last executing test programs: 12m28.983206779s ago: executing program 4 (id=510): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) r0 = getpid() mlock(&(0x7f00008dc000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x80000d, 0x0, 0x9, 0x1, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 12m27.285225566s ago: executing program 4 (id=514): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 12m26.943619595s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02"], 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x8814) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x2, 0x0) tkill(0x0, 0x37) ioprio_get$pid(0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc000000080049f7001c0000000000029078ac1e0001e0000001177c9078ac141430"], 0x0) mmap(&(0x7f00005fe000/0x3000)=nil, 0x3000, 0x3000000, 0x6031, 0xffffffffffffffff, 0xb528c000) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 12m20.50995529s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e204e00", 0x57}], 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e5c5741f92c5f4b5ba3f", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250b00000018000180140002006c6f00"/37], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12m18.253883701s ago: executing program 4 (id=527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) clock_getres(0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r4}, 0x38) 12m15.512068776s ago: executing program 4 (id=531): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xa}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 11m58.974362485s ago: executing program 32 (id=531): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xa}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 7m53.15250405s ago: executing program 2 (id=943): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) r0 = getpid() mlock(&(0x7f00008dc000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 7m51.216680073s ago: executing program 2 (id=945): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0x34}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000280)="f55413f76e1c9edbd98de602be470123b6a2f819081176577ceb7d1f5e2fedcd51d57d79d396c978994256e009c3d8e8c9284fe6aefd5f6c4214359f31cce99c91a00356be0d365e08218b2892e52c32492027b260cc1e81263bce85ad37e4333d14a2d8ff4341fd635e348f2a2501ec5f", 0x71}], 0x1}}], 0x1, 0x4080800) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/81, 0x75fa9a8c}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m47.30111072s ago: executing program 2 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r8, &(0x7f0000001300)={0x2020}, 0x2020) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x4}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10004, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x5, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e204e0000", 0x58}], 0x1) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e5c5741f92c5f4b5ba3f", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf250b00000018000180140002006c6f00"/37], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m45.378032452s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) utime(0x0, 0x0) dup3(r4, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f}) 7m39.756199725s ago: executing program 2 (id=959): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7m38.297560764s ago: executing program 2 (id=962): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) accept$inet(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) 7m20.313573104s ago: executing program 33 (id=962): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) accept$inet(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) 2m1.918162323s ago: executing program 3 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait2(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) 1m59.84076666s ago: executing program 3 (id=1494): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) fcntl$setownex(r0, 0xf, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000400)={0x6, 0xff, 0x200, 0x2a50, 0x0, "ca89005b445053b9"}) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x15fe, 0x20, 0x0, 0x0, 0x0) 1m55.556117016s ago: executing program 3 (id=1502): bpf$PROG_LOAD(0x5, 0x0, 0xfffffc6f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) chdir(&(0x7f0000000240)='./file0\x00') 1m54.32024908s ago: executing program 3 (id=1505): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfb, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r2, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000280)={0x5, 0x9, 0x2, 0x80, 0x80, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) fsopen(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, r0}, 0x4) 1m49.319911666s ago: executing program 3 (id=1512): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) fcntl$setownex(r0, 0xf, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000400)={0x6, 0xff, 0x200, 0x2a50, 0x0, "ca89005b445053b9"}) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x15fe, 0x20, 0x0, 0x0, 0x0) 1m44.03552452s ago: executing program 3 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x81, 0x1, 0x80000001, 0x8}, 0x10) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x37, r6}) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) 1m24.579270199s ago: executing program 34 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x81, 0x1, 0x80000001, 0x8}, 0x10) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x37, r6}) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) 3.6945313s ago: executing program 1 (id=1845): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a}) 3.396410638s ago: executing program 7 (id=1849): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x10000, 0x4c9, 0x5, 0x8003, r2, 0x7c5, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x40}, 0x2) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8001, 0x8001}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000080)) write(r0, &(0x7f0000000340)="4e6fccac8a6135b5548d030ef75c39e919a519e573a069cef20d881068bc3ce699c521bb4883a97f81cbbcc344199dd0ed1100003b2c26005d201ca200000000006f06ee36a6d7268296c8739baba2d1e46fd248a08efb31f37733bc6b99d4d03f06000000f7a152ecb676b7d8c6", 0x6e) 3.355077099s ago: executing program 5 (id=1850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 3.101006526s ago: executing program 5 (id=1852): chdir(&(0x7f0000000540)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) 2.908133292s ago: executing program 1 (id=1854): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x143484) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc17c2d1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b428a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600300000300", [0x8]}}) 2.858036813s ago: executing program 5 (id=1855): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x1, &(0x7f0000000180)="c2"}], 0x1}) 2.699096387s ago: executing program 1 (id=1858): sched_setscheduler(0x0, 0x2, 0x0) epoll_create1(0x80000) r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept(r1, 0x0, 0x0) shutdown(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.663328868s ago: executing program 5 (id=1859): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0xb3}, 0x2) 2.58418809s ago: executing program 0 (id=1860): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.510030972s ago: executing program 6 (id=1861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) 2.399899795s ago: executing program 0 (id=1862): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$x25(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.292164788s ago: executing program 6 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x0, 0xffffffffffffffff, 0x2000000000000000, 0x2000000000000005, 0x1000], 0xeeee8000, 0x2010d3}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.257054849s ago: executing program 0 (id=1864): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='7', 0x1) syz_usb_disconnect(r0) 2.140180473s ago: executing program 5 (id=1865): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) 2.094594704s ago: executing program 7 (id=1866): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 1.911246698s ago: executing program 5 (id=1867): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) write$binfmt_aout(r3, 0x0, 0xffffffdb) 1.910942938s ago: executing program 6 (id=1868): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001cb700)={0x1, &(0x7f00001cb500)=[{0xa000006, 0xffffffffffffffb3, 0x0, 0x1, 0x5}]}) 1.824727661s ago: executing program 7 (id=1869): syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xe7, 0x0, 0x511, 0x4}}}, 0xa) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) 1.736708433s ago: executing program 6 (id=1870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(r3, 0x80) utime(0x0, 0x0) dup3(r4, r3, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f}) 1.620227786s ago: executing program 1 (id=1871): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 1.614754116s ago: executing program 7 (id=1872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) recvmsg(r2, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x10041) 792.323379ms ago: executing program 1 (id=1873): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000700)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 567.298575ms ago: executing program 0 (id=1874): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 563.259525ms ago: executing program 6 (id=1875): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x20, r1, 0xdcdf24ec45e39533, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x4040000) 428.220439ms ago: executing program 7 (id=1876): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) 337.240591ms ago: executing program 1 (id=1877): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @loopback={0x57}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6}}}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) setsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 301.008622ms ago: executing program 6 (id=1878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x3000, 0xa, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0x9f, 0x20, 0x2, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0x26000, [0x4, 0x0, 0x40000000002]}) 252.219123ms ago: executing program 0 (id=1879): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 162.033016ms ago: executing program 7 (id=1880): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 0s ago: executing program 0 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xb0, 0x0, 0x400, [{{0x4, 0xffffffffffffffff, 0x7ff, 0x7ffffffffffffdff, 0x1fff, 0x7ff, {0x3, 0xfffffffffffffffc, 0x3, 0x2, 0x5, 0x2, 0x2, 0x6, 0x7, 0x4000, 0x0, r2, r3, 0x1, 0x6}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x2e) kernel console output (not intermixed with test programs): m syz.5.735: attempt to clear invalid blocks 2 len 1 [ 484.953722][ T7419] EXT4-fs (loop5): Remounting filesystem read-only [ 484.956281][ T4320] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 484.974107][ T7419] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 485.000089][ T7419] EXT4-fs (loop5): Remounting filesystem read-only [ 485.055234][ T7419] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.735: invalid indirect mapped block 1819239214 (level 0) [ 485.105179][ T7419] EXT4-fs (loop5): Remounting filesystem read-only [ 485.129987][ T7419] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.735: invalid indirect mapped block 1819239214 (level 1) [ 485.160837][ T7419] EXT4-fs (loop5): Remounting filesystem read-only [ 485.174922][ T7419] EXT4-fs (loop5): 1 truncate cleaned up [ 485.186038][ T7419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 485.201181][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 485.217454][ T4320] usb 4-1: not running at top speed; connect to a high speed hub [ 485.251471][ T4320] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 485.449991][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 485.477101][ T4320] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 485.494580][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.502923][ T4320] usb 4-1: Product: syz [ 485.633979][ T7431] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.735: corrupted in-inode xattr [ 486.252904][ T4320] usb 4-1: Manufacturer: syz [ 486.270154][ T4320] usb 4-1: SerialNumber: syz [ 486.324745][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 486.365782][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.390451][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.531452][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.535408][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 486.734566][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.742886][ T22] usb 3-1: Product: syz [ 486.747888][ T22] usb 3-1: Manufacturer: syz [ 486.752683][ T22] usb 3-1: SerialNumber: syz [ 487.087941][ T22] usb 3-1: 0:2 : does not exist [ 487.458592][ T22] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 488.321360][ T7444] futex_wake_op: syz.0.739 tries to shift op by 144; fix this program [ 488.576535][ T4320] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 488.595591][ T22] usb 3-1: USB disconnect, device number 10 [ 488.601944][ T4320] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 488.617320][ T4320] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 488.654628][ T4320] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 488.738169][ T4320] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 488.952367][ T4320] usb 4-1: USB disconnect, device number 13 [ 489.794741][ T126] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 489.997288][ T126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 490.025411][ T126] usb 6-1: not running at top speed; connect to a high speed hub [ 490.081586][ T126] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 490.124735][ T4320] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 490.216588][ T126] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 490.258926][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.518597][ T126] usb 6-1: Product: syz [ 490.538942][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 491.505993][ T126] usb 6-1: Manufacturer: syz [ 491.510971][ T126] usb 6-1: SerialNumber: syz [ 491.516150][ T4320] usb 4-1: not running at top speed; connect to a high speed hub [ 491.526375][ T4320] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 491.550517][ T4320] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 491.599379][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.621430][ T4320] usb 4-1: Product: syz [ 491.638501][ T4320] usb 4-1: Manufacturer: syz [ 491.643215][ T4320] usb 4-1: SerialNumber: syz [ 491.765803][ T4320] usb 4-1: can't set config #1, error -71 [ 491.774307][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 491.815431][ T7460] loop5: detected capacity change from 0 to 512 [ 492.005143][ T4320] usb 4-1: USB disconnect, device number 14 [ 492.039223][ T7460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 492.946793][ T6783] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 493.064722][ T5113] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 493.147085][ T6783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 493.170614][ T6783] usb 2-1: not running at top speed; connect to a high speed hub [ 493.224959][ T6783] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 493.285220][ T5113] usb 4-1: Using ep0 maxpacket: 16 [ 493.293984][ T5113] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.314755][ T6783] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 493.351435][ T6783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.355926][ T5113] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.381705][ T6783] usb 2-1: Product: syz [ 493.400323][ T6783] usb 2-1: Manufacturer: syz [ 493.421936][ T5113] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.422542][ T6783] usb 2-1: SerialNumber: syz [ 493.471811][ T5113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.522559][ T5113] usb 4-1: Product: syz [ 493.532698][ T5113] usb 4-1: