last executing test programs: 15m58.03839221s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 15m56.460351516s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800100000000000000a0000000000000004000400"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) 15m52.530480014s ago: executing program 2 (id=10): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 15m44.676734811s ago: executing program 2 (id=21): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040)=0x40, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x3afb075, 0x0) 15m42.300600464s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800100000000000000a0000000000000004000400"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 15m38.968360469s ago: executing program 2 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 15m25.963889282s ago: executing program 32 (id=30): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x80000, 0x8}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) 15m22.769907823s ago: executing program 33 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 14m37.97244791s ago: executing program 6 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800100000000000000a0000000000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 14m36.66824544s ago: executing program 6 (id=103): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x20040000) bind$inet6(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m30.121792397s ago: executing program 6 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800100000000000000a0000000000000004000400"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 14m25.336702554s ago: executing program 6 (id=118): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x80000, 0x8}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) 14m16.754345417s ago: executing program 3 (id=131): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x20040000) bind$inet6(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m14.685834364s ago: executing program 3 (id=134): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x80000, 0x8}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000440)=""/4100, 0x1004}], 0x1, 0x2c2, 0xca) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x3}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 14m8.350533896s ago: executing program 34 (id=118): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint={0x80000, 0x8}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) 14m8.230130639s ago: executing program 3 (id=139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 14m7.112617164s ago: executing program 3 (id=140): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x78bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040085}, 0x8010) 14m5.748000665s ago: executing program 3 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800100000000000000a0000000000000004000400"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 14m4.110696822s ago: executing program 3 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 13m47.764559609s ago: executing program 35 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 11m34.538960764s ago: executing program 4 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 11m32.849898812s ago: executing program 4 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 11m26.842552477s ago: executing program 4 (id=262): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x20040000) bind$inet6(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m22.196294951s ago: executing program 4 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 11m17.635488374s ago: executing program 4 (id=272): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x20040000) bind$inet6(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m5.147476425s ago: executing program 4 (id=278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 10m50.057343014s ago: executing program 36 (id=278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 9m18.663436459s ago: executing program 9 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20044804) 9m15.751293234s ago: executing program 9 (id=433): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m12.662832954s ago: executing program 9 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 9m11.262127025s ago: executing program 9 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20044804) 9m8.103368626s ago: executing program 9 (id=447): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x5, @private=0x80000001}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) 9m6.965898312s ago: executing program 9 (id=452): socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 8m51.660343726s ago: executing program 37 (id=452): socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 6.770035s ago: executing program 1 (id=1791): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, r0, 0x1, 0x0, 0x25dfdbfc, {0x1c}}, 0x14}}, 0x890) 6.607419424s ago: executing program 1 (id=1795): bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 4.356845374s ago: executing program 8 (id=1814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) capset(0x0, &(0x7f0000000040)={0x8001, 0x10ffff, 0x3, 0x0, 0x0, 0x1fffc}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x100, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1cd45, 0x1313}}, 0x20}, 0x1, 0x0, 0x0, 0x4004051}, 0x40008c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 4.263848026s ago: executing program 8 (id=1816): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000180)) 4.159901148s ago: executing program 8 (id=1818): syz_emit_ethernet(0x22, &(0x7f0000000280)={@link_local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x25, 0x0, @loopback, @broadcast}}}}}, 0x0) epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.099339979s ago: executing program 8 (id=1819): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.041293381s ago: executing program 8 (id=1820): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) wait4(r0, 0x0, 0x40000000, &(0x7f0000000000)) 3.377695425s ago: executing program 1 (id=1824): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40001) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x91f) 3.283361218s ago: executing program 5 (id=1825): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.266405208s ago: executing program 1 (id=1826): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.228662579s ago: executing program 5 (id=1827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRESHEX=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="07000000bb1e"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 3.103446561s ago: executing program 1 (id=1828): syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000002080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x36, 0x1, 0x7, 0x1, 0x3, 