20f99ecdb4cb92e264831371900000a0000ff0e", 0x23}], 0x1}, 0x0) 14.353503681s ago: executing program 1 (id=225): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000400)="a00a58", 0x3, 0x20000041, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e1", 0x6e}], 0x1}}], 0x2, 0xc0) 14.316630114s ago: executing program 6 (id=226): ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101a00, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) 13.02038187s ago: executing program 0 (id=227): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/232, 0xe8}, 0x1626e1aa}], 0x1, 0x40002182, 0x0) 12.996963039s ago: executing program 1 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000004480)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x28, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x4, 0x0, 0x3, {[@sack={0x5, 0x12, [0x9, 0x1, 0x7, 0x7503a938]}]}}}}}}}}, 0x0) 12.419381336s ago: executing program 5 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x5, {0xffffffffffffffff}, {}, 0x9, 0x8}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x8814) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 11.832201371s ago: executing program 0 (id=230): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 11.539293285s ago: executing program 1 (id=231): syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2c, &(0x7f0000000580)=@string={0x2c, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b"}}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 10.601652835s ago: executing program 0 (id=232): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 10.496198391s ago: executing program 2 (id=233): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d65c", 0x2}], 0x1}}], 0x3, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 6.372216485s ago: executing program 34 (id=233): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d65c", 0x2}], 0x1}}], 0x3, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x2) 6.326365411s ago: executing program 0 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5b63392b41febc78767f2c24eb5b020ff1b2de985295fe3c67b1be419eeb1d13daf99fe36f", 0x25}], 0x1}, 0x8000) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20004810, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6.270298702s ago: executing program 1 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 6.174903272s ago: executing program 6 (id=237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) 5.283716838s ago: executing program 1 (id=238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00bf05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2.911384967s ago: executing program 0 (id=239): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x19) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.836733635s ago: executing program 6 (id=240): syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)="2e9b0a", 0x3) 820.539469ms ago: executing program 0 (id=241): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 1 (id=242): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0xfffff000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 197.011799][ T5784] cgroup: Unknown subsys name 'net' [ 197.143528][ T5784] cgroup: Unknown subsys name 'cpuset' [ 197.160200][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.766966][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.773987][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.117069][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 255.455145][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.481274][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.539958][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.566475][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.590759][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.599773][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.633134][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.640990][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.653513][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.669314][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.677916][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.679406][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.699213][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.700017][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.710935][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.718462][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.723156][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.741866][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.767514][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.799649][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.808653][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.809533][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.826534][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.859389][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.915636][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.507781][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 257.530366][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 257.672980][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 257.750763][ T5813] Bluetooth: hci1: command tx timeout [ 257.750968][ T5103] Bluetooth: hci0: command tx timeout [ 257.842561][ T5103] Bluetooth: hci2: command tx timeout [ 257.869608][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 257.933252][ T5103] Bluetooth: hci3: command tx timeout [ 257.983320][ T5103] Bluetooth: hci4: command tx timeout [ 258.553592][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 258.645465][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.654185][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.661936][ T5806] bridge_slave_0: entered allmulticast mode [ 258.671926][ T5806] bridge_slave_0: entered promiscuous mode [ 258.735579][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.743758][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.751498][ T5806] bridge_slave_1: entered allmulticast mode [ 258.761539][ T5806] bridge_slave_1: entered promiscuous mode [ 259.119042][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.132849][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.140710][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.151015][ T5819] bridge_slave_0: entered allmulticast mode [ 259.161963][ T5819] bridge_slave_0: entered promiscuous mode [ 259.234086][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.246189][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.254882][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.262796][ T5819] bridge_slave_1: entered allmulticast mode [ 259.272770][ T5819] bridge_slave_1: entered promiscuous mode [ 259.337719][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.345663][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.353677][ T5810] bridge_slave_0: entered allmulticast mode [ 259.363735][ T5810] bridge_slave_0: entered promiscuous mode [ 259.600166][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.608450][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.616674][ T5810] bridge_slave_1: entered allmulticast mode [ 259.626412][ T5810] bridge_slave_1: entered promiscuous mode [ 259.648716][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.721308][ T5806] team0: Port device team_slave_0 added [ 259.734729][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.745985][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.755016][ T5814] bridge_slave_0: entered allmulticast mode [ 259.764779][ T5814] bridge_slave_0: entered promiscuous mode [ 259.825944][ T5103] Bluetooth: hci0: command tx timeout [ 259.831717][ T5813] Bluetooth: hci1: command tx timeout [ 259.835913][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.896166][ T5806] team0: Port device team_slave_1 added [ 259.904739][ T5103] Bluetooth: hci2: command tx timeout [ 259.905719][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.919110][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.929246][ T5814] bridge_slave_1: entered allmulticast mode [ 259.939102][ T5814] bridge_slave_1: entered promiscuous mode [ 259.982491][ T5103] Bluetooth: hci3: command tx timeout [ 260.065178][ T5103] Bluetooth: hci4: command tx timeout [ 260.156661][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.202837][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.210492][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.218698][ T5811] bridge_slave_0: entered allmulticast mode [ 260.227969][ T5811] bridge_slave_0: entered promiscuous mode [ 260.329013][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.350673][ T5819] team0: Port device team_slave_0 added [ 260.360877][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.368842][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.376803][ T5811] bridge_slave_1: entered allmulticast mode [ 260.385861][ T5811] bridge_slave_1: entered promiscuous mode [ 260.400097][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.407788][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.434391][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.471152][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.524117][ T5819] team0: Port device team_slave_1 added [ 260.609152][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.616606][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.643175][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.665896][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.720057][ T5810] team0: Port device team_slave_0 added [ 260.863226][ T5810] team0: Port device team_slave_1 added [ 260.881063][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.936870][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.944237][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.970727][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.076148][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.134504][ T5814] team0: Port device team_slave_0 added [ 261.145171][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.152579][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.179064][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.227003][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.234409][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.261068][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.318642][ T5814] team0: Port device team_slave_1 added [ 261.382752][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.389937][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.416500][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.436667][ T5811] team0: Port device team_slave_0 added [ 261.538191][ T5806] hsr_slave_0: entered promiscuous mode [ 261.548935][ T5806] hsr_slave_1: entered promiscuous mode [ 261.589821][ T5811] team0: Port device team_slave_1 added [ 261.627710][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.635213][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.661686][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.683285][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.690500][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.717275][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.902549][ T5103] Bluetooth: hci0: command tx timeout [ 261.908324][ T5813] Bluetooth: hci1: command tx timeout [ 261.983614][ T5813] Bluetooth: hci2: command tx timeout [ 262.007857][ T5819] hsr_slave_0: entered promiscuous mode [ 262.018072][ T5819] hsr_slave_1: entered promiscuous mode [ 262.027380][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 262.033457][ T5819] Cannot create hsr debugfs directory [ 262.071071][ T5813] Bluetooth: hci3: command tx timeout [ 262.085882][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.093212][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.120877][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.150185][ T5813] Bluetooth: hci4: command tx timeout [ 262.190041][ T5810] hsr_slave_0: entered promiscuous mode [ 262.200600][ T5810] hsr_slave_1: entered promiscuous mode [ 262.209840][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 262.216090][ T5810] Cannot create hsr debugfs directory [ 262.250002][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.257743][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.284349][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.618322][ T5814] hsr_slave_0: entered promiscuous mode [ 262.628096][ T5814] hsr_slave_1: entered promiscuous mode [ 262.637329][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 262.643469][ T5814] Cannot create hsr debugfs directory [ 263.116748][ T5811] hsr_slave_0: entered promiscuous mode [ 263.125989][ T5811] hsr_slave_1: entered promiscuous mode [ 263.135054][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 263.141054][ T5811] Cannot create hsr debugfs directory [ 263.788782][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.918204][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.986558][ T5813] Bluetooth: hci1: command tx timeout [ 263.992691][ T5813] Bluetooth: hci0: command tx timeout [ 264.022680][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.062366][ T5103] Bluetooth: hci2: command tx timeout [ 264.068265][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.142332][ T5103] Bluetooth: hci3: command tx timeout [ 264.222672][ T5103] Bluetooth: hci4: command tx timeout [ 264.424153][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.457870][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.484426][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.527818][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.720570][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.798250][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.825322][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.850817][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.932554][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.047007][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.176845][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.237047][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.347605][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.425998][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.542609][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.569064][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.598806][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.890513][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.988941][ T3951] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.996670][ T3951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.077347][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.098513][ T3951] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.106407][ T3951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.400349][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.449325][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.591154][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.627914][ T3951] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.635759][ T3951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.744448][ T3951] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.752045][ T3951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.778369][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.901292][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.915422][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.923105][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.045899][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.053605][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.377622][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.508399][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.534419][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.542050][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.654705][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.662548][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.778125][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.915182][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.922924][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.048761][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.059588][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.090428][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.098196][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.470793][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.973405][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.639572][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.825158][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.274672][ T5819] veth0_vlan: entered promiscuous mode [ 270.323260][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.469693][ T5819] veth1_vlan: entered promiscuous mode [ 270.590114][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.627395][ T5810] veth0_vlan: entered promiscuous mode [ 270.835011][ T5810] veth1_vlan: entered promiscuous mode [ 270.927448][ T5819] veth0_macvtap: entered promiscuous mode [ 271.058483][ T5819] veth1_macvtap: entered promiscuous mode [ 271.141356][ T5814] veth0_vlan: entered promiscuous mode [ 271.295851][ T5814] veth1_vlan: entered promiscuous mode [ 271.321356][ T5811] veth0_vlan: entered promiscuous mode [ 271.339674][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.370429][ T5810] veth0_macvtap: entered promiscuous mode [ 271.446637][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.460278][ T5810] veth1_macvtap: entered promiscuous mode [ 271.491934][ T5811] veth1_vlan: entered promiscuous mode [ 271.565247][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.575348][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.587805][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.597077][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.831597][ T5814] veth0_macvtap: entered promiscuous mode [ 271.860692][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.897137][ T5811] veth0_macvtap: entered promiscuous mode [ 271.946399][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.961751][ T5814] veth1_macvtap: entered promiscuous mode [ 272.028258][ T5811] veth1_macvtap: entered promiscuous mode [ 272.108854][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.118242][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.127520][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.137459][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.277753][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.327707][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.398391][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.425132][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.566028][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.575373][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.584730][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.594001][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.614136][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.623584][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.632744][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.641787][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.661155][ T5806] veth0_vlan: entered promiscuous mode [ 272.766929][ T5806] veth1_vlan: entered promiscuous mode [ 273.110875][ T5806] veth0_macvtap: entered promiscuous mode [ 273.226902][ T5806] veth1_macvtap: entered promiscuous mode [ 273.499290][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.638877][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.739448][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.751476][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.760898][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.770293][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.837231][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.846582][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.057576][ T4033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.066723][ T4033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.484997][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 280.001463][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.010512][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.382468][ T1854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.390508][ T1854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.456327][ T1854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.465423][ T1854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.540316][ T5993] input: syz1 as /devices/virtual/input/input5 [ 280.684933][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.693294][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.892389][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.900721][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.938347][ T4923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.954782][ T4923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.449140][ T4033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.460160][ T4033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.608097][ T4923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.619082][ T4923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.348819][ T6002] tipc: Started in network mode [ 282.354423][ T6002] tipc: Node identity d6a5051f877c, cluster identity 4711 [ 282.363418][ T6002] tipc: Enabled bearer , priority 0 [ 282.530891][ T6007] syzkaller0: entered promiscuous mode [ 282.536955][ T6007] syzkaller0: entered allmulticast mode [ 282.736861][ T6002] tipc: Resetting bearer [ 282.856923][ T6000] tipc: Resetting bearer [ 282.990732][ T6000] tipc: Disabling bearer [ 283.798380][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 284.197232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 284.368538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 284.652828][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 284.842966][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 284.924854][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.935683][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 284.947078][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.957225][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.971033][ T11] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 284.985064][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.067585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 285.173343][ T5864] usb 4-1: config 0 has no interfaces? [ 285.185813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 285.306536][ T5864] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 285.316148][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.325145][ T5864] usb 4-1: Product: syz [ 285.329585][ T5864] usb 4-1: Manufacturer: syz [ 285.334657][ T5864] usb 4-1: SerialNumber: syz [ 285.395557][ T11] usb 1-1: config 0 descriptor?? [ 285.462904][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.470097][ T11] usb 1-1: MIDIStreaming interface descriptor not found [ 285.515239][ T5864] usb 4-1: config 0 descriptor?? [ 285.751618][ T6041] fuse: Bad value for 'user_id' [ 285.757445][ T6041] fuse: Bad value for 'user_id' [ 285.876281][ T6023] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.340067][ T11] usb 4-1: USB disconnect, device number 2 [ 286.340162][ T24] usb 1-1: USB disconnect, device number 2 [ 286.363231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.561814][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.619776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 286.631146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.640750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.650154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.264720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.229904][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.236888][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.326451][ T6088] input: syz1 as /devices/virtual/input/input7 [ 292.779593][ T5988] udevd[5988]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 294.284178][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 294.540300][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.551119][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 294.563158][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.573444][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.586584][ T11] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 294.595925][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.825842][ T11] usb 2-1: config 0 descriptor?? [ 294.919960][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.928821][ T11] usb 2-1: MIDIStreaming interface descriptor not found [ 295.201502][ T6096] fuse: Bad value for 'user_id' [ 295.206933][ T6096] fuse: Bad value for 'user_id' [ 295.532411][ T11] usb 2-1: USB disconnect, device number 2 [ 296.047877][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.436707][ T6106] loop6: detected capacity change from 0 to 7 [ 296.516851][ T6106] Dev loop6: unable to read RDB block 7 [ 296.523858][ T6106] loop6: AHDI p1 p2 p3 p4 [ 296.528611][ T6106] loop6: partition table partially beyond EOD, truncated [ 296.537063][ T6106] loop6: p1 start 2401632844 is beyond EOD, truncated [ 296.544391][ T6106] loop6: p2 size 47 extends beyond EOD, truncated [ 296.806080][ T6106] loop6: p3 start 1886353253 is beyond EOD, truncated [ 298.906128][ T6128] input: syz1 as /devices/virtual/input/input8 [ 300.389016][ T6136] input: syz1 as /devices/virtual/input/input9 [ 301.341028][ T5988] udevd[5988]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 303.195979][ T6146] loop0: detected capacity change from 0 to 8192 [ 303.376589][ T6146] ======================================================= [ 303.376589][ T6146] WARNING: The mand mount option has been deprecated and [ 303.376589][ T6146] and is ignored by this kernel. Remove the mand [ 303.376589][ T6146] option from the mount to silence this warning. [ 303.376589][ T6146] ======================================================= [ 306.535844][ T6157] loop6: detected capacity change from 0 to 7 [ 306.608985][ T6157] Dev loop6: unable to read RDB block 7 [ 306.615400][ T6157] loop6: AHDI p1 p2 p3 p4 [ 306.620121][ T6157] loop6: partition table partially beyond EOD, truncated [ 306.628128][ T6157] loop6: p1 start 2401632844 is beyond EOD, truncated [ 306.635301][ T6157] loop6: p2 size 47 extends beyond EOD, truncated [ 306.726536][ T6157] loop6: p3 start 1886353253 is beyond EOD, truncated [ 307.791206][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 309.477481][ T6171] input: syz1 as /devices/virtual/input/input10 [ 309.749666][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.769874][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.793751][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.818251][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.842513][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.940551][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 311.148196][ T5103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.168956][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.220766][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.236614][ T5103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.248962][ T5103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.309455][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 311.474140][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.482731][ T5859] usb 3-1: config 0 has no interface number 0 [ 311.868734][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 311.878255][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.886768][ T5859] usb 3-1: Product: syz [ 311.891202][ T5859] usb 3-1: Manufacturer: syz [ 311.896206][ T5859] usb 3-1: SerialNumber: syz [ 311.983976][ T5103] Bluetooth: hci5: command tx timeout [ 312.238714][ T5859] usb 3-1: config 0 descriptor?? [ 312.363227][ T5859] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 312.372555][ T5859] usb 3-1: selecting invalid altsetting 1 [ 312.378589][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 312.985779][ T5859] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.997551][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 313.006461][ T5859] usb 3-1: media controller created [ 313.192765][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 313.363398][ T5103] Bluetooth: hci6: command tx timeout [ 313.479942][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.583109][ T6181] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 313.656112][ T6187] chnl_net:caif_netlink_parms(): no params data found [ 314.064237][ T5103] Bluetooth: hci5: command tx timeout [ 314.976079][ T5859] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 314.990759][ T5859] zl10353_read_register: readreg error (reg=127, ret==-71) [ 315.265421][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 315.452819][ T5103] Bluetooth: hci6: command tx timeout [ 315.508335][ T6204] tipc: Started in network mode [ 315.513702][ T6204] tipc: Node identity 8aec6c24b055, cluster identity 4711 [ 315.521638][ T6204] tipc: Enabled bearer , priority 0 [ 315.822638][ T6205] syzkaller0: entered promiscuous mode [ 315.828435][ T6205] syzkaller0: entered allmulticast mode [ 316.000972][ T6207] tipc: Resetting bearer [ 316.142543][ T5103] Bluetooth: hci5: command tx timeout [ 316.309175][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.326332][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.334856][ T6178] bridge_slave_0: entered allmulticast mode [ 316.344010][ T6178] bridge_slave_0: entered promiscuous mode [ 316.373911][ T6202] tipc: Resetting bearer [ 316.465237][ T6202] tipc: Disabling bearer [ 316.783935][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.791410][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.799424][ T6178] bridge_slave_1: entered allmulticast mode [ 316.808144][ T6178] bridge_slave_1: entered promiscuous mode [ 316.973065][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.980694][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.988918][ T6187] bridge_slave_0: entered allmulticast mode [ 316.997643][ T6187] bridge_slave_0: entered promiscuous mode [ 317.255569][ T5859] usb 3-1: USB disconnect, device number 2 [ 317.346048][ T6215] loop6: detected capacity change from 0 to 7 [ 317.376672][ T6215] Dev loop6: unable to read RDB block 7 [ 317.382753][ T6215] loop6: AHDI p3 p4 [ 317.387016][ T6215] loop6: partition table partially beyond EOD, truncated [ 317.395339][ T6215] loop6: p3 start 1886353253 is beyond EOD, truncated [ 317.470013][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.477769][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.485845][ T6187] bridge_slave_1: entered allmulticast mode [ 317.494730][ T6187] bridge_slave_1: entered promiscuous mode [ 317.504714][ T5103] Bluetooth: hci6: command tx timeout [ 317.525716][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.859765][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.013270][ T5859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 318.223489][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.244561][ T5103] Bluetooth: hci5: command tx timeout [ 318.628007][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.882564][ T6178] team0: Port device team_slave_0 added [ 319.112766][ T6178] team0: Port device team_slave_1 added [ 319.514245][ T6187] team0: Port device team_slave_0 added [ 319.606903][ T5103] Bluetooth: hci6: command tx timeout [ 319.665300][ T6187] team0: Port device team_slave_1 added [ 