Manufacturer: syz [ 493.564577][ T5113] usb 4-1: SerialNumber: syz [ 493.973143][ T5113] usb 4-1: 0:2 : does not exist [ 494.007980][ T5113] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 494.375521][ T5113] usb 4-1: USB disconnect, device number 15 [ 494.784055][ T126] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 494.812874][ T126] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 494.843388][ T126] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 494.877801][ T126] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 494.917967][ T126] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 494.927471][ T5421] udevd[5421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.969860][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 495.027804][ T126] usb 6-1: USB disconnect, device number 2 [ 495.216324][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.954248][ T6783] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 496.968305][ T6783] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 496.976519][ T6783] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 496.986108][ T6783] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 496.998490][ T6783] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 497.035822][ T7522] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 497.042531][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.165308][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 497.306068][ T6783] usb 2-1: USB disconnect, device number 22 [ 497.439668][ T7526] vhci_hcd: connection closed [ 497.439957][ T4389] vhci_hcd: stop threads [ 497.464534][ T4389] vhci_hcd: release socket [ 497.484144][ T4389] vhci_hcd: disconnect device [ 501.807976][ T7571] loop5: detected capacity change from 0 to 512 [ 501.898683][ T7574] futex_wake_op: syz.2.763 tries to shift op by 144; fix this program [ 502.062185][ T7571] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 502.546851][ T7571] EXT4-fs (loop5): failed to initialize system zone (-117) [ 502.744364][ T7571] EXT4-fs (loop5): mount failed [ 506.418865][ T7604] loop5: detected capacity change from 0 to 512 [ 506.528627][ T7604] EXT4-fs (loop5): Test dummy encryption mode enabled [ 506.737309][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.743759][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.825115][ T7604] EXT4-fs (loop5): 1 truncate cleaned up [ 506.830863][ T7604] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 506.946549][ T7604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 506.953343][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.961410][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 507.328171][ T126] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 507.910412][ T7616] vhci_hcd: connection reset by peer [ 507.924754][ T4389] vhci_hcd: stop threads [ 507.929141][ T4389] vhci_hcd: release socket [ 507.944800][ T4389] vhci_hcd: disconnect device [ 509.766428][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 512.353128][ T7658] loop5: detected capacity change from 0 to 512 [ 512.381640][ T7658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 512.495085][ T126] vhci_hcd: vhci_device speed not set [ 512.550876][ T7658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 512.559482][ T7658] System zones: 1-12 [ 512.639143][ T7658] EXT4-fs (loop5): 1 truncate cleaned up [ 512.645067][ T7658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 513.451132][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 514.742764][ T7672] loop5: detected capacity change from 0 to 4096 [ 514.808029][ T7672] EXT4-fs: inline encryption not supported [ 514.872207][ T7672] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 514.977503][ T7681] futex_wake_op: syz.3.787 tries to shift op by 144; fix this program [ 517.177240][ T7693] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 517.183988][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.191628][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 517.304984][ T7697] vhci_hcd: connection closed [ 517.305255][ T75] vhci_hcd: stop threads [ 517.376554][ T75] vhci_hcd: release socket [ 517.405031][ T75] vhci_hcd: disconnect device [ 517.424763][ T4954] vhci_hcd: vhci_device speed not set [ 517.579961][ T7] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 518.584780][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.615181][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 518.776946][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 518.850917][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 518.890882][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.921348][ T7] usb 4-1: Product: syz [ 518.931494][ T7] usb 4-1: Manufacturer: syz [ 518.959333][ T7] usb 4-1: SerialNumber: syz [ 522.100951][ T7] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 522.168320][ T7] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 522.256038][ T7] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 522.292033][ T7] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 522.404677][ T7] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 522.662693][ T7] usb 4-1: USB disconnect, device number 16 [ 524.958261][ T7766] input: syz0 as /devices/virtual/input/input10 [ 525.020840][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 525.090401][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 527.820358][ T7803] fuse: Bad value for 'fd' [ 529.442272][ T7819] loop5: detected capacity change from 0 to 512 [ 529.456022][ T7819] EXT4-fs: Ignoring removed mblk_io_submit option [ 529.549324][ T7819] EXT4-fs (loop5): orphan cleanup on readonly fs [ 529.604617][ T7819] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 529.729200][ T7819] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.813: attempt to clear invalid blocks 2 len 1 [ 529.816327][ T7819] EXT4-fs (loop5): Remounting filesystem read-only [ 529.816493][ T7819] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 529.816900][ T7819] EXT4-fs (loop5): Remounting filesystem read-only [ 529.817000][ T7819] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.813: invalid indirect mapped block 1819239214 (level 0) [ 529.817349][ T7819] EXT4-fs (loop5): Remounting filesystem read-only [ 529.817380][ T7819] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.813: invalid indirect mapped block 1819239214 (level 1) [ 529.817708][ T7819] EXT4-fs (loop5): Remounting filesystem read-only [ 529.819292][ T7819] EXT4-fs (loop5): 1 truncate cleaned up [ 529.819330][ T7819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 530.660977][ T7831] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.813: corrupted in-inode xattr [ 531.518110][ T7841] futex_wake_op: syz.3.815 tries to shift op by 144; fix this program [ 531.801642][ T7818] EXT4-fs (loop0): unmounting filesystem. [ 534.829130][ T7868] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 534.835799][ T7868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.843607][ T7868] vhci_hcd vhci_hcd.0: Device attached [ 534.904755][ T7869] vhci_hcd: connection closed [ 534.905049][ T6260] vhci_hcd: stop threads [ 534.925721][ T6260] vhci_hcd: release socket [ 534.944857][ T6260] vhci_hcd: disconnect device [ 535.262588][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 536.847958][ T7893] futex_wake_op: syz.1.826 tries to shift op by 144; fix this program [ 537.764624][ T4954] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 538.007673][ T4954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 538.026812][ T4954] usb 4-1: not running at top speed; connect to a high speed hub [ 538.062190][ T4954] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 538.120889][ T4954] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 538.335496][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.344133][ T4954] usb 4-1: Product: syz [ 538.348452][ T4954] usb 4-1: Manufacturer: syz [ 538.353100][ T4954] usb 4-1: SerialNumber: syz [ 542.456770][ T4954] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 542.501399][ T4954] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 542.539389][ T4954] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 542.576997][ T4954] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 542.646376][ T4954] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 542.728255][ T4954] usb 4-1: USB disconnect, device number 17 [ 542.764661][ T6783] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 543.067654][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.244189][ T6783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.280430][ T6783] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 544.345509][ T6783] usb 2-1: can't read configurations, error -71 [ 545.914740][ T7938] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 545.921441][ T7938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.929382][ T7938] vhci_hcd vhci_hcd.0: Device attached [ 545.956488][ T7945] vhci_hcd: connection closed [ 545.975501][ T11] vhci_hcd: stop threads [ 546.009835][ T11] vhci_hcd: release socket [ 546.062397][ T7953] loop5: detected capacity change from 0 to 512 [ 546.074879][ T7953] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 546.129327][ T11] vhci_hcd: disconnect device [ 547.198861][ T7953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 547.207034][ T7953] System zones: 1-12 [ 547.383871][ T7953] EXT4-fs (loop5): 1 truncate cleaned up [ 547.389821][ T7953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 547.495206][ T7962] futex_wake_op: syz.2.842 tries to shift op by 144; fix this program [ 548.413947][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 553.968908][ T7985] loop5: detected capacity change from 0 to 512 [ 553.984818][ T7985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 554.088887][ T7985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 554.097445][ T7985] System zones: 1-12 [ 554.159344][ T7985] EXT4-fs (loop5): 1 truncate cleaned up [ 554.165861][ T7985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 555.150689][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 555.984655][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 557.044541][ T4954] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 557.244636][ T4954] usb 4-1: Using ep0 maxpacket: 16 [ 557.251904][ T4954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.338226][ T4954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.411852][ T4954] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.266582][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.275281][ T4954] usb 4-1: Product: syz [ 558.279507][ T4954] usb 4-1: Manufacturer: syz [ 558.284148][ T4954] usb 4-1: SerialNumber: syz [ 558.515700][ T4954] usb 4-1: 0:2 : does not exist [ 558.530210][ T4954] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 559.531918][ T8041] loop5: detected capacity change from 0 to 512 [ 559.616651][ T4954] usb 4-1: USB disconnect, device number 18 [ 559.747499][ T8041] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.857: corrupted in-inode xattr [ 559.760172][ T8041] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.857: couldn't read orphan inode 15 (err -117) [ 559.777443][ T8041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 559.936437][ T4481] udevd[4481]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.717138][ T8047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 560.723809][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 560.731551][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 561.028588][ T6783] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 561.140808][ T8058] futex_wake_op: syz.0.860 tries to shift op by 144; fix this program [ 563.987674][ T8048] vhci_hcd: connection reset by peer [ 563.995327][ T4609] vhci_hcd: stop threads [ 563.999641][ T4609] vhci_hcd: release socket [ 564.076075][ T4609] vhci_hcd: disconnect device [ 565.302840][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 566.594738][ T8086] futex_wake_op: syz.5.865 tries to shift op by 144; fix this program [ 568.714238][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.720692][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.985514][ T6783] vhci_hcd: vhci_device speed not set [ 571.175493][ T8112] futex_wake_op: syz.3.871 tries to shift op by 144; fix this program [ 575.894637][ T5113] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 576.985813][ T5113] usb 6-1: unable to get BOS descriptor or descriptor too short [ 577.005313][ T5113] usb 6-1: not running at top speed; connect to a high speed hub [ 577.032716][ T5113] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 577.127052][ T5113] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 577.185897][ T5113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.258421][ T5113] usb 6-1: Product: syz [ 577.262702][ T5113] usb 6-1: Manufacturer: syz [ 577.480075][ T5113] usb 6-1: SerialNumber: syz [ 578.213595][ T5113] usb 6-1: can't set config #1, error -71 [ 578.225672][ T5113] usb 6-1: USB disconnect, device number 3 [ 578.571953][ T8146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 578.578682][ T8146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.586595][ T8146] vhci_hcd vhci_hcd.0: Device attached [ 579.702069][ T8147] vhci_hcd: connection closed [ 579.703582][ T4902] vhci_hcd: stop threads [ 579.714204][ T4902] vhci_hcd: release socket [ 579.720874][ T4902] vhci_hcd: disconnect device [ 579.764584][ T126] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 582.182356][ T126] usb 37-1: enqueue for inactive port 0 [ 582.374699][ T126] vhci_hcd: vhci_device speed not set [ 588.293063][ T8182] input: syz0 as /devices/virtual/input/input15 [ 588.322390][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.889'. [ 588.374287][ T8192] input: syz0 as /devices/virtual/input/input16 [ 588.374315][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.889'. [ 590.643169][ T8212] input: syz0 as /devices/virtual/input/input17 [ 590.653161][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.896'. [ 590.663751][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.896'. [ 590.899993][ T8217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 590.906663][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 590.914579][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 591.028173][ T8217] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 591.204742][ T7] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 591.566179][ T8218] vhci_hcd: connection reset by peer [ 591.573425][ T4609] vhci_hcd: stop threads [ 591.579929][ T4609] vhci_hcd: release socket [ 591.682484][ T4609] vhci_hcd: disconnect device [ 592.343584][ T8228] futex_wake_op: syz.5.898 tries to shift op by 144; fix this program [ 594.991131][ T8245] input: syz0 as /devices/virtual/input/input18 [ 595.013876][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 595.029721][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 596.766230][ T8255] futex_wake_op: syz.0.904 tries to shift op by 144; fix this program [ 597.442307][ T7] vhci_hcd: vhci_device speed not set [ 598.680009][ T14] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 598.926754][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 598.975303][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 599.012033][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 599.110839][ T8274] loop5: detected capacity change from 0 to 4096 [ 599.121467][ T14] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 599.141277][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.151741][ T14] usb 4-1: Product: syz [ 599.461835][ T8274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 600.015407][ T14] usb 4-1: Manufacturer: syz [ 600.020111][ T14] usb 4-1: SerialNumber: syz [ 600.105716][ T8265] EXT4-fs (loop5): unmounting filesystem. [ 600.322839][ T8283] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 600.329732][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 600.373275][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 600.644670][ T5113] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 