0x22, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) 2.869815677s ago: executing program 5 (id=1829): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x22000081) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2.743488269s ago: executing program 5 (id=1830): r0 = socket(0x10, 0x803, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0xbc, 0x6}, &(0x7f0000000680)=0xc) 2.658446322s ago: executing program 5 (id=1831): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000140)=0x9, 0x1e, 0x2) 2.519316105s ago: executing program 7 (id=1833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f00000001c0)) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setlease(r5, 0x400, 0x0) 2.519171494s ago: executing program 5 (id=1834): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xfffff001, 0x104a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x5) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) 2.363295588s ago: executing program 0 (id=1835): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x20) 2.311541909s ago: executing program 0 (id=1836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.579389375s ago: executing program 0 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04002c0012800c0001006d6163766c616e001c000280080009000600008008001a00100000000800030003000000140035006d6163766c616e30"], 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) 1.579187205s ago: executing program 7 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1.557974146s ago: executing program 0 (id=1839): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.499892577s ago: executing program 7 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) memfd_secret(0x0) 1.478940437s ago: executing program 8 (id=1841): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000031401"], 0x60}}, 0x20000000) 1.427327749s ago: executing program 0 (id=1842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4009) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+60000}, 0x10) r6 = memfd_create(&(0x7f0000000500)='y\x105\xfe\xf7u\x83%:r\xc2t\xcd\x9d&\xbd\x8aI-I\xc3\x8d\xfdv\xef\xd8\xc9a\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x18x\xc5\xd47N(\x05\xce\xb7\x01\rev%\bJ\xb0\x9e\x9e\r\xe2~\x00Wv6H\xcbD(<1\xd3|{W\xd7\xf9\xc8\xb6v16\xd0\x9e\xfe\xb3^/\xe5\xf7{\x931\x85\xf6O\x907Q\xd6J`\x9d53Lg\nwv2O\xefmH\xb2\xad@\x00\xb7\xad\xf5\x82\x1e\xb1\xe6\t\x19kTi\x01\x15_,T\x1a\x140x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="02013600002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) kernel console output (not intermixed with test programs): 334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.833371][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.886591][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.913135][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.952958][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.992518][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.047812][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.087992][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.140075][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.445273][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.867852][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.621752][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.634496][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.667577][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.450650][ T5933] openvswitch: netlink: EtherType 0 is less than min 600 [ 363.161427][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.212783][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.357383][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.368301][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.394217][ T5742] device veth0_vlan entered promiscuous mode [ 363.430458][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.470864][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.668367][ T5943] openvswitch: netlink: EtherType 0 is less than min 600 [ 364.880673][ T5742] device veth1_vlan entered promiscuous mode [ 367.232091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.426371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.440422][ T5742] device veth0_macvtap entered promiscuous mode [ 367.476570][ T5742] device veth1_macvtap entered promiscuous mode [ 367.541843][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.637313][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.682026][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.735660][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.824496][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.873107][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.981999][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.057931][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.157251][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.388115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.782818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.800886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.020052][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.147880][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.189211][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.273856][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.167758][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.639758][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.710624][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.852028][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.961080][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.142097][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.225619][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.374919][ T5742] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.422075][ T5742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.472078][ T5742] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.532111][ T5742] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.933358][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.992025][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.065259][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.152089][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.159996][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.227870][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.039292][ T5984] openvswitch: netlink: EtherType 0 is less than min 600 [ 377.316288][ T5984] binder: BINDER_SET_CONTEXT_MGR already set [ 377.323418][ T5984] binder: 5980:5984 ioctl 4018620d 200000004a80 returned -16 [ 377.963086][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 378.366234][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.372602][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.727356][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 