319.677390][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.686032][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.717122][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.514764][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 320.677156][ T6233] input: syz1 as /devices/virtual/input/input11 [ 320.726161][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 320.781303][ T11] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.789904][ T11] usb 3-1: config 0 has no interface number 0 [ 320.871046][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.878400][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.905248][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.951996][ T11] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 320.962275][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.970544][ T11] usb 3-1: Product: syz [ 320.975627][ T11] usb 3-1: Manufacturer: syz [ 320.980423][ T11] usb 3-1: SerialNumber: syz [ 321.072408][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.079647][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.106363][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.169840][ T11] usb 3-1: config 0 descriptor?? [ 321.276904][ T11] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 321.286074][ T11] usb 3-1: selecting invalid altsetting 1 [ 321.291962][ T11] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 321.455789][ T11] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.467020][ T11] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 321.475714][ T11] usb 3-1: media controller created [ 321.681007][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.870259][ T6178] hsr_slave_0: entered promiscuous mode [ 321.879766][ T6178] hsr_slave_1: entered promiscuous mode [ 321.888407][ T6178] debugfs: 'hsr0' already exists in 'hsr' [ 321.894413][ T6178] Cannot create hsr debugfs directory [ 322.121991][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.129545][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.161748][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.303072][ T11] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 322.310318][ T11] zl10353_read_register: readreg error (reg=127, ret==-71) [ 322.365324][ T11] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 323.236308][ T11] usb 3-1: USB disconnect, device number 4 [ 324.791067][ T6246] loop2: detected capacity change from 0 to 4096 [ 325.030234][ T6187] hsr_slave_0: entered promiscuous mode [ 325.041140][ T6187] hsr_slave_1: entered promiscuous mode [ 325.050392][ T6187] debugfs: 'hsr0' already exists in 'hsr' [ 325.056601][ T6187] Cannot create hsr debugfs directory [ 325.096356][ T6245] tipc: Started in network mode [ 325.101485][ T6245] tipc: Node identity 9a07b4805f5f, cluster identity 4711 [ 325.112565][ T6245] tipc: Enabled bearer , priority 0 [ 325.547421][ T6242] tipc: Disabling bearer [ 325.696589][ T6246] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 325.902812][ T6178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.963613][ T6246] ntfs3(loop2): Failed to load $Extend (-22). [ 325.970045][ T6246] ntfs3(loop2): Failed to initialize $Extend. [ 326.023058][ T6178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.531356][ T6178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.796859][ T6178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.749965][ T6266] loop6: detected capacity change from 0 to 7 [ 327.802713][ T6266] Dev loop6: unable to read RDB block 7 [ 327.808586][ T6266] loop6: AHDI p3 p4 [ 327.812932][ T6266] loop6: partition table partially beyond EOD, truncated [ 327.820826][ T6266] loop6: p3 start 1886353253 is beyond EOD, truncated [ 329.159245][ T6270] Zero length message leads to an empty skb [ 329.438532][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.613841][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.659674][ T6187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.752797][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.760269][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.821508][ T6187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.906592][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.914204][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.006264][ T6187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.174761][ T6187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.897281][ T6280] input: syz1 as /devices/virtual/input/input12 [ 331.124173][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 331.394272][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 331.420354][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.429228][ T9] usb 3-1: config 0 has no interface number 0 [ 331.560982][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 331.574299][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.583729][ T9] usb 3-1: Product: syz [ 331.588078][ T9] usb 3-1: Manufacturer: syz [ 331.593177][ T9] usb 3-1: SerialNumber: syz [ 331.866887][ T9] usb 3-1: config 0 descriptor?? [ 331.939533][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 331.949255][ T9] usb 3-1: selecting invalid altsetting 1 [ 331.955410][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 332.221252][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.233624][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 332.242431][ T9] usb 3-1: media controller created [ 332.509167][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.658557][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.056563][ T6187] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.160487][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 333.169491][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 333.241484][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.249649][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.323828][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 333.454724][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.462489][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.836484][ T9] usb 3-1: USB disconnect, device number 5 [ 334.694592][ T6296] tipc: Started in network mode [ 334.699848][ T6296] tipc: Node identity 6aee212257f8, cluster identity 4711 [ 334.725013][ T6296] tipc: Enabled bearer , priority 0 [ 334.824817][ T6295] syzkaller0: entered promiscuous mode [ 334.830620][ T6295] syzkaller0: entered allmulticast mode [ 335.028350][ T6296] tipc: Resetting bearer [ 335.108485][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.229455][ T6293] tipc: Resetting bearer [ 335.301810][ T6293] tipc: Disabling bearer [ 336.820148][ T6308] loop6: detected capacity change from 0 to 7 [ 336.900652][ T6308] Dev loop6: unable to read RDB block 7 [ 336.907351][ T6308] loop6: AHDI p3 p4 [ 336.911564][ T6308] loop6: partition table partially beyond EOD, truncated [ 336.920039][ T6308] loop6: p3 start 1886353253 is beyond EOD, truncated [ 337.443373][ T3951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.738582][ T3951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.956507][ T3951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.300557][ T6315] input: syz1 as /devices/virtual/input/input13 [ 338.369857][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.765190][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 338.774919][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 339.307233][ T3951] bridge_slave_1: left allmulticast mode [ 339.313500][ T3951] bridge_slave_1: left promiscuous mode [ 339.320169][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.498552][ T3951] bridge_slave_0: left allmulticast mode [ 339.507853][ T3951] bridge_slave_0: left promiscuous mode [ 339.514825][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.576938][ T5859] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 340.613972][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.691841][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.720707][ T3951] bond0 (unregistering): Released all slaves [ 340.782658][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 340.828513][ T5859] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.837207][ T5859] usb 3-1: config 0 has no interface number 0 [ 340.940322][ T5859] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 340.951147][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.959843][ T5859] usb 3-1: Product: syz [ 340.964449][ T5859] usb 3-1: Manufacturer: syz [ 340.969362][ T5859] usb 3-1: SerialNumber: syz [ 341.056343][ T3951] tipc: Left network mode [ 341.248360][ T5859] usb 3-1: config 0 descriptor?? [ 341.295840][ T5859] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 341.311405][ T5859] usb 3-1: selecting invalid altsetting 1 [ 341.319016][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 341.445467][ T30] audit: type=1800 audit(1753784551.839:2): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.91" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 341.511167][ T5859] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.522790][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 341.531444][ T5859] usb 3-1: media controller created [ 341.717611][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.897181][ T3951] hsr_slave_0: left promiscuous mode [ 341.937831][ T3951] hsr_slave_1: left promiscuous mode [ 341.946626][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.955975][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.106331][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.114441][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.212680][ T5859] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 342.226093][ T5859] zl10353_read_register: readreg error (reg=127, ret==-71) [ 342.283275][ T5859] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 342.293088][ T3951] veth1_macvtap: left promiscuous mode [ 342.298891][ T3951] veth0_macvtap: left promiscuous mode [ 342.305660][ T3951] veth1_vlan: left promiscuous mode [ 342.311304][ T3951] veth0_vlan: left promiscuous mode [ 343.053024][ T5859] usb 3-1: USB disconnect, device number 6 [ 344.292768][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 344.330175][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 344.546799][ T6369] loop6: detected capacity change from 0 to 7 [ 344.613394][ T6369] Dev loop6: unable to read RDB block 7 [ 344.619677][ T6369] loop6: AHDI p3 p4 [ 344.624198][ T6369] loop6: partition table partially beyond EOD, truncated [ 344.632890][ T6369] loop6: p3 start 1886353253 is beyond EOD, truncated [ 345.005829][ T6178] veth0_vlan: entered promiscuous mode [ 345.014776][ T6352] tipc: Enabled bearer , priority 