600.843394][ T8284] vhci_hcd: connection reset by peer [ 600.861676][ T5803] vhci_hcd: stop threads [ 600.866310][ T5803] vhci_hcd: release socket [ 600.890345][ T8291] input: syz0 as /devices/virtual/input/input19 [ 600.900889][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'. [ 600.936929][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'. [ 601.088028][ T5803] vhci_hcd: disconnect device [ 604.275577][ T14] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 604.284102][ T14] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 604.292365][ T14] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 604.300883][ T14] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 604.380969][ T14] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 604.545421][ T14] usb 4-1: USB disconnect, device number 19 [ 605.735523][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.774568][ T5113] vhci_hcd: vhci_device speed not set [ 605.834630][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 606.058804][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 606.997472][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.034529][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.055692][ T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.069779][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.094743][ T7] usb 6-1: Product: syz [ 607.102851][ T7] usb 6-1: Manufacturer: syz [ 607.118618][ T7] usb 6-1: SerialNumber: syz [ 607.388086][ T7] usb 6-1: 0:2 : does not exist [ 608.203279][ T7] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 608.424891][ T7] usb 6-1: USB disconnect, device number 4 [ 609.776541][ T4481] udevd[4481]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.951709][ T8341] xt_TPROXY: Can be used only with -p tcp or -p udp [ 610.214490][ T8347] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 610.221188][ T8347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 610.229145][ T8347] vhci_hcd vhci_hcd.0: Device attached [ 610.505186][ T5022] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 610.888877][ T8348] vhci_hcd: connection reset by peer [ 610.905702][ T4302] vhci_hcd: stop threads [ 610.910145][ T4302] vhci_hcd: release socket [ 610.967492][ T4302] vhci_hcd: disconnect device [ 613.474337][ T8367] futex_wake_op: syz.1.929 tries to shift op by 144; fix this program [ 614.765185][ T8376] futex_wake_op: syz.3.932 tries to shift op by 144; fix this program [ 615.644664][ T5022] vhci_hcd: vhci_device speed not set [ 618.245850][ T4279] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 619.264520][ T4279] usb 2-1: Using ep0 maxpacket: 16 [ 619.291266][ T4279] usb 2-1: device descriptor read/all, error -71 [ 619.703179][ T8412] loop5: detected capacity change from 0 to 512 [ 620.847796][ T8412] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 621.088347][ T8412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 621.096474][ T8412] System zones: 1-12 [ 621.173604][ T8412] EXT4-fs (loop5): 1 truncate cleaned up [ 621.179521][ T8412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 621.492140][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 621.522721][ T8421] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 621.529425][ T8421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.537413][ T8421] vhci_hcd vhci_hcd.0: Device attached [ 622.668679][ T5113] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 622.708002][ T8422] vhci_hcd: connection closed [ 622.709586][ T5803] vhci_hcd: stop threads [ 622.928956][ T5803] vhci_hcd: release socket [ 623.054283][ T5803] vhci_hcd: disconnect device [ 625.294631][ T4320] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 626.695217][ T4321] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 627.175944][ T4321] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.193730][ T4321] usb 6-1: not running at top speed; connect to a high speed hub [ 627.253638][ T4321] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 627.549178][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 627.557024][ T4321] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 627.566269][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.574546][ T4321] usb 6-1: Product: syz [ 627.578912][ T4321] usb 6-1: Manufacturer: syz [ 627.584313][ T4321] usb 6-1: SerialNumber: syz [ 627.589352][ T4320] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 627.597961][ T4320] usb 4-1: can't read configurations, error -71 [ 628.014037][ T5113] vhci_hcd: vhci_device speed not set [ 628.061259][ T8458] loop5: detected capacity change from 0 to 512 [ 628.206878][ T8476] overlayfs: failed to resolve './file0': -2 [ 631.365388][ T8478] futex_wake_op: syz.2.955 tries to shift op by 144; fix this program [ 632.518548][ T8475] futex_wake_op: syz.0.957 tries to shift op by 144; fix this program [ 632.531238][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.538845][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.747956][ T4321] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 632.761598][ T4321] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 632.774274][ T4321] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 632.789422][ T4321] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 632.818026][ T4321] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 632.951684][ T4321] usb 6-1: USB disconnect, device number 5 [ 633.385593][ T8488] input: syz0 as /devices/virtual/input/input22 [ 633.449183][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.959'. [ 633.467002][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.959'. [ 634.157130][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.401615][ T8492] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 635.408315][ T8492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 635.416228][ T8492] vhci_hcd vhci_hcd.0: Device attached [ 635.424822][ T8495] vhci_hcd: connection closed [ 635.427960][ T4302] vhci_hcd: stop threads [ 635.541841][ T4302] vhci_hcd: release socket [ 635.616544][ T4302] vhci_hcd: disconnect device [ 635.674700][ T14] vhci_hcd: vhci_device speed not set [ 636.036667][ T8509] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 637.798100][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 638.308057][ T4286] Bluetooth: hci5: command 0x0405 tx timeout [ 638.332779][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 640.685512][ T8523] futex_wake_op: syz.3.967 tries to shift op by 144; fix this program [ 640.761182][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 640.774012][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 646.211103][ T8552] loop5: detected capacity change from 0 to 512 [ 646.280706][ T8552] EXT4-fs (loop5): Test dummy encryption mode enabled [ 646.404584][ T8552] EXT4-fs (loop5): 1 truncate cleaned up [ 646.410343][ T8552] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 651.764845][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 651.778440][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 652.090019][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 652.394678][ T8586] futex_wake_op: syz.5.984 tries to shift op by 144; fix this program [ 653.777101][ T7716] EXT4-fs (loop2): unmounting filesystem. [ 654.441085][ T8604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 660.113125][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'. [ 660.126609][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'. [ 660.933241][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.943733][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.952619][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.960785][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.968614][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 661.119830][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 662.049565][ T4461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.545655][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 664.031025][ T4461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.520428][ T4461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.664428][ T8682] futex_wake_op: syz.3.1001 tries to shift op by 144; fix this program [ 664.817913][ T4461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.699729][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 665.765689][ T8644] chnl_net:caif_netlink_parms(): no params data found [ 666.076461][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 666.092658][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 666.733662][ T8691] input: syz0 as /devices/virtual/input/input24 [ 666.961047][ T4954] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 667.174337][ T4954] usb 4-1: device descriptor read/64, error -71 [ 667.953128][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 668.065334][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 668.074538][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 668.294612][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.328484][ T4954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 668.481050][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.489700][ T8644] device bridge_slave_0 entered promiscuous mode [ 668.507667][ T8711] loop5: detected capacity change from 0 to 512 [ 668.891796][ T8711] EXT4-fs (loop5): Test dummy encryption mode enabled [ 669.335423][ T4954] usb 4-1: device descriptor read/64, error -71 [ 669.418505][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.426024][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.451798][ T8711] EXT4-fs (loop5): 1 truncate cleaned up [ 669.460047][ T8711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 669.469222][ T4954] usb usb4-port1: attempt power cycle [ 669.496364][ T8644] device bridge_slave_1 entered promiscuous mode [ 669.720640][ T8726] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 669.727368][ T8726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.744035][ T8726] vhci_hcd vhci_hcd.0: Device attached [ 669.874760][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.048978][ T4324] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 670.122002][ T8727] vhci_hcd: connection reset by peer [ 670.128124][ T29] vhci_hcd: stop threads [ 670.132792][ T29] vhci_hcd: release socket [ 670.145176][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 670.210332][ T29] vhci_hcd: disconnect device [ 670.793660][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.856299][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 671.037278][ T8725] EXT4-fs (loop1): unmounting filesystem. [ 671.091243][ T8644] team0: Port device team_slave_0 added [ 671.170780][ T8644] team0: Port device team_slave_1 added [ 671.825581][ T8737] EXT4-fs (loop3): unmounting filesystem. [ 672.240804][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.248346][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.332324][ T8644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.543579][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.557188][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.601020][ T8644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.680216][ T8644] device hsr_slave_0 entered promiscuous mode [ 672.708297][ T8644] device hsr_slave_1 entered promiscuous mode [ 672.733177][ T8644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.758955][ T8644] Cannot create hsr debugfs directory [ 675.680838][ T4324] vhci_hcd: vhci_device speed not set [ 675.784635][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 675.808285][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 676.458747][ T8772] loop5: detected capacity change from 0 to 256 [ 676.469901][ T8772] exfat: Deprecated parameter 'utf8' [ 676.475575][ T8772] exfat: Deprecated parameter 'namecase' [ 676.481658][ T8772] exfat: Deprecated parameter 'namecase' [ 676.487486][ T8772] exfat: Deprecated parameter 'utf8' [ 676.569297][ T8772] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 677.252530][ T4461] device hsr_slave_0 left promiscuous mode [ 677.263511][ T4461] device hsr_slave_1 left promiscuous mode [ 677.343042][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.364137][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.405364][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.427610][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.448323][ T4461] device bridge_slave_1 left promiscuous mode [ 677.484748][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.547286][ T4461] device bridge_slave_0 left promiscuous mode [ 677.640162][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.987522][ T4461] device veth1_macvtap left promiscuous mode [ 681.050616][ T4461] device veth0_macvtap left promiscuous mode [ 681.066589][ T4461] device veth1_vlan left promiscuous mode [ 681.072501][ T4461] device veth0_vlan left promiscuous mode [ 684.485142][ T8823] input: syz0 as /devices/virtual/input/input25 [ 686.861306][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 687.425104][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 687.507980][ T8840] futex_wake_op: syz.1.1031 tries to shift op by 144; fix this program [ 687.687166][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.206447][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.379315][ T4461] bond0 (unregistering): Released all slaves [ 689.495557][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1028'. [ 689.504947][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1028'. [ 689.685457][ T8854] futex_wake_op: syz.1.1034 tries to shift op by 144; fix this program [ 691.022198][ T8644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 691.089186][ T8644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 691.190239][ T8644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 691.224595][ T8644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 691.451780][ T8877] futex_wake_op: syz.0.1038 tries to shift op by 144; fix this program [ 692.493667][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.665003][ T8644] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.665226][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.673261][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.696715][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.778442][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.809466][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.816738][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.883408][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.892357][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.901239][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.908386][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.916659][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.925926][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.945674][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.164966][ T8644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.175590][ T8644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.204128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.303547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.345722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.400785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.521442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.585742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.640643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.718676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.801596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.842512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 696.002939][ T8906] futex_wake_op: syz.1.1043 tries to shift op by 144; fix this program [ 696.893045][ T8908] loop5: detected capacity change from 0 to 512 [ 696.990942][ T8908] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1044: inode has both inline data and extents flags [ 697.024136][ T8908] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1044: couldn't read orphan inode 15 (err -117) [ 697.047373][ T8908] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 