380.701058][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 382.843103][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 384.580152][ T6004] openvswitch: netlink: EtherType 0 is less than min 600 [ 385.079047][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.205668][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.251614][ T5973] device bridge_slave_0 entered promiscuous mode [ 385.279800][ T6012] openvswitch: netlink: EtherType 0 is less than min 600 [ 385.322492][ T5060] Bluetooth: hci3: command 0x0419 tx timeout [ 385.453621][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.570480][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.704986][ T5973] device bridge_slave_1 entered promiscuous mode [ 386.779963][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.823327][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.936842][ T5973] team0: Port device team_slave_0 added [ 386.973268][ T5973] team0: Port device team_slave_1 added [ 387.233738][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.240699][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.359997][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.403718][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.605434][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.412046][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.484163][ T4340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.538638][ T5973] device hsr_slave_0 entered promiscuous mode [ 388.572589][ T5973] device hsr_slave_1 entered promiscuous mode [ 388.588021][ T5973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.595917][ T5973] Cannot create hsr debugfs directory [ 388.613353][ T4340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.666730][ T4340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.815347][ T4340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.114479][ T6050] openvswitch: netlink: EtherType 0 is less than min 600 [ 393.149357][ T6050] binder: BINDER_SET_CONTEXT_MGR already set [ 393.155620][ T6050] binder: 6049:6050 ioctl 4018620d 200000004a80 returned -16 [ 393.410900][ T5973] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.196678][ T5973] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.343404][ T5973] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.909391][ T5973] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 397.563394][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.910586][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.982633][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.109903][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.417990][ T6098] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 399.463558][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.631259][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.667763][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.675001][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.762693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.923050][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.931553][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.938679][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.980452][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.030848][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.131461][ T5973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.222618][ T5973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.296126][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.320273][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.354071][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.369384][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.385957][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.418791][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.508918][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.579540][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.598270][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.662966][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.769972][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.525432][ T6133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 404.600673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.625280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.669248][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.710603][ T4340] device hsr_slave_0 left promiscuous mode [ 404.995546][ T4340] device hsr_slave_1 left promiscuous mode [ 405.005652][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.150215][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.174742][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.188097][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.217850][ T4340] device bridge_slave_1 left promiscuous mode [ 406.244477][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.282703][ T4340] device bridge_slave_0 left promiscuous mode [ 406.298074][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.339877][ T4340] device veth1_macvtap left promiscuous mode [ 406.358254][ T4340] device veth0_macvtap left promiscuous mode [ 406.378268][ T4340] device veth1_vlan left promiscuous mode [ 406.387845][ T4340] device veth0_vlan left promiscuous mode [ 407.870141][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 407.896681][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 407.908931][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.953945][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.695432][ T4340] bond0 (unregistering): Released all slaves [ 410.454879][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.490452][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.776467][ T5973] device veth0_vlan entered promiscuous mode [ 411.117036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.198113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.332199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.340269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.364071][ T5973] device veth1_vlan entered promiscuous mode [ 411.437256][ T6216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.434945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.543245][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.566930][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.823592][ T5973] device veth0_macvtap entered promiscuous mode [ 412.902310][ T5973] device veth1_macvtap entered promiscuous mode [ 413.089048][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.129926][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.176835][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.216147][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.249310][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.294569][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.322178][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.349768][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.385769][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.468789][ T6228] device syzkaller0 entered promiscuous mode [ 413.484261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.537766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.495007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.511369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.533107][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.261183][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.291943][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.306527][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.326794][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.381291][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.579850][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.592890][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.604006][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.720642][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 415.763370][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.822223][ T5973] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.844177][ T5973] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.868652][ T5973] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.907062][ T5973] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.139718][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.175053][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.248555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.339542][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.363640][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.371368][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.734770][ T6287] syz.1.334 (6287) used greatest stack depth: 20832 bytes left [ 421.881637][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 421.974202][ T6326] device syzkaller0 entered promiscuous mode [ 423.287267][ T6340] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 423.315907][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.343'. [ 423.326413][ T6337] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 425.344583][ T6371] ubi: mtd0 is already attached to ubi0 [ 426.153342][ T6375] device syzkaller0 entered promiscuous mode [ 429.872318][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.361'. [ 429.881392][ T6411] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 435.612608][ T6474] device syzkaller0 entered promiscuous mode [ 439.804656][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.810999][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.045443][ T6551] binder: BINDER_SET_CONTEXT_MGR already set [ 444.051524][ T6551] binder: 6547:6551 ioctl 4018620d 200000004a80 returned -16 [ 444.348963][ T6553] device syzkaller0 entered promiscuous mode [ 447.001920][ T4744] Bluetooth: hci2: command 0x0406 tx timeout [ 450.519936][ T6610] device syzkaller0 entered promiscuous mode [ 450.864760][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.398'. [ 450.873894][ T6628] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 454.826182][ T6662] binder: 6659:6662 ioctl 4018620d 0 returned -22 [ 457.310617][ T6680] openvswitch: netlink: Message has 8 unknown bytes. [ 457.337514][ T6680] binder: BINDER_SET_CONTEXT_MGR already set [ 457.343575][ T6680] binder: 6673:6680 ioctl 4018620d 200000004a80 returned -16 [ 459.730376][ T6698] device syzkaller0 entered promiscuous mode [ 465.608000][ T6758] openvswitch: netlink: EtherType 0 is less than min 600 [ 465.621144][ T6758] binder: 6751:6758 ioctl c0306201 0 returned -14 [ 465.642184][ T6758] binder: BINDER_SET_CONTEXT_MGR already set [ 465.648237][ T6758] binder: 6751:6758 ioctl 4018620d 200000004a80 returned -16 [ 466.504766][ T6763] device syzkaller0 entered promiscuous mode [ 470.678384][ T6792] binder: 6785:6792 ioctl c0306201 0 returned -14 [ 471.922531][ T6815] device syzkaller0 entered promiscuous mode [ 472.828291][ T6824] binder: BINDER_SET_CONTEXT_MGR already set [ 472.834370][ T6824] binder: 6820:6824 ioctl 4018620d 200000004a80 returned -16 [ 472.845833][ T6824] binder: 6820:6824 ioctl c0306201 0 returned -14 [ 477.504885][ T6858] binder: 6856:6858 ioctl c0306201 0 returned -14 [ 478.343705][ T6874] device syzkaller0 entered promiscuous mode [ 481.793511][ T6900] openvswitch: netlink: EtherType 0 is less than min 600 [ 481.814429][ T6900] binder: BINDER_SET_CONTEXT_MGR already set [ 481.820478][ T6900] binder: 6898:6900 ioctl 4018620d 200000004a80 returned -16 [ 489.404990][ T6971] openvswitch: netlink: EtherType 0 is less than min 600 [ 493.451764][ T7006] device syzkaller0 entered promiscuous mode [ 494.546255][ T7019] binder: BINDER_SET_CONTEXT_MGR already set [ 494.552404][ T7019] binder: 7011:7019 ioctl 4018620d 200000004a80 returned -16 [ 495.230774][ T7039] openvswitch: netlink: EtherType 0 is less than min 600 [ 495.243229][ T7039] binder: 7035:7039 ioctl c0306201 0 returned -14 [ 495.468073][ T7042] openvswitch: netlink: EtherType 0 is less than min 600 [ 495.479858][ T7042] binder: 7036:7042 ioctl c0306201 0 returned -14 [ 496.973658][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 497.047993][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 497.063874][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.071020][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.081385][ T7027] device bridge_slave_0 entered promiscuous mode [ 497.103255][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.110381][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.125074][ T7027] device bridge_slave_1 entered promiscuous mode [ 498.205021][ T4399] Bluetooth: hci3: command 0x0406 tx timeout [ 498.995183][ T7075] device syzkaller0 entered promiscuous mode [ 499.069466][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.130811][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.172656][ T4399] Bluetooth: hci4: command 0x041b tx timeout [ 499.955877][ T7027] team0: Port device team_slave_0 added [ 499.964498][ T7027] team0: Port device team_slave_1 added [ 500.065235][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.140602][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.247963][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.255298][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.263450][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 501.375949][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.388368][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.396112][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.422172][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.531601][ T7101] openvswitch: netlink: EtherType 0 is less than min 600 [ 501.543872][ T7101] binder: 7088:7101 