0 [ 345.057413][ T6349] tipc: Disabling bearer [ 345.167135][ T5859] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 345.244974][ T6178] veth1_vlan: entered promiscuous mode [ 345.352940][ T5859] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.361317][ T5859] usb 1-1: config 0 has no interface number 0 [ 345.368885][ T5859] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.380434][ T5859] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 345.391773][ T5859] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.405386][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.625186][ T5859] usb 1-1: config 0 descriptor?? [ 345.639452][ T6371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 345.668418][ T3951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.756728][ T5859] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.977783][ T3951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.108713][ T6178] veth0_macvtap: entered promiscuous mode [ 346.215809][ T9] usb 1-1: USB disconnect, device number 3 [ 346.217365][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 346.284276][ T3951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.412596][ T6178] veth1_macvtap: entered promiscuous mode [ 346.503309][ T3951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.834662][ T6379] input: syz1 as /devices/virtual/input/input14 [ 346.934566][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.207057][ T6187] veth0_vlan: entered promiscuous mode [ 347.311089][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.410682][ T6187] veth1_vlan: entered promiscuous mode [ 347.490150][ T6178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.499722][ T6178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.528086][ T6178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.537565][ T6178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.580292][ T3951] bridge_slave_1: left allmulticast mode [ 347.586634][ T3951] bridge_slave_1: left promiscuous mode [ 347.593431][ T3951] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.655002][ T3951] bridge_slave_0: left allmulticast mode [ 347.660972][ T3951] bridge_slave_0: left promiscuous mode [ 347.670916][ T3951] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.183971][ T6390] input: syz1 as /devices/virtual/input/input15 [ 348.914616][ T3951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.002712][ T3951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.073105][ T3951] bond0 (unregistering): Released all slaves [ 349.405323][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 349.654296][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 349.713402][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.721752][ T5866] usb 2-1: config 0 has no interface number 0 [ 349.832313][ T5866] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 349.841854][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.850389][ T5866] usb 2-1: Product: syz [ 349.854899][ T5866] usb 2-1: Manufacturer: syz [ 349.859770][ T5866] usb 2-1: SerialNumber: syz [ 349.947867][ T5866] usb 2-1: config 0 descriptor?? [ 350.014884][ T5866] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 350.024150][ T5866] usb 2-1: selecting invalid altsetting 1 [ 350.030198][ T5866] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 350.116759][ T6408] process 'syz.0.105' launched './file0' with NULL argv: empty string added [ 350.140357][ T6187] veth0_macvtap: entered promiscuous mode [ 350.228686][ T5866] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 350.240134][ T5866] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 350.248931][ T5866] usb 2-1: media controller created [ 350.284156][ T3951] hsr_slave_0: left promiscuous mode [ 350.319218][ T3951] hsr_slave_1: left promiscuous mode [ 350.328774][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.336805][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.427551][ T3951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.436145][ T3951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.462791][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.643817][ T3951] veth1_macvtap: left promiscuous mode [ 350.649854][ T3951] veth0_macvtap: left promiscuous mode [ 350.656068][ T3951] veth1_vlan: left promiscuous mode [ 350.661683][ T3951] veth0_vlan: left promiscuous mode [ 350.786931][ T5866] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 350.794676][ T5866] zl10353_read_register: readreg error (reg=127, ret==-71) [ 350.875751][ T5866] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 351.303048][ T5866] usb 2-1: USB disconnect, device number 3 [ 352.186129][ T6418] loop6: detected capacity change from 0 to 7 [ 352.207056][ T3951] team0 (unregistering): Port device team_slave_1 removed [ 352.229679][ T6418] Dev loop6: unable to read RDB block 7 [ 352.236106][ T6418] loop6: AHDI p3 p4 [ 352.240442][ T6418] loop6: partition table partially beyond EOD, truncated [ 352.249023][ T6418] loop6: p3 start 1886353253 is beyond EOD, truncated [ 352.352848][ T3951] team0 (unregistering): Port device team_slave_0 removed [ 352.473919][ T5866] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 352.668852][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.677565][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.864703][ T6187] veth1_macvtap: entered promiscuous mode [ 353.133232][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.144319][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 353.155710][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.166002][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.182951][ T5866] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 353.194548][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.225687][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.412581][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.493301][ T5866] usb 1-1: config 0 descriptor?? [ 353.541377][ T6187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.551391][ T6187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.560704][ T6187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.570008][ T6187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.615863][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.624732][ T5866] usb 1-1: MIDIStreaming interface descriptor not found [ 354.197277][ T5866] usb 1-1: USB disconnect, device number 4 [ 355.153669][ T6438] input: syz1 as /devices/virtual/input/input16 [ 356.217041][ T6453] input: syz1 as /devices/virtual/input/input17 [ 358.449101][ T6461] Invalid ELF header magic: != ELF [ 359.872495][ T5928] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.073826][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 360.098626][ T5928] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 360.108838][ T5928] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 360.119393][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.130898][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.145105][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.160389][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 360.169889][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.436012][ T5928] usb 3-1: config 0 descriptor?? [ 360.904118][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 360.910861][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 361.001645][ T5928] usb 3-1: USB disconnect, device number 7 [ 361.099234][ T6483] loop0: detected capacity change from 0 to 8192 [ 362.675322][ T6510] input: syz1 as /devices/virtual/input/input18 [ 363.270212][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.278597][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.659955][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.668687][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.777925][ T6521] input: syz1 as /devices/virtual/input/input19 [ 364.965927][ T6536] loop6: detected capacity change from 0 to 7 [ 364.991022][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.999495][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.103549][ T6536] Dev loop6: unable to read RDB block 7 [ 365.109520][ T6536] loop6: AHDI p3 p4 [ 365.114127][ T6536] loop6: partition table partially beyond EOD, truncated [ 365.122685][ T6536] loop6: p3 start 1886353253 is beyond EOD, truncated [ 365.180667][ T6534] input: syz1 as /devices/virtual/input/input20 [ 365.497970][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.507830][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.684831][ T6547] tipc: Enabled bearer , priority 0 [ 366.761956][ T6551] syzkaller0: entered promiscuous mode [ 366.767940][ T6551] syzkaller0: entered allmulticast mode [ 366.772629][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 366.881258][ T6547] tipc: Resetting bearer [ 366.941971][ T6544] tipc: Resetting bearer [ 367.022405][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 367.027840][ T6544] tipc: Disabling bearer [ 367.060475][ T9] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 367.070068][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 367.079726][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.091151][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.101941][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.121068][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 367.130745][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.311658][ T9] usb 6-1: config 0 descriptor?? [ 367.776583][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 367.785357][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 367.876349][ T9] usb 6-1: USB disconnect, device number 2 [ 369.659536][ T6561] input: syz1 as /devices/virtual/input/input21 [ 370.024981][ T6568] input: syz1 as /devices/virtual/input/input22 [ 370.159862][ T6570] loop2: detected capacity change from 0 to 8 [ 370.784025][ T6570] SQUASHFS error: lzo decompression failed, data probably corrupt [ 370.798493][ T6570] SQUASHFS error: Failed to read block 0x71: -5 [ 370.807593][ T6570] SQUASHFS error: lzo decompression failed, data probably corrupt [ 370.815912][ T6570] SQUASHFS error: Failed to read block 0x71: -5 [ 370.833551][ T30] audit: type=1800 audit(1753784581.249:3): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 371.421458][ T6579] loop6: detected capacity change from 0 to 7 [ 371.485000][ T6579] Dev loop6: unable to read RDB block 7 [ 371.491211][ T6579] loop6: AHDI p3 p4 [ 371.495841][ T6579] loop6: partition table partially beyond EOD, truncated [ 371.510204][ T6579] loop6: p3 start 1886353253 is beyond EOD, truncated [ 371.588254][ T6582] input: syz1 as /devices/virtual/input/input23 [ 372.013143][ T6588] tipc: Enabled bearer , priority 0 [ 372.099185][ T6589] syzkaller0: entered promiscuous mode [ 372.105410][ T6589] syzkaller0: entered allmulticast mode [ 372.310986][ T6588] tipc: Resetting bearer [ 372.497719][ T6587] tipc: Resetting bearer [ 372.611212][ T6587] tipc: Disabling bearer [ 372.922631][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 373.146935][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 373.181593][ T5928] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 373.191047][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 373.200659][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.212252][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.222481][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.235808][ T5928] usb 2-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 373.245718][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.561293][ T5928] usb 2-1: config 0 descriptor?? [ 374.029105][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 374.036049][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 374.116858][ T5928] usb 2-1: USB disconnect, device number 4 [ 374.257696][ T6610] input: syz1 as /devices/virtual/input/input24 [ 374.334424][ T6615] input: syz1 as /devices/virtual/input/input25 [ 375.753430][ T6627] input: syz1 as /devices/virtual/input/input26 [ 375.800187][ T6630] loop5: detected capacity change from 0 to 2048 [ 376.205080][ T6630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.382585][ T6631] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 376.472656][ T6631] kernel profiling enabled (shift: 17) [ 376.545553][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.152'. [ 376.585164][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.152'. [ 377.238504][ T6639] loop6: detected capacity change from 0 to 7 [ 377.290065][ T6187] Dev loop6: unable to read RDB block 7 [ 377.296431][ T6187] loop6: AHDI p3 p4 [ 377.300648][ T6187] loop6: partition table partially beyond EOD, truncated [ 377.309804][ T6187] loop6: p3 start 1886353253 is beyond EOD, truncated [ 377.443317][ T6639] Dev loop6: unable to read RDB block 7 [ 377.454145][ T6639] loop6: AHDI p3 p4 [ 377.458367][ T6639] loop6: partition table partially beyond EOD, truncated [ 377.469109][ T6639] loop6: p3 start 1886353253 is beyond EOD, truncated [ 377.785132][ T6643] tipc: Started in network mode [ 377.790471][ T6643] tipc: Node identity d68f7ff40826, cluster identity 4711 [ 377.799136][ T6643] tipc: Enabled bearer , priority 0 [ 377.935743][ T6643] syzkaller0: entered promiscuous mode [ 377.941555][ T6643] syzkaller0: entered allmulticast mode [ 378.032381][ T6644] tipc: Resetting bearer [ 378.152945][ T6642] tipc: Resetting bearer [ 378.261678][ T6642] tipc: Disabling bearer [ 379.086740][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 379.158448][ T6658] input: syz1 as /devices/virtual/input/input27 [ 379.272865][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 379.359634][ T5928] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 379.369033][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 379.379116][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.395077][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.406833][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.420321][ T5928] usb 2-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 379.430011][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.525534][ T6671] input: syz1 as /devices/virtual/input/input28 [ 379.818591][ T5928] usb 2-1: config 0 descriptor?? [ 380.263927][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 380.270671][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 380.318375][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 380.325982][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 380.329672][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 380.374613][ T5928] usb 2-1: USB disconnect, device number 5 [ 380.850339][ T6677] input: syz1 as /devices/virtual/input/input29 [ 382.806103][ T6693] loop6: detected capacity change from 0 to 7 [ 382.897161][ T6693] Dev loop6: unable to read RDB block 7 [ 382.903397][ T6693] loop6: AHDI p3 p4 [ 382.907603][ T6693] loop6: partition table partially beyond EOD, truncated [ 382.916405][ T6693] loop6: p3 start 1886353253 is beyond EOD, truncated [ 383.034122][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 383.244239][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 383.280990][ T11] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.294888][ T11] usb 7-1: config 0 has no interface number 0 [ 383.368992][ T11] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 383.378999][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.391656][ T11] usb 7-1: Product: syz [ 383.398566][ T11] usb 7-1: Manufacturer: syz [ 383.405032][ T11] usb 7-1: SerialNumber: syz [ 383.563575][ T11] usb 7-1: config 0 descriptor?? [ 383.597664][ T11] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 383.608766][ T11] usb 7-1: selecting invalid altsetting 1 [ 383.615151][ T11] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 383.745989][ T11] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.757709][ T11] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 383.766638][ T11] usb 7-1: media controller created [ 383.939502][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.124748][ T11] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 384.132342][ T11] zl10353_read_register: readreg error (reg=127, ret==-71) [ 384.172612][ T11] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 384.804969][ T6702] tipc: Enabled bearer , priority 0 [ 384.851590][ T11] usb 7-1: USB disconnect, device number 2 [ 384.866408][ T6705] syzkaller0: entered promiscuous mode [ 384.872593][ T6705] syzkaller0: entered allmulticast mode [ 385.053520][ T6701] tipc: Resetting bearer [ 385.178785][ T6701] tipc: Disabling bearer [ 386.039670][ T6714] input: syz1 as /devices/virtual/input/input30 [ 386.348736][ T6717] input: syz1 as /devices/virtual/input/input31 [ 386.522796][ T6045] udevd[6045]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 386.535030][ T5864] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 386.769806][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 386.849178][ T5864] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 386.859038][ T5864] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 386.873742][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.886692][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.897311][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.910702][ T5864] usb 3-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 386.920346][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.203686][ T5864] usb 3-1: config 0 descriptor?? [ 387.680107][ T6734] input: syz1 as /devices/virtual/input/input32 [ 387.756760][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 387.764549][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 387.872626][ T5864] usb 3-1: USB disconnect, device number 8 [ 388.691874][ T6739] loop6: detected capacity change from 0 to 7 [ 388.759644][ T6739] Dev loop6: unable to read RDB block 7 [ 388.766064][ T6739] loop6: AHDI p3 p4 [ 388.771101][ T6739] loop6: partition table partially beyond EOD, truncated [ 388.781898][ T6739] loop6: p3 start 1886353253 is beyond EOD, truncated [ 389.695203][ T5928] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 389.925664][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 389.981143][ T5928] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.989750][ T5928] usb 3-1: config 0 has no interface number 0 [ 390.062378][ T5928] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 390.071888][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.080517][ T5928] usb 3-1: Product: syz [ 390.085181][ T5928] usb 3-1: Manufacturer: syz [ 390.090051][ T5928] usb 3-1: SerialNumber: syz [ 390.254902][ T5928] usb 3-1: config 0 descriptor?? [ 390.292188][ T5928] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 390.301345][ T5928] usb 3-1: selecting invalid altsetting 1 [ 390.307703][ T5928] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 390.325056][ T6750] tipc: Enabled bearer , priority 0 [ 390.356000][ T6750] syzkaller0: entered promiscuous mode [ 390.361808][ T6750] syzkaller0: entered allmulticast mode [ 390.406228][ T6750] tipc: Resetting bearer [ 390.428818][ T5928] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 390.440309][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 390.455555][ T5928] usb 3-1: media controller created [ 390.501166][ T6748] tipc: Resetting bearer [ 390.531976][ T6748] tipc: Disabling bearer [ 390.627178][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.119778][ T5928] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 391.129131][ T5928] zl10353_read_register: readreg error (reg=127, ret==-71) [ 391.140903][ T5928] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 391.865524][ T5928] usb 3-1: USB disconnect, device number 9 [ 391.916460][ T6764] input: syz1 as /devices/virtual/input/input33 [ 393.412694][ T5864] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 393.569817][ T6786] input: syz1 as /devices/virtual/input/input34 [ 393.632477][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 393.663975][ T5864] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 393.673165][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 393.682882][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.694282][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.704603][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.718326][ T5864] usb 1-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 393.733620][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.002673][ T6783] loop2: detected capacity change from 0 to 4096 [ 394.027531][ T6783] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.045489][ T5864] usb 1-1: config 0 descriptor?? [ 394.570711][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 394.579213][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 394.663920][ T5864] usb 1-1: USB disconnect, device number 5 [ 395.115262][ T6795] loop6: detected capacity change from 0 to 7 [ 395.171987][ T6795] Dev loop6: unable to read RDB block 7 [ 395.178218][ T6795] loop6: AHDI p3 p4 [ 395.182890][ T6795] loop6: partition table partially beyond EOD, truncated [ 395.191220][ T6795] loop6: p3 start 1886353253 is beyond EOD, truncated [ 395.202605][ T6783] EXT4-fs (loop2): Test dummy