699.043342][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.049748][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.388159][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 699.400136][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 700.038016][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 700.047027][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.054624][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.142201][ T8938] futex_wake_op: syz.1.1047 tries to shift op by 144; fix this program [ 700.290677][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.559800][ T8949] futex_wake_op: syz.3.1050 tries to shift op by 144; fix this program [ 702.979246][ T8975] futex_wake_op: syz.5.1054 tries to shift op by 144; fix this program [ 703.999341][ T8985] futex_wake_op: syz.1.1055 tries to shift op by 144; fix this program [ 706.333129][ T8994] input: syz0 as /devices/virtual/input/input26 [ 706.350549][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1057'. [ 706.363642][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1057'. [ 707.742639][ T9002] loop5: detected capacity change from 0 to 512 [ 708.364480][ T9002] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1061: corrupted in-inode xattr [ 708.377775][ T9002] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1061: couldn't read orphan inode 15 (err -117) [ 708.390230][ T9002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 711.297871][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 711.363515][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 711.431008][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 711.642430][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 711.723079][ T9038] overlayfs: failed to clone upperpath [ 712.449992][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 712.463081][ T8644] device veth0_vlan entered promiscuous mode [ 712.525765][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 712.548706][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 712.686854][ T8644] device veth1_vlan entered promiscuous mode [ 712.814209][ T8644] device veth0_macvtap entered promiscuous mode [ 712.974599][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.084986][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.325483][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.775249][ T8644] device veth1_macvtap entered promiscuous mode [ 713.820725][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.979961][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.151375][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.377120][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.721062][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.834073][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.843991][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.934140][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.959304][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.002067][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 715.020424][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 715.068645][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.089613][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.141199][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.173774][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.196333][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.240278][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.250514][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.315012][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.363721][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.412988][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 715.447790][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 715.483003][ T8644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.523441][ T8644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.560026][ T8644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.588176][ T8644] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.762800][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.797702][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.822911][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 715.895799][ T4717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.920886][ T4717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.946142][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 719.729240][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 719.777272][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 719.787010][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 719.795863][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 719.812106][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 719.819964][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 721.285377][ T5100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.591735][ T5100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.803872][ T5100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.944790][ T5100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.036656][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 722.923764][ T9090] chnl_net:caif_netlink_parms(): no params data found [ 724.259215][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 724.697651][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.811669][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.134694][ T9090] device bridge_slave_0 entered promiscuous mode [ 725.521168][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.528340][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.560659][ T9090] device bridge_slave_1 entered promiscuous mode [ 726.494829][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 727.429190][ T9174] loop5: detected capacity change from 0 to 512 [ 727.644100][ T9174] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1093: inode has both inline data and extents flags [ 728.064790][ T9174] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1093: couldn't read orphan inode 15 (err -117) [ 728.108292][ T9174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 728.171884][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.397180][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.569825][ T9090] team0: Port device team_slave_0 added [ 728.610998][ T9090] team0: Port device team_slave_1 added [ 728.713988][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 729.313301][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.372248][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.646241][ T9197] futex_wake_op: syz.3.1095 tries to shift op by 144; fix this program [ 729.941158][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.011113][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.022724][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.549263][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.852099][ T9090] device hsr_slave_0 entered promiscuous mode [ 731.165406][ T9090] device hsr_slave_1 entered promiscuous mode [ 731.374696][ T9090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 731.706857][ T9090] Cannot create hsr debugfs directory [ 732.073723][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 733.699780][ T5100] device hsr_slave_0 left promiscuous mode [ 733.724790][ T5100] device hsr_slave_1 left promiscuous mode [ 733.745600][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.767919][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.790228][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.820828][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.849456][ T5100] device bridge_slave_1 left promiscuous mode [ 733.873360][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.918998][ T5100] device bridge_slave_0 left promiscuous mode [ 733.949800][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.836002][ T5100] device veth1_macvtap left promiscuous mode [ 734.856421][ T5100] device veth0_macvtap left promiscuous mode [ 734.863563][ T5100] device veth1_vlan left promiscuous mode [ 734.869711][ T5100] device veth0_vlan left promiscuous mode [ 735.087012][ T9247] loop5: detected capacity change from 0 to 512 [ 735.096564][ T9247] EXT4-fs: inline encryption not supported [ 735.102668][ T9247] journal_path: Lookup failure for './file0' [ 735.108947][ T9247] EXT4-fs: error: could not find journal device path [ 738.305500][ T9259] loop5: detected capacity change from 0 to 4096 [ 741.845048][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 741.910015][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 741.978631][ T5100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.029062][ T5100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.030906][ T4954] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 742.064770][ T9297] overlayfs: failed to clone upperpath [ 742.235802][ T4954] usb 6-1: unable to get BOS descriptor or descriptor too short [ 742.261824][ T4954] usb 6-1: not running at top speed; connect to a high speed hub [ 742.290401][ T4954] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 742.323040][ T4954] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 742.334943][ T4954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.343133][ T4954] usb 6-1: Product: syz [ 742.347417][ T4954] usb 6-1: Manufacturer: syz [ 742.352359][ T4954] usb 6-1: SerialNumber: syz [ 742.509220][ T5100] bond0 (unregistering): Released all slaves [ 742.595639][ T9289] loop5: detected capacity change from 0 to 512 [ 742.697278][ T9289] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 742.728460][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 742.738194][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1108'. [ 745.990203][ T9315] futex_wake_op: syz.0.1117 tries to shift op by 144; fix this program [ 747.306094][ T4954] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 747.533122][ T4954] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 747.541650][ T4954] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 747.550882][ T4954] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 747.560817][ T4954] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 747.717538][ T4954] usb 6-1: USB disconnect, device number 6 [ 747.881729][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 748.016227][ T9090] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 748.049116][ T9090] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 748.079436][ T9333] udevd[9333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.122520][ T9090] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 748.175339][ T9090] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 748.289750][ T9340] loop5: detected capacity change from 0 to 4096 [ 748.548623][ T9320] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.578462][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.607334][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 749.641724][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 749.698140][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.849826][ T9090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 749.930136][ T9090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.591596][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.601778][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.610651][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.617889][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.626017][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 750.635900][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 750.644651][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.651830][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.659827][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 750.669355][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 750.678813][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 750.699909][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 750.726636][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 750.753620][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 750.781791][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 750.819497][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 750.895413][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 750.943258][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 750.962508][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 751.011942][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.104319][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.184834][ T9370] loop5: detected capacity change from 0 to 4096 [ 751.386356][ T9320] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 751.719456][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.736238][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.801275][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.165537][ T9400] loop5: detected capacity change from 0 to 512 [ 754.222675][ T9400] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1132: inode has both inline data and extents flags [ 754.308999][ T9400] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1132: couldn't read orphan inode 15 (err -117) [ 754.387708][ T9400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 755.635426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 755.694361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 755.967287][ T9090] device veth0_vlan entered promiscuous mode [ 756.283365][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 756.409744][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 756.719804][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 756.841846][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 756.961218][ T9090] device veth1_vlan entered promiscuous mode [ 758.571225][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 758.581436][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 758.629456][ T9090] device veth0_macvtap entered promiscuous mode [ 758.658400][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 758.677752][ T9090] device veth1_macvtap entered promiscuous mode [ 758.752159][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.871349][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.892245][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.281648][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.545084][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.990416][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.000971][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.013693][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.213730][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.342158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 760.415972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 760.631650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 760.922803][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.949402][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.967021][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.981662][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.987356][ T4954] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 761.003316][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.099237][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.140416][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.181719][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.211448][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.261161][ T9090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.270342][ T4954] usb 6-1: Using ep0 maxpacket: 16 [ 761.282051][ T4954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.323448][ T9090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.337909][ T4954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.369074][ T9090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.386770][ T4954] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.418069][ T9090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.475900][ T4954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.496191][ T4954] usb 6-1: Product: syz [ 761.505717][ T4954] usb 6-1: Manufacturer: syz [ 761.510408][ T4954] usb 6-1: SerialNumber: syz [ 762.056483][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.432653][ T4954] usb 6-1: can't set config #1, error -71 [ 762.450560][ T4954] usb 6-1: USB disconnect, device number 7 [ 762.550055][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 764.585555][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.674605][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.877408][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.883848][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.994162][ T4449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.071961][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.084073][ T4449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.166582][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 767.599972][ T9527] loop6: detected capacity change from 0 to 512 [ 767.692242][ T9527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 767.852506][ T9527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 767.861127][ T9527] System zones: 1-12 [ 767.937971][ T9527] EXT4-fs (loop6): 1 truncate cleaned up [ 767.944049][ T9527] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 768.516474][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 770.129758][ T9547] loop5: detected capacity change from 0 to 256 [ 770.278228][ T9547] FAT-fs (loop5): Directory bread(block 64) failed [ 770.324772][ T9547] FAT-fs (loop5): Directory bread(block 65) failed [ 770.337764][ T9547] FAT-fs (loop5): Directory bread(block 66) failed [ 770.344661][ T9547] FAT-fs (loop5): Directory bread(block 67) failed [ 770.381878][ T9547] FAT-fs (loop5): Directory bread(block 68) failed [ 770.399482][ T9547] FAT-fs (loop5): Directory bread(block 69) failed [ 770.420418][ T9547] FAT-fs (loop5): Directory bread(block 70) failed [ 770.444058][ T9547] FAT-fs (loop5): Directory bread(block 71) failed [ 770.500216][ T9547] FAT-fs (loop5): Directory bread(block 72) failed [ 770.733123][ T9547] FAT-fs (loop5): Directory bread(block 73) failed [ 772.713894][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1162'. [ 774.340293][ T9585] futex_wake_op: syz.3.1165 tries to shift op by 144; fix this program [ 775.222593][ T9589] x_tables: duplicate underflow at hook 1 [ 775.985101][ T9593] loop5: detected capacity change from 0 to 512 [ 776.173088][ T9593] ext4: Unknown parameter 'dont_measure' [ 778.149593][ T9466] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.664399][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'. [ 778.677158][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'. [ 781.739889][ T4367] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 782.123675][ T9625] x_tables: duplicate underflow at hook 1 [ 782.660971][ T9627] futex_wake_op: syz.3.1174 tries to shift op by 144; fix this program [ 784.357636][ T4291] Bluetooth: hci3: command 0x0411 tx timeout [ 785.029288][ T9657] futex_wake_op: syz.5.1182 tries to shift op by 144; fix this program [ 786.499745][ T9670] futex_wake_op: syz.3.1185 tries to shift op by 144; fix this program [ 788.548660][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 788.561000][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 788.717464][ T9678] fuse: Bad value for 'fd' [ 789.357472][ T9681] futex_wake_op: syz.5.1189 tries to shift op by 144; fix this program [ 791.072549][ T9701] loop5: detected capacity change from 0 to 4096 [ 797.385242][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'. [ 797.397937][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'. [ 798.794688][ T9778] futex_wake_op: syz.5.1208 tries to shift op by 144; fix this program [ 804.490110][ T9821] loop6: detected capacity change from 0 to 512 [ 804.511625][ T9821] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 804.667794][ T9821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 804.676034][ T9821] System zones: 1-12 [ 804.689598][ T9821] EXT4-fs (loop6): 1 truncate cleaned up [ 804.695423][ T9821] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 805.582654][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 806.379102][ T9841] loop6: detected capacity change from 0 to 512 [ 807.343063][ T9841] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1219: inode has both inline data and extents flags [ 807.952010][ T9841] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1219: couldn't read orphan inode 15 (err -117) [ 807.975116][ T9841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 808.666242][ T9869] futex_wake_op: syz.5.1224 tries to shift op by 144; fix this program [ 809.845302][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 810.710128][ T9874] loop5: detected capacity change from 0 to 4096 [ 810.729419][ T9874] EXT4-fs: inline encryption not supported [ 810.781971][ T9874] EXT4-fs (loop5): Test dummy encryption mode enabled [ 810.927518][ T9874] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 810.936309][ T9874] System zones: 0-5 [ 810.947030][ T9874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 812.590177][ T4321] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 812.702846][ T9897] x_tables: duplicate underflow at hook 1 [ 812.796202][ T4321] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.936677][ T4321] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 813.135208][ T4321] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.906158][ T4321] usb 6-1: string descriptor 0 read error: -71 [ 813.913186][ T4321] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 813.924774][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.278040][ T4321] usb 6-1: can't set config #1, error -71 [ 814.398196][ T4321] usb 6-1: USB disconnect, device number 8 [ 814.650410][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 816.420828][ T9930] futex_wake_op: syz.1.1238 tries to shift op by 144; fix this program [ 822.026333][ T4279] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 822.081556][ T9974] input: syz0 as /devices/virtual/input/input29 [ 822.230888][ T4279] usb 6-1: Using ep0 maxpacket: 16 [ 822.278693][ T4279] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.536774][ T4279] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.882995][ T4279] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.910060][ T4279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.933642][ T4279] usb 6-1: Product: syz [ 822.957662][ T4279] usb 6-1: Manufacturer: syz [ 822.998964][ T4279] usb 6-1: SerialNumber: syz [ 823.337580][ T4279] usb 6-1: 0:2 : does not exist [ 823.342683][ T4279] usb 6-1: unit 16 not found! [ 823.367114][ T4279] usb 6-1: USB disconnect, device number 9 [ 824.006413][ T9466] udevd[9466]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.062012][T10007] loop6: detected capacity change from 0 to 512 [ 826.268742][T10007] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1252: corrupted in-inode xattr [ 826.284607][T10007] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1252: couldn't read orphan inode 15 (err -117) [ 826.302905][T10007] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 826.993491][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 828.475888][T10022] x_tables: duplicate underflow at hook 1 [ 833.050895][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.057325][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.511128][T10049] input: syz0 as /devices/virtual/input/input30 [ 833.629591][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1260'. [ 834.462180][T10055] loop6: detected capacity change from 0 to 256 [ 835.800303][T10055] FAT-fs (loop6): Directory bread(block 64) failed [ 835.832420][T10072] futex_wake_op: syz.0.1264 tries to shift op by 144; fix this program [ 835.950318][T10055] FAT-fs (loop6): Directory bread(block 65) failed [ 835.957465][T10055] FAT-fs (loop6): Directory bread(block 66) failed [ 835.970609][T10055] FAT-fs (loop6): Directory bread(block 67) failed [ 836.075304][T10055] FAT-fs (loop6): Directory bread(block 68) failed [ 836.171225][T10055] FAT-fs (loop6): Directory bread(block 69) failed [ 836.290205][T10055] FAT-fs (loop6): Directory bread(block 70) failed [ 836.406288][T10055] FAT-fs (loop6): Directory bread(block 71) failed [ 836.481159][T10055] FAT-fs (loop6): Directory bread(block 72) failed [ 836.555321][T10055] FAT-fs (loop6): Directory bread(block 73) failed [ 836.650458][T10075] loop5: detected capacity change from 0 to 512 [ 836.850299][T10075] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1268: inode has both inline data and extents flags [ 836.880874][T10075] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1268: couldn't read orphan inode 15 (err -117) [ 836.958973][T10075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 840.444908][T10102] futex_wake_op: syz.6.1272 tries to shift op by 144; fix this program [ 841.204721][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 841.398827][T10115] loop5: detected capacity change from 0 to 512 [ 841.625930][T10115] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1274: inode has both inline data and extents flags [ 841.691443][T10115] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1274: couldn't read orphan inode 15 (err -117) [ 841.826313][T10115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 841.837314][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 843.428018][T10135] loop6: detected capacity change from 0 to 256 [ 843.435507][T10135] exfat: Deprecated parameter 'utf8' [ 843.441117][T10135] exfat: Deprecated parameter 'namecase' [ 843.446868][T10135] exfat: Deprecated parameter 'namecase' [ 843.452608][T10135] exfat: Deprecated parameter 'utf8' [ 843.555365][T10135] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 844.028819][T10137] futex_wake_op: syz.0.1280 tries to shift op by 144; fix this program [ 847.576347][T10166] futex_wake_op: syz.3.1286 tries to shift op by 144; fix this program [ 848.148165][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 849.140370][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1290'. [ 849.797696][T10201] loop5: detected capacity change from 0 to 4096 [ 854.517150][T10239] futex_wake_op: syz.3.1300 tries to shift op by 144; fix this program [ 860.102005][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 860.112170][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 861.165132][T10283] input: syz0 as /devices/virtual/input/input31 [ 861.236033][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 861.249310][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 863.175461][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 863.191069][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 863.836010][T10291] loop6: detected capacity change from 0 to 512 [ 863.843396][T10291] EXT4-fs: inline encryption not supported [ 863.849378][T10291] journal_path: Lookup failure for './file0' [ 863.855568][T10291] EXT4-fs: error: could not find journal device path [ 863.912935][T10298] futex_wake_op: syz.3.1312 tries to shift op by 144; fix this program [ 864.668296][T10045] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 867.221482][T10320] loop5: detected capacity change from 0 to 512 [ 870.174744][T10320] EXT4-fs: Ignoring removed mblk_io_submit option [ 870.432427][T10320] EXT4-fs: failed to create workqueue [ 870.466014][T10320] EXT4-fs (loop5): mount failed [ 872.678071][T10346] x_tables: duplicate underflow at hook 1 [ 877.659000][T10399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 879.848255][ T4288] Bluetooth: hci3: command 0x0405 tx timeout [ 880.790754][T10423] futex_wake_op: syz.6.1341 tries to shift op by 144; fix this program [ 880.987670][T10424] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 882.735193][T10453] x_tables: duplicate underflow at hook 1 [ 887.796239][T10478] loop5: detected capacity change from 0 to 4096 [ 887.808767][T10478] EXT4-fs: inline encryption not supported [ 887.835246][T10478] EXT4-fs (loop5): Test dummy encryption mode enabled [ 887.979675][T10478] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 888.012138][T10478] System zones: 0-5 [ 888.626737][T10478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 890.384884][ T5113] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 890.605266][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 890.621259][T10517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 890.652325][ T5113] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.703300][ T5113] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 890.992220][ T5113] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.778792][ T5113] usb 6-1: string descriptor 0 read error: -71 [ 892.785131][ T5113] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 892.794820][ T5113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.830573][ T5113] usb 6-1: can't set config #1, error -71 [ 892.837816][ T5113] usb 6-1: USB disconnect, device number 10 [ 895.063639][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 898.562729][T10569] x_tables: duplicate underflow at hook 1 [ 902.040008][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.046454][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.504784][T10630] loop6: detected capacity change from 0 to 512 [ 909.512076][T10630] EXT4-fs: inline encryption not supported [ 909.518143][T10630] journal_path: Lookup failure for './file0' [ 909.524255][T10630] EXT4-fs: error: could not find journal device path [ 911.731280][T10045] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 914.636360][T10677] futex_wake_op: syz.3.1398 tries to shift op by 144; fix this program [ 915.619244][T10684] fuse: Bad value for 'fd' [ 915.787926][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 915.813208][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 923.219794][T10732] futex_wake_op: syz.0.1411 tries to shift op by 144; fix this program [ 925.470888][T10744] futex_wake_op: syz.1.1414 tries to shift op by 144; fix this program [ 926.634584][T10743] x_tables: duplicate underflow at hook 1 [ 928.785855][T10752] input: syz0 as /devices/virtual/input/input32 [ 929.005580][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1419'. [ 929.021018][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1419'. [ 932.706312][T10787] futex_wake_op: syz.6.1427 tries to shift op by 144; fix this program [ 933.993330][T10801] loop5: detected capacity change from 0 to 512 [ 934.018822][T10801] ext4: Unknown parameter 'dont_measure' [ 934.090583][T10045] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 936.722370][T10818] x_tables: duplicate underflow at hook 1 [ 943.377021][T10875] loop6: detected capacity change from 0 to 512 [ 943.387264][T10875] EXT4-fs: inline encryption not supported [ 943.393433][T10875] journal_path: Lookup failure for './file0' [ 943.399621][T10875] EXT4-fs: error: could not find journal device path [ 947.359454][T10906] loop6: detected capacity change from 0 to 512 [ 947.386747][T10906] ext4: Unknown parameter 'dont_measure' [ 947.513827][T10045] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 951.621014][T10930] x_tables: duplicate underflow at hook 1 [ 951.966094][T10947] x_tables: duplicate underflow at hook 1 [ 953.100455][T10955] loop5: detected capacity change from 0 to 512 [ 953.340421][T10967] futex_wake_op: syz.3.1467 tries to shift op by 144; fix this program [ 959.550645][T10997] loop6: detected capacity change from 0 to 512 [ 959.578233][T10997] ext4: Unknown parameter 'dont_measure' [ 964.114095][T11013] futex_wake_op: syz.6.1479 tries to shift op by 144; fix this program [ 965.143706][T11017] futex_wake_op: syz.1.1480 tries to shift op by 144; fix this program [ 965.632970][T11020] loop6: detected capacity change from 0 to 512 [ 965.685678][T11020] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 965.741236][T11020] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 968.639893][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 968.667054][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 