ioctl c0306201 0 returned -14 [ 501.805131][ T7027] device hsr_slave_0 entered promiscuous mode [ 501.844973][ T7027] device hsr_slave_1 entered promiscuous mode [ 501.868003][ T7027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.891040][ T7027] Cannot create hsr debugfs directory [ 502.830293][ T418] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.915790][ T418] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.954200][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 504.018296][ T418] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.751313][ T418] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.607321][ T7147] device syzkaller0 entered promiscuous mode [ 507.903306][ T7175] Zero length message leads to an empty skb [ 510.978761][ T7027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.015682][ T7027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.870886][ T7027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.889466][ T7027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.710464][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.829105][ T7232] device syzkaller0 entered promiscuous mode [ 512.846877][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.867770][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.397818][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.713360][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.731737][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.752276][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.759358][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.814928][ T7027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.825438][ T7027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.893652][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.923251][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.932594][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.941022][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.948143][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.978654][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.530572][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 515.613011][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 515.632485][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.663501][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.672399][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.681318][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.690478][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.700467][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.709089][ T7264] openvswitch: netlink: EtherType 0 is less than min 600 [ 515.719694][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.755589][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.789992][ T7268] openvswitch: netlink: EtherType 0 is less than min 600 [ 515.806391][ T7268] binder: 7266:7268 ioctl c0306201 0 returned -14 [ 515.829623][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.309024][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.839392][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.989015][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.171350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.220289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.369687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.378238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.498115][ T7027] device veth0_vlan entered promiscuous mode [ 520.597720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.609984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.682719][ T7027] device veth1_vlan entered promiscuous mode [ 520.795200][ T418] device hsr_slave_0 left promiscuous mode [ 520.803510][ T418] device hsr_slave_1 left promiscuous mode [ 520.846485][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.018925][ T418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.167593][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.293559][ T418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.998582][ T418] device bridge_slave_1 left promiscuous mode [ 522.004847][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.013646][ T418] device bridge_slave_0 left promiscuous mode [ 522.027817][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.101800][ T418] device veth1_macvtap left promiscuous mode [ 523.111707][ T418] device veth0_macvtap left promiscuous mode [ 523.125351][ T418] device veth1_vlan left promiscuous mode [ 523.131167][ T418] device veth0_vlan left promiscuous mode [ 523.520007][ T418] team0 (unregistering): Port device team_slave_1 removed [ 523.535307][ T418] team0 (unregistering): Port device team_slave_0 removed [ 523.546890][ T418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.560145][ T418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.620511][ T418] bond0 (unregistering): Released all slaves [ 523.668675][ T7322] device syzkaller0 entered promiscuous mode [ 523.760615][ T7027] device veth0_macvtap entered promiscuous mode [ 523.777033][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.791219][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.804436][ T7027] device veth1_macvtap entered promiscuous mode [ 523.850991][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.870153][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.078338][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.098910][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.192487][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.211917][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.232386][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.266392][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.306166][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.381996][ T7370] openvswitch: netlink: Message has 8 unknown bytes. [ 524.648787][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.707088][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.805359][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.832243][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.842414][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.554221][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.584663][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.735142][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.844492][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.941302][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.058254][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.135007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.432512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.489508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.546870][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.542'. [ 526.556183][ T7394] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 526.802449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.829954][ T7027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.862927][ T7027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.879926][ T7027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.890898][ T7027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.029878][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 527.038848][ T7404] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 527.307736][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.322815][ T7411] device syzkaller0 entered promiscuous mode [ 527.349537][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.385567][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 527.474905][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.488917][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.499175][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.568862][ T7420] openvswitch: netlink: Message has 8 unknown bytes. [ 530.951290][ T7463] openvswitch: netlink: Message has 8 unknown bytes. [ 530.978796][ T7463] binder: BINDER_SET_CONTEXT_MGR already set [ 530.984852][ T7463] binder: 7461:7463 ioctl 4018620d 200000004a80 returned -16 [ 533.886406][ T7475] openvswitch: netlink: Message has 8 unknown bytes. [ 534.977455][ T7480] openvswitch: netlink: EtherType 0 is less than min 600 [ 534.996059][ T7480] binder: 7470:7480 ioctl c0306201 0 returned -14 [ 535.012067][ T7480] binder: 7470:7480 ioctl 4018620d 0 returned -22 [ 535.964999][ T7482] openvswitch: netlink: EtherType 0 is less than min 600 [ 536.048864][ T7482] binder: 7481:7482 ioctl c0306201 0 returned -14 [ 536.165466][ T7482] binder: 7481:7482 ioctl 4018620d 0 returned -22 [ 538.231842][ T7526] openvswitch: netlink: EtherType 0 is less than min 600 [ 538.247480][ T7526] binder: 7523:7526 ioctl c0306201 0 returned -14 [ 538.266220][ T7526] binder: BINDER_SET_CONTEXT_MGR already set [ 538.272318][ T7526] binder: 7523:7526 ioctl 4018620d 200000004a80 returned -16 [ 538.284336][ T7526] binder: 7523:7526 ioctl c0306201 0 returned -14 [ 541.562737][ T7540] openvswitch: netlink: Message has 8 unknown bytes. [ 543.529236][ T7546] device syzkaller0 entered promiscuous mode [ 545.983570][ T7570] openvswitch: netlink: Message has 8 unknown bytes. [ 546.373696][ T7575] openvswitch: netlink: EtherType 0 is less than min 600 [ 546.385776][ T7575] binder: 7569:7575 ioctl c0306201 0 returned -14 [ 546.404561][ T7575] binder: 7569:7575 ioctl c0306201 0 returned -14 [ 548.957965][ T7584] openvswitch: netlink: Message has 8 unknown bytes. [ 548.979130][ T7584] binder: 7582:7584 ioctl 4018620d 0 returned -22 [ 550.052060][ T7590] openvswitch: netlink: Message has 8 unknown bytes. [ 550.073426][ T7590] binder: 7585:7590 ioctl 4018620d 0 returned -22 [ 553.506615][ T7622] openvswitch: netlink: Message has 8 unknown bytes. [ 553.598744][ T7622] binder: 7614:7622 ioctl 4018620d 0 returned -22 [ 554.403713][ T7629] openvswitch: netlink: Message has 8 unknown bytes. [ 554.426893][ T7629] binder: BINDER_SET_CONTEXT_MGR already set [ 554.432973][ T7629] binder: 7625:7629 ioctl 4018620d 200000004a80 returned -16 [ 554.444766][ T7629] binder: 7625:7629 ioctl c0306201 0 returned -14 [ 555.499388][ T7637] openvswitch: netlink: EtherType 0 is less than min 600 [ 555.511666][ T7637] binder: 7631:7637 ioctl c0306201 0 returned -14 [ 555.529150][ T7637] binder: BINDER_SET_CONTEXT_MGR already set [ 555.535336][ T7637] binder: 7631:7637 ioctl 4018620d 200000004a80 returned -16 [ 556.466934][ T7639] openvswitch: netlink: Message has 8 unknown bytes. [ 556.487032][ T7639] binder: BINDER_SET_CONTEXT_MGR already set [ 556.493128][ T7639] binder: 7624:7639 ioctl 4018620d 200000004a80 returned -16 [ 556.505018][ T7639] binder: 7624:7639 ioctl c0306201 0 returned -14 [ 556.924023][ T7638] openvswitch: netlink: EtherType 0 is less than min 600 [ 556.936848][ T7638] binder: 7633:7638 ioctl c0306201 0 returned -14 [ 556.952753][ T7638] binder: BINDER_SET_CONTEXT_MGR already set [ 556.958825][ T7638] binder: 7633:7638 ioctl 4018620d 200000004a80 returned -16 [ 557.193766][ T7628] binder: 7626:7628 ioctl c0306201 0 returned -14 [ 557.312021][ T7645] openvswitch: netlink: Message has 8 unknown bytes. [ 557.331469][ T7645] binder: BINDER_SET_CONTEXT_MGR already set [ 557.337605][ T7645] binder: 7643:7645 ioctl 4018620d 200000004a80 returned -16 [ 558.274692][ T7651] device syzkaller0 entered promiscuous mode [ 561.931494][ T7688] openvswitch: netlink: Message has 8 unknown bytes. [ 561.951160][ T7688] binder: BINDER_SET_CONTEXT_MGR already set [ 561.957375][ T7688] binder: 7682:7688 ioctl 4018620d 200000004a80 returned -16 [ 562.685807][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.692191][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.909265][ T7675] openvswitch: netlink: Message has 8 unknown bytes. [ 564.398244][ T7701] device syzkaller0 entered promiscuous mode [ 569.093900][ T7734] openvswitch: netlink: Message has 8 unknown bytes. [ 569.161204][ T7734] binder: BINDER_SET_CONTEXT_MGR already set [ 569.167395][ T7734] binder: 7728:7734 ioctl 4018620d 200000004a80 returned -16 [ 572.452843][ T7763] device syzkaller0 entered promiscuous mode [ 579.202928][ T7833] device syzkaller0 entered promiscuous mode [ 580.160921][ T7842] device syzkaller0 entered promiscuous mode [ 580.301918][ T7848] loop5: detected capacity change from 0 to 512 [ 580.338515][ T7848] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 580.437470][ T7848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 581.046886][ T7848] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 581.202576][ T7848] EXT4-fs (loop5): Remounting filesystem read-only [ 581.209627][ T7848] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 581.284000][ T7848] EXT4-fs (loop5): 1 truncate cleaned up [ 581.289805][ T7848] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 584.798805][ T7890] loop5: detected capacity change from 0 to 512 [ 585.478775][ T7890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 585.604179][ T7890] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 585.622873][ T7890] EXT4-fs (loop5): Remounting filesystem read-only [ 585.629800][ T7890] EXT4-fs (loop5): 1 truncate cleaned up [ 585.635542][ T7890] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 585.720688][ T7894] device syzkaller0 entered promiscuous mode [ 589.688636][ T7952] device syzkaller0 entered promiscuous mode [ 589.873009][ T7956] netlink: 76 bytes leftover after parsing attributes in process `syz.5.675'. [ 589.906676][ T7956] loop5: detected capacity change from 0 to 512 [ 590.510691][ T7956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 591.401329][ T7956] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 591.416561][ T7956] EXT4-fs (loop5): Remounting filesystem