encryption mode enabled [ 395.392644][ T6783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.665872][ T6783] fs-verity: sha512 using implementation "sha512-generic" [ 396.127600][ T6804] tipc: Enabled bearer , priority 0 [ 396.234374][ T6806] syzkaller0: entered promiscuous mode [ 396.240392][ T6806] syzkaller0: entered allmulticast mode [ 396.357091][ T6783] syz.2.198 (6783) used greatest stack depth: 4728 bytes left [ 396.377847][ T6804] tipc: Resetting bearer [ 396.456089][ T6803] tipc: Resetting bearer [ 396.483528][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.578848][ T6803] tipc: Disabling bearer [ 396.963933][ T6817] input: syz1 as /devices/virtual/input/input35 [ 397.131801][ T5928] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 397.342797][ T5928] usb 7-1: Using ep0 maxpacket: 32 [ 397.402800][ T5928] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.411145][ T5928] usb 7-1: config 0 has no interface number 0 [ 397.522853][ T5928] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 397.532761][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.541067][ T5928] usb 7-1: Product: syz [ 397.545700][ T5928] usb 7-1: Manufacturer: syz [ 397.550581][ T5928] usb 7-1: SerialNumber: syz [ 397.710839][ T5928] usb 7-1: config 0 descriptor?? [ 397.800637][ T5928] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 397.810566][ T5928] usb 7-1: selecting invalid altsetting 1 [ 397.816823][ T5928] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 398.023307][ T5928] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 398.041227][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 398.051906][ T5928] usb 7-1: media controller created [ 398.229507][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.328479][ T6830] input: syz1 as /devices/virtual/input/input36 [ 398.768181][ T5928] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 398.776264][ T5928] zl10353_read_register: readreg error (reg=127, ret==-71) [ 398.824998][ T5928] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 398.827602][ T6835] loop2: detected capacity change from 0 to 1024 [ 399.099834][ T6835] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 399.110568][ T6835] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 399.120934][ T6835] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.211: Failed to acquire dquot type 0 [ 399.229072][ T6835] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 399.250266][ T6835] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #13: comm syz.2.211: corrupted inode contents [ 399.395469][ T6835] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #13: comm syz.2.211: mark_inode_dirty error [ 399.473088][ T6835] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #13: comm syz.2.211: corrupted inode contents [ 399.531273][ T6835] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.211: mark_inode_dirty error [ 399.592848][ T6835] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #13: comm syz.2.211: corrupted inode contents [ 399.652797][ T6835] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 399.694032][ T5928] usb 7-1: USB disconnect, device number 3 [ 399.719697][ T6835] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #13: comm syz.2.211: corrupted inode contents [ 399.799290][ T6835] EXT4-fs error (device loop2): ext4_truncate:4592: inode #13: comm syz.2.211: mark_inode_dirty error [ 399.897344][ T6835] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 400.035969][ T6835] EXT4-fs (loop2): 1 truncate cleaned up [ 400.044311][ T6835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.432587][ T6835] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 400.554921][ T6850] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 400.729450][ T6853] loop6: detected capacity change from 0 to 7 [ 400.732699][ T6850] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 400.745474][ T6850] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 400.755692][ T6850] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.211: Failed to acquire dquot type 0 [ 400.809301][ T6853] Dev loop6: unable to read RDB block 7 [ 400.816130][ T6853] loop6: AHDI p3 p4 [ 400.820470][ T6853] loop6: partition table partially beyond EOD, truncated [ 400.829008][ T6853] loop6: p3 start 1886353253 is beyond EOD, truncated [ 400.859259][ T6850] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 401.323104][ T6855] loop1: detected capacity change from 0 to 2048 [ 401.367730][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 401.475662][ T6855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.517917][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 401.607284][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 401.698664][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 401.786686][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 401.826560][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 401.864913][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 402.025821][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 402.131813][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 402.417442][ T6862] input: syz1 as /devices/virtual/input/input37 [ 402.721754][ T6865] loop6: detected capacity change from 0 to 128 [ 402.964422][ T6865] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.038778][ T6865] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.224447][ T6865] EXT4-fs (loop6): shut down requested (0) [ 403.357415][ T5864] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 403.602478][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 403.648043][ T5864] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.656576][ T5864] usb 6-1: config 0 has no interface number 0 [ 403.780028][ T6187] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.788044][ T5864] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 403.798753][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.807209][ T5864] usb 6-1: Product: syz [ 403.811665][ T5864] usb 6-1: Manufacturer: syz [ 403.816794][ T5864] usb 6-1: SerialNumber: syz [ 404.021975][ T5864] usb 6-1: config 0 descriptor?? [ 404.096496][ T5864] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 404.106396][ T5864] usb 6-1: selecting invalid altsetting 1 [ 404.112743][ T5864] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 404.145451][ T6880] input: syz1 as /devices/virtual/input/input38 [ 404.253763][ T5864] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 404.265225][ T5864] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 404.280250][ T5864] usb 6-1: media controller created [ 404.531267][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.943571][ T5864] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 404.951203][ T5864] zl10353_read_register: readreg error (reg=127, ret==-71) [ 405.053542][ T5864] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 405.603396][ T5864] usb 6-1: USB disconnect, device number 3 [ 405.768546][ T5810] EXT4-fs error: 173 callbacks suppressed [ 405.768666][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 405.833271][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 405.871251][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 405.924758][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 406.071821][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 406.192491][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 406.279468][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 406.349927][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 406.410087][ T5810] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /49/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 406.545578][ T6899] syz.5.229 uses obsolete (PF_INET,SOCK_PACKET) [ 406.552748][ T5810] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 407.256121][ T6906] loop6: detected capacity change from 0 to 7 [ 407.327736][ T6906] Dev loop6: unable to read RDB block 7 [ 407.334842][ T6906] loop6: AHDI p3 p4 [ 407.339139][ T6906] loop6: partition table partially beyond EOD, truncated [ 407.355693][ T6906] loop6: p3 start 1886353253 is beyond EOD, truncated [ 407.846660][ T4117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.159415][ T4117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.378002][ T4117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.598032][ T4117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.022006][ T4117] bridge_slave_1: left allmulticast mode [ 409.028183][ T4117] bridge_slave_1: left promiscuous mode [ 409.035449][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.057380][ T4117] bridge_slave_0: left allmulticast mode [ 409.064647][ T4117] bridge_slave_0: left promiscuous mode [ 409.071334][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.782583][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.858606][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.874912][ T4117] bond0 (unregistering): Released all slaves [ 409.990279][ T4117] tipc: Left network mode [ 410.401717][ T4117] hsr_slave_0: left promiscuous mode [ 410.410953][ T4117] hsr_slave_1: left promiscuous mode [ 410.423511][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.431312][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.485826][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.493919][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.562919][ T4117] veth1_macvtap: left promiscuous mode [ 410.568769][ T4117] veth0_macvtap: left promiscuous mode [ 410.575087][ T4117] veth1_vlan: left promiscuous mode [ 410.580702][ T4117] veth0_vlan: left promiscuous mode [ 411.385363][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 411.478339][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 413.160073][ T6930] bridge1: entered promiscuous mode [ 413.165728][ T6930] bridge1: entered allmulticast mode [ 415.028947][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.035766][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.658242][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.669367][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.685261][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.709963][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.724200][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.812610][ T1914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.069963][ T6940] loop0: detected capacity change from 0 to 512 [ 416.165029][ T1914] usb 2-1: Using ep0 maxpacket: 32 [ 416.177356][ T1914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.188729][ T1914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.198966][ T1914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 416.208783][ T1914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.225360][ T11] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 416.269176][ T6940] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.239: casefold flag without casefold feature [ 416.324027][ T6940] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.239: couldn't read orphan inode 15 (err -117) [ 416.402976][ T1914] usb 2-1: config 0 descriptor?? [ 416.416515][ T6940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.477651][ T11] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 416.486556][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 416.497653][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.508512][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 416.520739][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.578052][ T30] audit: type=1800 audit(1753784626.999:4): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 416.749907][ T11] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 416.758078][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 416.770972][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.781978][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 416.793841][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.888517][ T1914] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 416.896018][ T1914] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 416.903435][ T1914] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 416.910670][ T1914] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 416.918079][ T1914] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 416.977781][ T11] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 416.985866][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 416.996397][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.006566][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 417.018001][ T11] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 417.125876][ T1914] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 417.174350][ T1914] kone 0003:1E7D:2CED.0001: couldn't init struct kone_device [ 417.187586][ T1914] kone 0003:1E7D:2CED.0001: couldn't install mouse [ 417.245440][ T11] usb 7-1: string descriptor 0 read error: -22 [ 417.252648][ T11] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.261889][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.290133][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.361644][ T1914] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -5 [ 417.466158][ T1914] usb 2-1: USB disconnect, device number 6 [ 417.487657][ T11] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 417.708655][ T11] usb 7-1: USB disconnect, device number 4 [ 417.767771][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 417.822556][ T5816] Bluetooth: hci0: command tx timeout [ 418.294082][ T5928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 418.546609][ T5928] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 418.586169][ T5928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.595568][ T5928] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.607199][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.671527][ T6953] ===================================================== [ 418.679134][ T6953] BUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 [ 418.686866][ T6953] pptp_xmit+0xc34/0x2720 [ 418.691492][ T6953] ppp_input+0x1d9/0xe60 [ 418.696260][ T6953] pppoe_rcv_core+0x1e8/0x760 [ 418.701402][ T6953] sk_backlog_rcv+0x142/0x420 [ 418.706609][ T6953] __release_sock+0x1d3/0x330 [ 418.711667][ T6953] release_sock+0x6b/0x270 [ 418.716529][ T6953] pppoe_sendmsg+0x15d/0xcb0 [ 418.721889][ T6953] __sock_sendmsg+0x330/0x3d0 [ 418.727076][ T6953] ____sys_sendmsg+0x893/0xd80 [ 418.732376][ T6953] ___sys_sendmsg+0x271/0x3b0 [ 418.737302][ T6953] __sys_sendmmsg+0x3bf/0x7c0 [ 418.742398][ T6953] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 418.748386][ T6953] ia32_sys_call+0x39e0/0x4310 [ 418.753646][ T6953] __do_fast_syscall_32+0xb0/0x150 [ 418.755557][ T5928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.759043][ T6953] do_fast_syscall_32+0x38/0x80 [ 418.768449][ T5928] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.773212][ T6953] do_SYSENTER_32+0x1f/0x30 [ 418.784264][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.788772][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.802748][ T6953] [ 418.804217][ T6948] fido_id[6948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 418.805236][ T6953] Uninit was created at: [ 418.824822][ T6953] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 418.831609][ T6953] kmalloc_reserve+0x22f/0x4b0 [ 418.836902][ T6953] pskb_expand_head+0x1fc/0x1610 [ 418.842322][ T6953] skb_realloc_headroom+0x152/0x2d0 [ 418.847854][ T6953] pptp_xmit+0x9d4/0x2720 [ 418.852630][ T6953] ppp_input+0x1d9/0xe60 [ 418.857311][ T6953] pppoe_rcv_core+0x1e8/0x760 [ 418.862544][ T6953] sk_backlog_rcv+0x142/0x420 [ 418.867570][ T6953] __release_sock+0x1d3/0x330 [ 418.872664][ T6953] release_sock+0x6b/0x270 [ 418.877365][ T6953] pppoe_sendmsg+0x15d/0xcb0 [ 418.882558][ T6953] __sock_sendmsg+0x330/0x3d0 [ 418.887578][ T6953] ____sys_sendmsg+0x893/0xd80 [ 418.893054][ T6953] ___sys_sendmsg+0x271/0x3b0 [ 418.897971][ T6953] __sys_sendmmsg+0x3bf/0x7c0 [ 418.903134][ T6953] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 418.909023][ T6953] ia32_sys_call+0x39e0/0x4310 [ 418.914261][ T6953] __do_fast_syscall_32+0xb0/0x150 [ 418.919613][ T6953] do_fast_syscall_32+0x38/0x80 [ 418.923149][ T5928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.924901][ T6953] do_SYSENTER_32+0x1f/0x30 [ 418.934044][ T5928] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.938448][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.949543][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.956042][ T6953] [ 418.956117][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.242 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(none) [ 418.977677][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.988399][ T6953] ===================================================== [ 418.995740][ T6953] Disabling lock debugging due to kernel taint [ 419.002290][ T6953] Kernel panic - not syncing: kmsan.panic set ... [ 419.008915][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.242 Tainted: G B 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(none) [ 419.022401][ T6953] Tainted: [B]=BAD_PAGE [ 419.026733][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.036987][ T6953] Call Trace: [ 419.040415][ T6953] [ 419.043475][ T6953] __dump_stack+0x26/0x30 [ 419.048035][ T6953] dump_stack_lvl+0x53/0x270 [ 419.052851][ T6953] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.058912][ T6953] dump_stack+0x1e/0x25 [ 419.063284][ T6953] panic+0x4bd/0xd50 [ 419.067439][ T6953] kmsan_report+0x31c/0x320 [ 419.072152][ T6953] ? __msan_warning+0x1b/0x30 [ 419.077008][ T6953] ? pptp_xmit+0xc34/0x2720 [ 419.081778][ T6953] ? ppp_input+0x1d9/0xe60 [ 419.086446][ T6953] ? pppoe_rcv_core+0x1e8/0x760 [ 419.091542][ T6953] ? sk_backlog_rcv+0x142/0x420 [ 419.096995][ T6953] ? __release_sock+0x1d3/0x330 [ 419.102068][ T6953] ? release_sock+0x6b/0x270 [ 419.106849][ T6953] ? pppoe_sendmsg+0x15d/0xcb0 [ 419.111841][ T6953] ? __sock_sendmsg+0x330/0x3d0 [ 419.116989][ T6953] ? ____sys_sendmsg+0x893/0xd80 [ 419.122142][ T6953] ? ___sys_sendmsg+0x271/0x3b0 [ 419.127229][ T6953] ? __sys_sendmmsg+0x3bf/0x7c0 [ 419.132304][ T6953] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 419.138361][ T6953] ? ia32_sys_call+0x39e0/0x4310 [ 419.143498][ T6953] ? __do_fast_syscall_32+0xb0/0x150 [ 419.149002][ T6953] ? do_fast_syscall_32+0x38/0x80 [ 419.154249][ T6953] ? do_SYSENTER_32+0x1f/0x30 [ 419.159129][ T6953] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.165864][ T6953] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 419.172469][ T6953] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 419.178812][ T6953] ? kmem_cache_free+0x3ef/0xec0 [ 419.183991][ T6953] ? __kfree_skb+0x20b/0x260 [ 419.188813][ T6953] ? kmsan_get_metadata+0xfb/0x160 [ 419.194146][ T6953] __msan_warning+0x1b/0x30 [ 419.198831][ T6953] pptp_xmit+0xc34/0x2720 [ 419.203451][ T6953] ? __pfx_pptp_xmit+0x10/0x10 [ 419.208484][ T6953] ppp_input+0x1d9/0xe60 [ 419.213009][ T6953] ? kmsan_get_metadata+0xfb/0x160 [ 419.218382][ T6953] pppoe_rcv_core+0x1e8/0x760 [ 419.223315][ T6953] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 419.228773][ T6953] sk_backlog_rcv+0x142/0x420 [ 419.233736][ T6953] __release_sock+0x1d3/0x330 [ 419.238691][ T6953] release_sock+0x6b/0x270 [ 419.243310][ T6953] pppoe_sendmsg+0x15d/0xcb0 [ 419.248152][ T6953] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 419.253522][ T6953] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 419.258865][ T6953] __sock_sendmsg+0x330/0x3d0 [ 419.263788][ T6953] ____sys_sendmsg+0x893/0xd80 [ 419.268794][ T6953] ___sys_sendmsg+0x271/0x3b0 [ 419.273694][ T6953] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.279723][ T6953] ? __rcu_read_unlock+0x6d/0xd0 [ 419.284867][ T6953] ? __fget_files+0x3b4/0x4a0 [ 419.289762][ T6953] ? __fget_files+0x3b9/0x4a0 [ 419.294655][ T6953] ? kmsan_get_metadata+0xfb/0x160 [ 419.299974][ T6953] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.306018][ T6953] __sys_sendmmsg+0x3bf/0x7c0 [ 419.310908][ T6953] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.316947][ T6953] ? kmsan_get_metadata+0xfb/0x160 [ 419.322316][ T6953] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 419.328219][ T6953] ia32_sys_call+0x39e0/0x4310 [ 419.333204][ T6953] __do_fast_syscall_32+0xb0/0x150 [ 419.338566][ T6953] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 419.344500][ T6953] do_fast_syscall_32+0x38/0x80 [ 419.349568][ T6953] do_SYSENTER_32+0x1f/0x30 [ 419.354281][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.360853][ T6953] RIP: 0023:0xf70ae539 [ 419.365090][ T6953] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 419.384921][ T6953] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 419.393558][ T6953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 419.401694][ T6953] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.409816][ T6953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.417961][ T6953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 419.426092][ T6953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.434252][ T6953] [ 419.438003][ T6953] Kernel Offset: disabled [ 419.442467][ T6953] Rebooting in 86400 seconds..