968.702920][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1484'. [ 968.717249][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1484'. [ 968.731015][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.753334][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.656803][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 970.845450][T11055] input: syz0 as /devices/virtual/input/input34 [ 970.874366][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1488'. [ 970.890088][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1488'. [ 972.717948][T11066] futex_wake_op: syz.6.1493 tries to shift op by 144; fix this program [ 972.745186][T11062] loop5: detected capacity change from 0 to 4096 [ 974.091596][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1496'. [ 974.104240][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1496'. [ 974.967487][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1497'. [ 974.980575][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1497'. [ 976.374796][T11090] loop6: detected capacity change from 0 to 256 [ 976.672827][T11090] exfat: Deprecated parameter 'utf8' [ 976.678339][T11090] exfat: Deprecated parameter 'namecase' [ 976.684268][T11090] exfat: Deprecated parameter 'namecase' [ 976.719005][T11090] exfat: Deprecated parameter 'utf8' [ 976.827682][T11090] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 978.147656][T11103] loop6: detected capacity change from 0 to 512 [ 978.193459][T11103] ext4: Unknown parameter 'dont_measure' [ 978.313020][T11045] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 978.553653][T11110] x_tables: duplicate underflow at hook 1 [ 980.869354][T11122] futex_wake_op: syz.1.1508 tries to shift op by 144; fix this program [ 981.013286][T11118] loop5: detected capacity change from 0 to 4096 [ 982.064179][T11131] loop6: detected capacity change from 0 to 512 [ 983.128841][T11131] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1510: inode has both inline data and extents flags [ 983.261885][T11131] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1510: couldn't read orphan inode 15 (err -117) [ 983.287319][T11131] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 983.541729][T11148] futex_wake_op: syz.1.1513 tries to shift op by 144; fix this program [ 984.400508][ T4324] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 984.638755][ T4324] usb 6-1: unable to get BOS descriptor or descriptor too short [ 984.664490][ T4324] usb 6-1: not running at top speed; connect to a high speed hub [ 984.686989][ T4324] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 984.712749][ T4324] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 984.735902][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.753426][ T4324] usb 6-1: Product: syz [ 984.764403][ T4324] usb 6-1: Manufacturer: syz [ 984.773586][ T4324] usb 6-1: SerialNumber: syz [ 987.165400][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 987.249709][ T4324] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 987.259395][ T4324] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 987.267834][ T4324] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 987.276447][ T4324] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 987.310798][ T4324] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 987.588959][T11177] futex_wake_op: syz.0.1519 tries to shift op by 144; fix this program [ 988.194177][ T4324] usb 6-1: USB disconnect, device number 11 [ 988.300475][T11182] loop5: detected capacity change from 0 to 512 [ 988.384521][T11182] ext4: Unknown parameter 'dont_measure' [ 988.430644][T11183] udevd[11183]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.696945][T11045] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 995.503243][ T14] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 995.639456][T11234] futex_wake_op: syz.5.1532 tries to shift op by 144; fix this program [ 995.719244][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 995.737053][ T14] usb 7-1: not running at top speed; connect to a high speed hub [ 995.759398][ T14] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 995.785814][ T14] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 995.805057][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.823248][ T14] usb 7-1: Product: syz [ 995.833202][ T14] usb 7-1: Manufacturer: syz [ 995.851139][ T14] usb 7-1: SerialNumber: syz [ 996.116736][T11225] loop6: detected capacity change from 0 to 512 [ 996.279948][T11225] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 997.389585][T11244] loop5: detected capacity change from 0 to 4096 [ 997.424700][T11244] EXT4-fs: inline encryption not supported [ 997.478807][T11244] EXT4-fs (loop5): Test dummy encryption mode enabled [ 997.549085][T11244] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 997.585208][T11244] System zones: 0-5 [ 997.627157][T11244] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 998.347171][ T4279] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 998.847262][ T14] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 998.869506][ T14] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 998.877572][ T14] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 998.898186][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 998.944455][ T14] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 998.953038][ T4279] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.990309][ T14] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 998.999196][ T4279] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 999.022359][ T4279] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.067107][ T4279] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 999.082375][ T4279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.103364][ T14] usb 7-1: USB disconnect, device number 3 [ 999.154091][ T4279] usb 6-1: Product: syz [ 999.162593][ T4279] usb 6-1: Manufacturer: syz [ 999.188399][ T4279] usb 6-1: SerialNumber: syz [ 999.283539][T11260] futex_wake_op: syz.1.1538 tries to shift op by 144; fix this program [ 999.705592][T11140] udevd[11140]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.415443][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 1003.433091][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 1003.460484][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1540'. [ 1003.478955][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1540'. [ 1004.008397][ T4279] usb 6-1: 0:2 : does not exist [ 1004.143945][ T4279] usb 6-1: USB disconnect, device number 12 [ 1004.306214][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 1007.686613][T11279] x_tables: duplicate underflow at hook 1 [ 1007.841363][T11282] loop5: detected capacity change from 0 to 512 [ 1007.864143][T11282] EXT4-fs: Ignoring removed mblk_io_submit option [ 1007.954548][T11282] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1007.979051][T11282] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1007.997154][T11286] loop6: detected capacity change from 0 to 512 [ 1008.035269][T11282] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1542: attempt to clear invalid blocks 2 len 1 [ 1008.198107][T11282] EXT4-fs (loop5): Remounting filesystem read-only [ 1008.198128][T11286] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1548: inode has both inline data and extents flags [ 1008.230543][T11282] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1008.232907][T11286] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1548: couldn't read orphan inode 15 (err -117) [ 1008.460541][T11282] EXT4-fs (loop5): Remounting filesystem read-only [ 1008.479628][T11282] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1542: invalid indirect mapped block 1819239214 (level 0) [ 1008.873692][T11286] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1008.883247][T11282] EXT4-fs (loop5): Remounting filesystem read-only [ 1008.939214][T11282] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1542: invalid indirect mapped block 1819239214 (level 1) [ 1009.043673][T11282] EXT4-fs (loop5): Remounting filesystem read-only [ 1009.102014][T11282] EXT4-fs (loop5): 1 truncate cleaned up [ 1009.124102][T11282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1009.546172][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 1009.631249][T11305] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1542: corrupted in-inode xattr [ 1010.379415][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 1010.546093][T11311] input: syz0 as /devices/virtual/input/input35 [ 1010.584414][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1551'. [ 1010.600382][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1551'. [ 1011.625842][T11313] loop5: detected capacity change from 0 to 512 [ 1013.059412][T11313] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1013.104673][T11313] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.331099][T11324] input: syz0 as /devices/virtual/input/input36 [ 1013.379879][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1554'. [ 1013.392671][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1554'. [ 1014.995349][ T6576] EXT4-fs (loop5): unmounting filesystem. [ 1015.094434][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.117693][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.128675][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.143446][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.151802][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1015.159831][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1016.606835][T11340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.965985][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 1018.227820][T11348] loop6: detected capacity change from 0 to 512 [ 1018.319149][T11348] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1560: inode has both inline data and extents flags [ 1018.412824][T11348] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1560: couldn't read orphan inode 15 (err -117) [ 1018.658243][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 1018.670762][T11346] IPv6: sit1: Disabled Multicast RS [ 1018.690560][T11348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1018.946209][ T9229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.135139][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 1020.200609][ T9229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.226640][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 1020.302987][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 1020.315649][T11368] IPv6: sit1: Disabled Multicast RS [ 1020.440691][ T4324] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1020.489675][ T9229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.731167][T11383] input: syz0 as /devices/virtual/input/input37 [ 1021.499545][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1566'. [ 1021.512483][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1566'. [ 1021.562149][T11329] chnl_net:caif_netlink_parms(): no params data found [ 1021.739931][ T4324] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1021.762102][ T4324] usb 6-1: not running at top speed; connect to a high speed hub [ 1021.779433][ T9229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.976793][ T4324] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1022.048854][ T4324] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1022.064193][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.072388][ T4324] usb 6-1: Product: syz [ 1022.076717][ T4324] usb 6-1: Manufacturer: syz [ 1022.082119][ T4324] usb 6-1: SerialNumber: syz [ 1022.172052][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 1022.358072][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 1023.133866][ T4324] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1023.175826][T11393] loop6: detected capacity change from 0 to 4096 [ 1023.186408][ T4324] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1023.276376][ T4324] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1023.297193][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.305066][ T4324] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1024.435164][ T4324] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1024.460446][T11045] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1024.498320][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.506737][ T4324] usb 6-1: USB disconnect, device number 13 [ 1024.542294][T11329] device bridge_slave_0 entered promiscuous mode [ 1024.580541][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 1024.998418][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.005608][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.014168][T11329] device bridge_slave_1 entered promiscuous mode [ 1025.047529][T11140] udevd[11140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.741869][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.832624][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.863019][T11329] team0: Port device team_slave_0 added [ 1026.083986][T11329] team0: Port device team_slave_1 added [ 1026.246234][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.258192][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.338367][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.383312][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.416653][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.534301][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.846411][T11329] device hsr_slave_0 entered promiscuous mode [ 1026.866051][T11329] device hsr_slave_1 entered promiscuous mode [ 1026.897896][T11329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.933810][T11329] Cannot create hsr debugfs directory [ 1027.315874][T11446] binfmt_misc: register: failed to install interpreter file ./file0 [ 1027.692979][T11446] x_tables: duplicate underflow at hook 1 [ 1028.120904][T11457] input: syz0 as /devices/virtual/input/input38 [ 1028.704625][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1578'. [ 1029.887446][T11470] futex_wake_op: syz.6.1581 tries to shift op by 144; fix this program [ 1030.520246][T11329] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1030.614381][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 1030.841117][T11329] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1030.881532][T11329] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1030.902768][T11480] x_tables: duplicate underflow at hook 1 [ 1031.013918][T11329] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1031.854357][T11489] x_tables: duplicate underflow at hook 1 [ 1032.888937][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1032.895446][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1033.129084][ T4291] Bluetooth: hci1: command 0x0411 tx timeout [ 1033.582354][T11511] binfmt_misc: register: failed to install interpreter file ./file0 [ 1033.597278][T11511] x_tables: duplicate underflow at hook 1 [ 1035.636472][T11329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.699753][ T9229] device hsr_slave_0 left promiscuous mode [ 1035.910508][ T9229] device hsr_slave_1 left promiscuous mode [ 1035.917365][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.925040][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.933158][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.959216][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.991057][ T9229] device bridge_slave_1 left promiscuous mode [ 1036.009985][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.893956][T11520] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1036.948141][ T9229] device bridge_slave_0 left promiscuous mode [ 1037.089013][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.802409][ T9229] device veth1_macvtap left promiscuous mode [ 1037.808556][ T9229] device veth0_macvtap left promiscuous mode [ 1039.205137][ T4291] Bluetooth: hci1: command 0x0405 tx timeout [ 1039.970004][ T9229] device veth1_vlan left promiscuous mode [ 1039.976872][ T9229] device veth0_vlan left promiscuous mode [ 1041.269786][T11547] loop6: detected capacity change from 0 to 512 [ 1041.297244][T11550] loop5: detected