read-only [ 591.423470][ T7956] EXT4-fs (loop5): 1 truncate cleaned up [ 591.429128][ T7956] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 593.933393][ T7993] netlink: 76 bytes leftover after parsing attributes in process `syz.7.682'. [ 593.965419][ T7993] loop7: detected capacity change from 0 to 512 [ 594.501580][ T7993] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 594.931095][ T7993] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 594.957420][ T7993] EXT4-fs (loop7): Remounting filesystem read-only [ 594.964501][ T7993] EXT4-fs (loop7): 1 truncate cleaned up [ 594.970197][ T7993] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 595.222866][ T8006] device syzkaller0 entered promiscuous mode [ 596.309437][ T8019] netlink: 76 bytes leftover after parsing attributes in process `syz.7.688'. [ 597.652142][ T8030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 600.654406][ T8046] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 602.662733][ T8075] device syzkaller0 entered promiscuous mode [ 602.946007][ T8083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 606.516777][ T8101] binder: 8099:8101 ioctl 4018620d 0 returned -22 [ 606.535964][ T8101] openvswitch: netlink: EtherType 0 is less than min 600 [ 609.965477][ T8128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 610.756202][ T8133] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 611.253556][ T8136] device syzkaller0 entered promiscuous mode [ 612.133299][ T8160] device syzkaller0 entered promiscuous mode [ 612.828462][ T8168] device syzkaller0 entered promiscuous mode [ 614.065733][ T8180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 617.676602][ T8228] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 618.581044][ T8234] loop1: detected capacity change from 0 to 512 [ 618.608762][ T8233] device syzkaller0 entered promiscuous mode [ 618.744029][ T8234] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 619.173283][ T8234] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 619.192730][ T8234] EXT4-fs (loop1): Remounting filesystem read-only [ 619.199588][ T8234] EXT4-fs (loop1): 1 truncate cleaned up [ 619.205339][ T8234] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 620.168910][ T8245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 621.155167][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 624.127045][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.135202][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.398684][ T8300] loop8: detected capacity change from 0 to 512 [ 625.129018][ T8300] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 625.181580][ T8300] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 625.196455][ T8300] EXT4-fs (loop8): Remounting filesystem read-only [ 625.206162][ T8300] EXT4-fs (loop8): 1 truncate cleaned up [ 625.211889][ T8300] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 625.323263][ T8311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 626.338391][ T8316] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 627.136861][ T8329] netlink: 76 bytes leftover after parsing attributes in process `syz.8.753'. [ 627.168867][ T8329] loop8: detected capacity change from 0 to 512 [ 627.541806][ T8329] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 628.381218][ T8329] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 628.396681][ T8329] EXT4-fs (loop8): Remounting filesystem read-only [ 628.407740][ T8329] EXT4-fs (loop8): 1 truncate cleaned up [ 628.413555][ T8329] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 630.168196][ T8358] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 631.353021][ T8365] netlink: 76 bytes leftover after parsing attributes in process `syz.5.763'. [ 631.384963][ T8365] loop5: detected capacity change from 0 to 512 [ 632.095362][ T8365] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 632.214738][ T8365] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 632.230499][ T8365] EXT4-fs (loop5): Remounting filesystem read-only [ 632.237508][ T8365] EXT4-fs (loop5): 1 truncate cleaned up [ 632.243378][ T8365] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 632.558525][ T8386] netlink: 76 bytes leftover after parsing attributes in process `syz.7.767'. [ 632.590435][ T8386] loop7: detected capacity change from 0 to 512 [ 633.155048][ T8386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 633.288169][ T8386] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 633.305236][ T8386] EXT4-fs (loop7): Remounting filesystem read-only [ 633.313602][ T8386] EXT4-fs (loop7): 1 truncate cleaned up [ 633.319355][ T8386] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 638.493798][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 639.660786][ T8433] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 641.884120][ T8458] netlink: 76 bytes leftover after parsing attributes in process `syz.5.781'. [ 641.916596][ T8458] loop5: detected capacity change from 0 to 512 [ 643.174978][ T8458] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 643.700574][ T8458] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 643.715733][ T8458] EXT4-fs (loop5): Remounting filesystem read-only [ 643.722713][ T8458] EXT4-fs (loop5): 1 truncate cleaned up [ 643.728361][ T8458] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 644.838224][ T8474] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 646.900986][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 647.583050][ T8498] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 647.679794][ T8501] netlink: 76 bytes leftover after parsing attributes in process `syz.8.792'. [ 647.693160][ T8501] loop8: detected capacity change from 0 to 512 [ 648.203298][ T8501] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 648.333130][ T8517] netlink: 76 bytes leftover after parsing attributes in process `syz.5.806'. [ 648.351008][ T8517] loop5: detected capacity change from 0 to 512 [ 648.747338][ T8501] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 648.768556][ T8501] EXT4-fs (loop8): Remounting filesystem read-only [ 648.779663][ T8501] EXT4-fs (loop8): 1 truncate cleaned up [ 648.785402][ T8501] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 648.835002][ T8517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 648.856567][ T8517] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 648.873978][ T8517] EXT4-fs (loop5): Remounting filesystem read-only [ 648.881051][ T8517] EXT4-fs (loop5): 1 truncate cleaned up [ 648.886885][ T8517] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 657.092798][ T8592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 658.724507][ T8614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 660.314999][ T8633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.821'. [ 660.334310][ T8633] loop0: detected capacity change from 0 