capacity change from 0 to 256 [ 1041.406297][T11547] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1041.408740][T11550] FAT-fs (loop5): Directory bread(block 64) failed [ 1041.422134][T11550] FAT-fs (loop5): Directory bread(block 65) failed [ 1041.428789][T11550] FAT-fs (loop5): Directory bread(block 66) failed [ 1041.445988][T11550] FAT-fs (loop5): Directory bread(block 67) failed [ 1041.453117][T11550] FAT-fs (loop5): Directory bread(block 68) failed [ 1041.454958][T11547] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.460324][T11550] FAT-fs (loop5): Directory bread(block 69) failed [ 1041.476981][T11550] FAT-fs (loop5): Directory bread(block 70) failed [ 1041.483563][T11550] FAT-fs (loop5): Directory bread(block 71) failed [ 1041.504400][T11550] FAT-fs (loop5): Directory bread(block 72) failed [ 1041.512813][T11550] FAT-fs (loop5): Directory bread(block 73) failed [ 1042.955143][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 1045.138083][T11564] futex_wake_op: syz.6.1595 tries to shift op by 144; fix this program [ 1046.481659][T11565] x_tables: duplicate underflow at hook 1 [ 1046.747146][T11568] loop6: detected capacity change from 0 to 512 [ 1046.797761][T11568] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1597: inode has both inline data and extents flags [ 1046.859527][T11568] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1597: couldn't read orphan inode 15 (err -117) [ 1046.911476][T11568] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1046.960106][ T9229] team0 (unregistering): Port device team_slave_1 removed [ 1047.084341][ T9229] team0 (unregistering): Port device team_slave_0 removed [ 1047.213157][ T9229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.269524][ T9229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.509855][ T9090] EXT4-fs (loop6): unmounting filesystem. [ 1048.370386][ T9229] bond0 (unregistering): Released all slaves [ 1048.822101][T11329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.895210][T11329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1048.932160][T11329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1048.949219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.968434][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.976902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1048.985815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.994732][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.001976][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.010904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.019947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.028634][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.035889][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.044079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.053438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.062928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.073610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.082516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.093378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.103827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.113755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.123216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1049.132122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.142784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.151413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.160261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.168187][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 1049.177630][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1592'. [ 1049.186922][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 1049.196342][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1592'. [ 1049.740447][T11591] futex_wake_op: syz.0.1600 tries to shift op by 144; fix this program [ 1049.794162][T11592] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1050.980208][T11601] loop5: detected capacity change from 0 to 4096 [ 1051.054551][T11601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1051.228647][T11611] process 'syz.1.1608' launched './file0' with NULL argv: empty string added [ 1051.278590][T10578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1051.297269][T10578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1051.332795][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.376547][T11594] EXT4-fs (loop5): unmounting filesystem. [ 1052.679578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1052.712326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1052.788593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1052.816647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1052.841464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1052.872207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1052.903030][T11669] Bluetooth: MGMT ver 1.22 [ 1052.903559][T11329] device veth0_vlan entered promiscuous mode [ 1052.980965][T11329] device veth1_vlan entered promiscuous mode [ 1053.177408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1053.205092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1053.235869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1053.310189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.365440][T11329] device veth0_macvtap entered promiscuous mode [ 1053.409696][T11329] device veth1_macvtap entered promiscuous mode [ 1053.480856][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1053.505594][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1053.558751][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.609952][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.630151][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.685003][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.720495][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.753035][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.781805][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.805389][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.834802][T11329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.883223][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1053.922378][T11693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1053.968304][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1053.981623][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1054.013094][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.041813][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.086323][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.115503][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.137609][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.159033][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.172863][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.183948][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.205959][ T4288] Bluetooth: Wrong link type (-22) [ 1054.209811][T11329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.234361][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1054.285336][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.340397][T11329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.363241][T11329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.421740][T11329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.458203][T11329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.683035][T10578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.714770][T10578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.785108][T11715] 9pnet_virtio: no channels available for device syz [ 1054.798846][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1054.849105][ T9229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.871711][T11705] syz.1.1634 (11705) used greatest stack depth: 18096 bytes left [ 1054.875188][ T9229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.919519][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1054.969511][T11721] device syzkaller0 entered promiscuous mode [ 1055.099615][ T4286] Bluetooth: hci0: command 0x1407 tx timeout [ 1055.100417][ T4291] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1055.739787][T11748] fuse: Bad value for 'fd' [ 1057.951726][T11784] 9pnet_virtio: no channels available for device syz [ 1059.308543][T11816] ipt_CLUSTERIP: Please specify destination IP [ 1061.815760][T11870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1061.849793][T11871] Bluetooth: (null): Invalid header checksum [ 1061.865382][T11870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1681'. [ 1062.710339][ T4288] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1062.719555][ T4288] Bluetooth: hci1: Injecting HCI hardware error event [ 1062.735608][ T4291] Bluetooth: hci1: hardware error 0x00 [ 1063.694167][T11895] x_tables: duplicate underflow at hook 1 [ 1064.888295][ T4286] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 1065.119564][T11910] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1692'. [ 1065.432883][ T5022] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1065.529115][ T4291] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1065.667878][ T5022] usb 6-1: Using ep0 maxpacket: 8 [ 1065.683633][ T5022] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1065.724561][ T5022] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.755888][ T5022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.793124][ T5022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.841645][ T5022] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.870020][ T5022] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.925075][ T5022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.054714][ T4291] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1066.205195][ T5022] usb 6-1: GET_CAPABILITIES returned 0 [ 1066.211220][ T5022] usbtmc 6-1:16.0: can't read capabilities [ 1066.239585][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 1066.383079][T11805] Set syz1 is full, maxelem 65536 reached [ 1066.511460][T11912] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 59 [ 1066.768572][ T7] usb 6-1: USB disconnect, device number 14 [ 1066.851255][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 1067.319328][T11948] infiniband syz0: set down [ 1067.415327][T11961] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 1067.463353][T11948] infiniband syz0: added ipvlan0 [ 1067.894603][T11948] RDS/IB: syz0: added [ 1067.939974][T11948] smc: adding ib device syz0 with port count 1 [ 1067.987385][T11948] smc: ib device syz0 port 1 has pnetid [ 1069.611161][ T4324] usb 8-1: new high-speed USB device number 2 using dummy_hcd getty: ttyS0: read error: Resource temporarily unavailable [ 1069.801302][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.809704][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.817658][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.825584][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.833474][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.837436][ T4324] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1069.841361][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.856978][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.864839][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.872792][T12004] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1069.900428][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.933819][ T4324] usb 8-1: config 0 has no interfaces? [ 1069.946850][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.974021][ T4324] usb 8-1: config 0 has no interfaces? [ 1069.981689][T12007] syz.6.1721 uses obsolete (PF_INET,SOCK_PACKET) [ 1070.001998][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.020428][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.039918][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.059811][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.066844][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.101666][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.135647][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.196078][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.216316][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.248915][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.257727][ T4324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.273012][ T4324] usb 8-1: config 0 has no interfaces? [ 1070.296801][ T4324] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1070.327159][ T4324] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1070.344369][ T4324] usb 8-1: Product: syz [ 1070.352949][ T4324] usb 8-1: Manufacturer: syz [ 1070.357633][ T4324] usb 8-1: SerialNumber: syz [ 1070.403306][ T4324] usb 8-1: config 0 descriptor?? [ 1070.654943][ T5022] usb 8-1: USB disconnect, device number 2 [ 1071.086490][ T4286] Bluetooth: hci5: command 0x2016 tx timeout [ 1071.108176][T12038] device syzkaller0 entered promiscuous mode [ 1071.390369][T12048] futex_wake_op: syz.0.1735 tries to shift op by 144; fix this program [ 1072.428929][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 1072.539137][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.742387][ T4324] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1072.966574][ T4324] usb 6-1: Using ep0 maxpacket: 32 [ 1072.974479][ T4324] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1073.019608][ T4324] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1073.061781][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1073.070882][ T4324] usb 6-1: Product: syz [ 1073.076071][ T4324] usb 6-1: Manufacturer: syz [ 1073.080803][ T4324] usb 6-1: SerialNumber: syz [ 1073.096744][ T4324] usb 6-1: config 0 descriptor?? [ 1073.105386][T12063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1073.118929][ T4324] hub 6-1:0.0: bad descriptor, ignoring hub [ 1073.126050][ T4324] hub: probe of 6-1:0.0 failed with error -5 [ 1073.545351][ T4324] usb 6-1: USB disconnect, device number 15 [ 1075.531991][ T4320] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1075.746360][ T4320] usb 8-1: too many configurations: 212, using maximum allowed: 8 [ 1075.783087][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.832515][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.863374][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.901833][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.958339][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.994262][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.041896][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.101958][ T4320] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.137209][ T4320] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1076.183839][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.205652][ T4320] usb 8-1: Product: syz [ 1076.224518][ T4320] usb 8-1: Manufacturer: syz [ 1076.249460][ T4320] usb 8-1: SerialNumber: syz [ 1076.283314][ T4320] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1076.428743][ T4279] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1076.445549][ T4320] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1076.631886][ T4279] usb 7-1: Using ep0 maxpacket: 32 [ 1076.670317][ T4279] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.696615][ T4279] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.727664][ T4279] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1076.745001][ T4279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.842611][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1769'. [ 1076.858184][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1769'. [ 1077.008184][ T4279] usb 7-1: config 0 descriptor?? [ 1077.371286][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.434607][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.473903][ T6783] usb 8-1: USB disconnect, device number 3 [ 1077.510802][T12180] overlayfs: failed to clone upperpath [ 1077.606788][ T4320] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1077.621868][ T4320] ath9k_htc: Failed to initialize the device [ 1077.661814][ T6783] usb 8-1: ath9k_htc: USB layer deinitialized [ 1078.128256][ T4279] usb 7-1: USB disconnect, device number 4 [ 1080.495465][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 1080.759381][ T4291] Bluetooth: Wrong link type (-22) [ 1081.151255][ T27] audit: type=1326 audit(2000000495.133:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12246 comm="syz.7.1792" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb359cdd9 code=0x0 [ 1081.355604][ T7] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1081.558186][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1081.566078][ T7] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1081.594202][ T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1081.631014][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1081.657195][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1081.682270][ T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1081.710258][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1081.737907][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 syzkaller syzkaller login: [ 1082.004059][ T7] usb 6-1: usb_control_msg returned -32 [ 1082.014281][ T7] usbtmc 6-1:16.0: can't read capabilities [ 1082.769704][T12294] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 1082.985307][ T7] usb 6-1: USB disconnect, device number 16 [ 1083.768256][T12320] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1083.774895][T12320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1083.784607][T12320] vhci_hcd vhci_hcd.0: Device attached [ 1083.994477][ T7] vhci_hcd: vhci_device speed not set [ 1084.080163][ T7] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1084.087854][ T6783] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1084.295767][ T6783] usb 6-1: config 0 has no interfaces? [ 1084.303477][ T6783] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1084.318814][ T6783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.345550][ T6783] usb 6-1: config 0 descriptor?? [ 1084.376812][T12335] 9pnet_virtio: no channels available for device syz [ 1084.386362][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.394257][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.399461][T12310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.456361][T12310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.970618][T12310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.979740][T12310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.989857][T12310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.999074][T12310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.143332][ T4291] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1086.152207][ T4291] Bluetooth: hci2: Injecting HCI hardware error event [ 1086.162403][ T4286] Bluetooth: hci2: hardware error 0x00 [ 1086.225874][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'. [ 1086.261278][ T5520] usb 6-1: USB disconnect, device number 17 [ 1086.271369][T12321] vhci_hcd: connection reset by peer [ 1086.290931][ T4390] vhci_hcd: stop threads [ 1086.295984][ T4390] vhci_hcd: release socket [ 1086.332914][ T4390] vhci_hcd: disconnect device [ 1086.552991][T12368] device syzkaller0 entered promiscuous mode [ 1086.964824][ T4291] Bluetooth: Wrong link type (-57) [ 1088.354370][ T4286] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1089.551216][ T7] vhci_hcd: vhci_device speed not set [ 1089.691170][T12457] 9pnet_virtio: no channels available for device syz [ 1089.936387][T12471] misc userio: Can't change port type on an already running userio instance [ 1090.549592][T12498] netlink: 'syz.7.1866': attribute type 8 has an invalid length. [ 1091.008213][T12516] futex_wake_op: syz.6.1870 tries to shift op by 144; fix this program [ 1092.410473][T12537] netlink: 'syz.1.1877': attribute type 13 has an invalid length. [ 1092.549804][T12537] ------------[ cut here ]------------ [ 1092.555829][T12537] WARNING: CPU: 0 PID: 12537 at kernel/softirq.c:401 __local_bh_enable_ip+0x182/0x1c0 [ 1092.565474][T12537] Modules linked in: [ 1092.569448][T12537] CPU: 0 PID: 12537 Comm: syz.1.1877 Not tainted syzkaller #0 [ 1092.576964][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1092.587083][T12537] RIP: 0010:__local_bh_enable_ip+0x182/0x1c0 [ 1092.593125][T12537] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 40 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 1092.612797][T12537] RSP: 0018:ffffc9000c6b69e0 EFLAGS: 00010046 [ 1092.618929][T12537] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1092.626966][T12537] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88421776 [ 1092.634994][T12537] RBP: ffffc9000c6b6a70 R08: ffff88805815558b R09: 1ffff1100b02aab1 [ 1092.643078][T12537] R10: dffffc0000000000 R11: ffffed100b02aab2 R12: ffff888058155588 [ 1092.651116][T12537] R13: ffff888058155580 R14: dffffc0000000000 R15: 1ffff920018d6d3c [ 1092.659144][T12537] FS: 00007f41578696c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1092.668135][T12537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.674789][T12537] CR2: 00007f1c8a7456b8 CR3: 0000000026523000 CR4: 00000000003526f0 [ 1092.682829][T12537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1092.690858][T12537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1092.698881][T12537] Call Trace: [ 1092.702220][T12537] [ 1092.705197][T12537] ? _local_bh_enable+0xa0/0xa0 [ 1092.710113][T12537] ? page_pool_put_defragged_page+0x436/0x660 [ 1092.716243][T12537] page_pool_put_defragged_page+0x436/0x660 [ 1092.722205][T12537] tun_device_event+0xa62/0x1020 [ 1092.727222][T12537] raw_notifier_call_chain+0xcb/0x160 [ 1092.732668][T12537] dev_change_tx_queue_len+0x12a/0x280 [ 1092.738190][T12537] ? dev_set_mtu+0xc0/0xc0 [ 1092.742665][T12537] ? dev_change_flags+0xe4/0x1a0 [ 1092.747672][T12537] do_setlink+0xec3/0x3e60 [ 1092.752179][T12537] ? _printk+0xda/0x130 [ 1092.756401][T12537] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1092.762721][T12537] ? load_image+0x400/0x400 [ 1092.767296][T12537] ? __nla_validate_parse+0x2072/0x2ac0 [ 1092.772895][T12537] ? netlink_rcv_skb+0x1fb/0x450 [ 1092.777901][T12537] ? netlink_unicast+0x74d/0x8d0 [ 1092.782904][T12537] ? netlink_sendmsg+0x8ad/0xbd0 [ 1092.787934][T12537] ? __nla_validate+0x50/0x50 [ 1092.792695][T12537] ? validate_linkmsg+0x406/0x4c0 [ 1092.797784][T12537] rtnl_newlink+0x10c9/0x20a0 [ 1092.802564][T12537] ? rtnl_setlink+0x510/0x510 [ 1092.807301][T12537] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1092.813519][T12537] ? rcu_is_watching+0x11/0xa0 [ 1092.818345][T12537] ? trace_contention_end+0x5f/0x170 [ 1092.823697][T12537] ? __mutex_lock+0x1ab/0xaf0 [ 1092.828502][T12537] ? rcu_read_unlock+0x8c/0xa0 [ 1092.833348][T12537] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1092.838528][T12537] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1092.843701][T12537] ? rtnl_setlink+0x510/0x510 [ 1092.848440][T12537] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1092.853464][T12537] ? rtnetlink_bind+0x80/0x80 [ 1092.858212][T12537] ? __local_bh_enable_ip+0x136/0x1c0 [ 1092.863640][T12537] ? lockdep_hardirqs_on+0x94/0x140 [ 1092.868895][T12537] ? __local_bh_enable_ip+0x136/0x1c0 [ 1092.874329][T12537] ? _local_bh_enable+0xa0/0xa0 [ 1092.879289][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1092.884474][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1092.889653][T12537] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1092.894923][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1092.900158][T12537] ? ref_tracker_free+0x68c/0x840 [ 1092.905267][T12537] ? __copy_skb_header+0x3ba/0x4f0 [ 1092.910455][T12537] ? refcount_inc+0x70/0x70 [ 1092.915019][T12537] ? memcpy+0x3c/0x60 [ 1092.919054][T12537] ? __copy_skb_header+0x3ba/0x4f0 [ 1092.924232][T12537] ? __skb_clone+0x480/0x790 [ 1092.928905][T12537] netlink_rcv_skb+0x1fb/0x450 [ 1092.933740][T12537] ? rtnetlink_bind+0x80/0x80 [ 1092.938510][T12537] ? netlink_ack+0x1170/0x1170 [ 1092.943360][T12537] ? netlink_deliver_tap+0x2e/0x1b0 [ 1092.948635][T12537] netlink_unicast+0x74d/0x8d0 [ 1092.953481][T12537] netlink_sendmsg+0x8ad/0xbd0 [ 1092.958324][T12537] ? netlink_getsockopt+0x550/0x550 [ 1092.963602][T12537] ? aa_sock_msg_perm+0x94/0x150 [ 1092.968597][T12537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1092.973932][T12537] ? security_socket_sendmsg+0x7c/0xa0 [ 1092.979473][T12537] ? netlink_getsockopt+0x550/0x550 [ 1092.984734][T12537] ____sys_sendmsg+0x5be/0x970 [ 1092.989574][T12537] ? __sys_sendmsg_sock+0x30/0x30 [ 1092.994669][T12537] ? __import_iovec+0x315/0x500 [ 1092.999585][T12537] ? import_iovec+0x6f/0xa0 [ 1093.004152][T12537] ___sys_sendmsg+0x2a2/0x360 [ 1093.008898][T12537] ? try_to_wake_up+0x6ae/0x1080 [ 1093.013910][T12537] ? __sys_sendmsg+0x290/0x290 [ 1093.018800][T12537] __se_sys_sendmsg+0x1bb/0x2a0 [ 1093.023718][T12537] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.028738][T12537] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.033998][T12537] do_syscall_64+0x4c/0xa0 [ 1093.038493][T12537] ? clear_bhb_loop+0x60/0xb0 [ 1093.043235][T12537] ? clear_bhb_loop+0x60/0xb0 [ 1093.047975][T12537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.053933][T12537] RIP: 0033:0x7f415699cdd9 [ 1093.058406][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.078083][T12537] RSP: 002b:00007f4157869028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.086561][T12537] RAX: ffffffffffffffda RBX: 00007f4156c16090 RCX: 00007f415699cdd9 [ 1093.094645][T12537] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 000000000000000d [ 1093.102701][T12537] RBP: 00007f4156a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1093.110730][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.118769][T12537] R13: 00007f4156c16128 R14: 00007f4156c16090 R15: 00007ffdf79445f8 [ 1093.126826][T12537] [ 1093.129904][T12537] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1093.137233][T12537] CPU: 0 PID: 12537 Comm: syz.1.1877 Not tainted syzkaller #0 [ 1093.144740][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.154847][T12537] Call Trace: [ 1093.158181][T12537] [ 1093.161157][T12537] dump_stack_lvl+0x188/0x24e [ 1093.165900][T12537] ? memcpy+0x3c/0x60 [ 1093.169935][T12537] ? show_regs_print_info+0x12/0x12 [ 1093.175205][T12537] ? load_image+0x400/0x400 [ 1093.179776][T12537] panic+0x2e5/0x730 [ 1093.183763][T12537] ? bpf_jit_dump+0xd0/0xd0 [ 1093.188337][T12537] __warn+0x2f8/0x4f0 [ 1093.192371][T12537] ? __local_bh_enable_ip+0x182/0x1c0 [ 1093.197802][T12537] ? __local_bh_enable_ip+0x182/0x1c0 [ 1093.203227][T12537] report_bug+0x2ba/0x4f0 [ 1093.207616][T12537] ? __local_bh_enable_ip+0x182/0x1c0 [ 1093.213039][T12537] handle_bug+0x3a/0x70 [ 1093.217252][T12537] exc_invalid_op+0x16/0x40 [ 1093.221867][T12537] asm_exc_invalid_op+0x16/0x20 [ 1093.226775][T12537] RIP: 0010:__local_bh_enable_ip+0x182/0x1c0 [ 1093.232810][T12537] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 40 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 1093.252475][T12537] RSP: 0018:ffffc9000c6b69e0 EFLAGS: 00010046 [ 1093.258599][T12537] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1093.266618][T12537] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88421776 [ 1093.274638][T12537] RBP: ffffc9000c6b6a70 R08: ffff88805815558b R09: 1ffff1100b02aab1 [ 1093.282661][T12537] R10: dffffc0000000000 R11: ffffed100b02aab2 R12: ffff888058155588 [ 1093.290674][T12537] R13: ffff888058155580 R14: dffffc0000000000 R15: 1ffff920018d6d3c [ 1093.298712][T12537] ? page_pool_put_defragged_page+0x436/0x660 [ 1093.304844][T12537] ? _local_bh_enable+0xa0/0xa0 [ 1093.309761][T12537] ? page_pool_put_defragged_page+0x436/0x660 [ 1093.315883][T12537] page_pool_put_defragged_page+0x436/0x660 [ 1093.321837][T12537] tun_device_event+0xa62/0x1020 [ 1093.327029][T12537] raw_notifier_call_chain+0xcb/0x160 [ 1093.332470][T12537] dev_change_tx_queue_len+0x12a/0x280 [ 1093.337999][T12537] ? dev_set_mtu+0xc0/0xc0 [ 1093.342471][T12537] ? dev_change_flags+0xe4/0x1a0 [ 1093.347476][T12537] do_setlink+0xec3/0x3e60 [ 1093.351966][T12537] ? _printk+0xda/0x130 [ 1093.356232][T12537] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1093.362458][T12537] ? load_image+0x400/0x400 [ 1093.367032][T12537] ? __nla_validate_parse+0x2072/0x2ac0 [ 1093.372630][T12537] ? netlink_rcv_skb+0x1fb/0x450 [ 1093.377646][T12537] ? netlink_unicast+0x74d/0x8d0 [ 1093.382646][T12537] ? netlink_sendmsg+0x8ad/0xbd0 [ 1093.387678][T12537] ? __nla_validate+0x50/0x50 [ 1093.392433][T12537] ? validate_linkmsg+0x406/0x4c0 [ 1093.397518][T12537] rtnl_newlink+0x10c9/0x20a0 [ 1093.402290][T12537] ? rtnl_setlink+0x510/0x510 [ 1093.407031][T12537] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1093.413265][T12537] ? rcu_is_watching+0x11/0xa0 [ 1093.418092][T12537] ? trace_contention_end+0x5f/0x170 [ 1093.423446][T12537] ? __mutex_lock+0x1ab/0xaf0 [ 1093.428194][T12537] ? rcu_read_unlock+0x8c/0xa0 [ 1093.433040][T12537] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1093.438321][T12537] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1093.443510][T12537] ? rtnl_setlink+0x510/0x510 [ 1093.448344][T12537] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1093.453385][T12537] ? rtnetlink_bind+0x80/0x80 [ 1093.458122][T12537] ? __local_bh_enable_ip+0x136/0x1c0 [ 1093.463551][T12537] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.468812][T12537] ? __local_bh_enable_ip+0x136/0x1c0 [ 1093.474236][T12537] ? _local_bh_enable+0xa0/0xa0 [ 1093.479144][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1093.484306][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1093.489479][T12537] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1093.494735][T12537] ? __dev_queue_xmit+0x26b/0x37c0 [ 1093.499993][T12537] ? ref_tracker_free+0x68c/0x840 [ 1093.505088][T12537] ? __copy_skb_header+0x3ba/0x4f0 [ 1093.510259][T12537] ? refcount_inc+0x70/0x70 [ 1093.514817][T12537] ? memcpy+0x3c/0x60 [ 1093.518844][T12537] ? __copy_skb_header+0x3ba/0x4f0 [ 1093.524015][T12537] ? __skb_clone+0x480/0x790 [ 1093.528682][T12537] netlink_rcv_skb+0x1fb/0x450 [ 1093.533514][T12537] ? rtnetlink_bind+0x80/0x80 [ 1093.538251][T12537] ? netlink_ack+0x1170/0x1170 [ 1093.543095][T12537] ? netlink_deliver_tap+0x2e/0x1b0 [ 1093.548358][T12537] netlink_unicast+0x74d/0x8d0 [ 1093.553209][T12537] netlink_sendmsg+0x8ad/0xbd0 [ 1093.558066][T12537] ? netlink_getsockopt+0x550/0x550 [ 1093.563325][T12537] ? aa_sock_msg_perm+0x94/0x150 [ 1093.568314][T12537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1093.573657][T12537] ? security_socket_sendmsg+0x7c/0xa0 [ 1093.579183][T12537] ? netlink_getsockopt+0x550/0x550 [ 1093.584439][T12537] ____sys_sendmsg+0x5be/0x970 [ 1093.589401][T12537] ? __sys_sendmsg_sock+0x30/0x30 [ 1093.594496][T12537] ? __import_iovec+0x315/0x500 [ 1093.599419][T12537] ? import_iovec+0x6f/0xa0 [ 1093.603968][T12537] ___sys_sendmsg+0x2a2/0x360 [ 1093.608712][T12537] ? try_to_wake_up+0x6ae/0x1080 [ 1093.613704][T12537] ? __sys_sendmsg+0x290/0x290 [ 1093.618578][T12537] __se_sys_sendmsg+0x1bb/0x2a0 [ 1093.623495][T12537] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.628596][T12537] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.633858][T12537] do_syscall_64+0x4c/0xa0 [ 1093.638332][T12537] ? clear_bhb_loop+0x60/0xb0 [ 1093.643065][T12537] ? clear_bhb_loop+0x60/0xb0 [ 1093.647845][T12537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.653798][T12537] RIP: 0033:0x7f415699cdd9 [ 1093.658265][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.677926][T12537] RSP: 002b:00007f4157869028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.686403][T12537] RAX: ffffffffffffffda RBX: 00007f4156c16090 RCX: 00007f415699cdd9 [ 1093.694444][T12537] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 000000000000000d [ 1093.702477][T12537] RBP: 00007f4156a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1093.710496][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.718516][T12537] R13: 00007f4156c16128 R14: 00007f4156c16090 R15: 00007ffdf79445f8 [ 1093.726560][T12537] [ 1093.730233][T12537] Kernel Offset: disabled [ 1093.734679][T12537] Rebooting in 86400 seconds..