to 512 [ 662.155121][ T8633] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 662.465582][ T8633] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 662.973061][ T8633] EXT4-fs (loop0): Remounting filesystem read-only [ 662.988471][ T8633] EXT4-fs (loop0): 1 truncate cleaned up [ 662.994257][ T8633] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 664.124220][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.828'. [ 665.218988][ T8679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.831'. [ 665.233308][ T8679] loop1: detected capacity change from 0 to 512 [ 666.080419][ T8692] netlink: 76 bytes leftover after parsing attributes in process `syz.5.835'. [ 666.096046][ T8692] loop5: detected capacity change from 0 to 512 [ 666.104521][ T8679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 667.164804][ T8692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 667.215212][ T8679] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 667.230421][ T8679] EXT4-fs (loop1): Remounting filesystem read-only [ 667.230559][ T8692] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 667.238673][ T8679] EXT4-fs (loop1): 1 truncate cleaned up [ 667.258013][ T8679] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 667.279236][ T8692] EXT4-fs (loop5): Remounting filesystem read-only [ 667.286261][ T8692] EXT4-fs (loop5): 1 truncate cleaned up [ 667.292033][ T8692] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 669.454570][ T8739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.843'. [ 669.478950][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 669.792275][ T8739] loop1: detected capacity change from 0 to 512 [ 669.846768][ T8739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 669.933673][ T8739] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 669.950157][ T8739] EXT4-fs (loop1): Remounting filesystem read-only [ 669.960709][ T8739] EXT4-fs (loop1): 1 truncate cleaned up [ 669.966492][ T8739] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 671.569508][ T8759] netlink: 76 bytes leftover after parsing attributes in process `syz.1.847'. [ 671.592897][ T8759] loop1: detected capacity change from 0 to 512 [ 671.624802][ T8759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 672.504730][ T8759] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 672.519805][ T8759] EXT4-fs (loop1): Remounting filesystem read-only [ 672.526886][ T8759] EXT4-fs (loop1): 1 truncate cleaned up [ 672.532653][ T8759] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 675.061378][ T8787] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 676.088315][ T8790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 676.106996][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.858'. [ 676.932868][ T8797] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 677.955310][ T8820] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 682.298125][ T8855] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 685.565953][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.572322][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.628966][ T8894] netlink: 76 bytes leftover after parsing attributes in process `syz.5.881'. [ 686.644575][ T8894] loop5: detected capacity change from 0 to 512 [ 686.697231][ T8894] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 686.770092][ T8905] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 686.829449][ T8894] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 686.869814][ T8894] EXT4-fs (loop5): Remounting filesystem read-only [ 686.877140][ T8894] EXT4-fs (loop5): 1 truncate cleaned up [ 686.882880][ T8894] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 689.141257][ T8928] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 691.716516][ T8957] netlink: 76 bytes leftover after parsing attributes in process `syz.7.893'. [ 691.731542][ T8957] loop7: detected capacity change from 0 to 512 [ 692.536693][ T8957] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 692.579585][ T8957] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 692.595127][ T8957] EXT4-fs (loop7): Remounting filesystem read-only [ 692.603266][ T8957] EXT4-fs (loop7): 1 truncate cleaned up [ 692.608990][ T8957] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 692.794552][ T8977] loop0: detected capacity change from 0 to 512 [ 692.904584][ T8977] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 694.072215][ T8977] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 694.765428][ T8977] EXT4-fs (loop0): Remounting filesystem read-only [ 694.777007][ T8977] EXT4-fs (loop0): 1 truncate cleaned up [ 694.851971][ T8977] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 699.810536][ T9040] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 704.074587][ T9096] netlink: 76 bytes leftover after parsing attributes in process `syz.1.919'. [ 704.090281][ T9096] loop1: detected capacity change from 0 to 512 [ 704.126355][ T9096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 705.527214][ T9096] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 705.543292][ T9096] EXT4-fs (loop1): Remounting filesystem read-only [ 705.550419][ T9096] EXT4-fs (loop1): 1 truncate cleaned up [ 705.556193][ T9096] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 718.079546][ T9228] netlink: 76 bytes leftover after parsing attributes in process `syz.7.944'. [ 718.095496][ T9228] loop7: detected capacity change from 0 to 512 [ 718.146406][ T9228] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 718.356857][ T9228] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 718.599659][ T9228] EXT4-fs (loop7): Remounting filesystem read-only [ 718.610135][ T9228] EXT4-fs (loop7): 1 truncate cleaned up [ 718.616185][ T9228] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 725.624188][ T9305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.966'. [ 725.656720][ T9305] loop0: detected capacity change from 0 to 512 [ 725.928154][ T9305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 726.138611][ T9305] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 726.155533][ T9305] EXT4-fs (loop0): Remounting filesystem read-only [ 726.176495][ T9305] EXT4-fs (loop0): 1 truncate cleaned up [ 726.182256][ T9305] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 730.697867][ T9356] netlink: 76 bytes leftover after parsing attributes in process `syz.1.976'. [ 730.712421][ T9356] loop1: detected capacity change from 0 to 512 [ 731.325746][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.8.983'. [ 731.360846][ T9368] loop8: detected capacity change from 0 to 512 [ 731.826140][ T9368] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 732.008753][ T9368] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 732.199085][ T9377] netlink: 76 bytes leftover after parsing attributes in process `syz.7.984'. [ 732.468530][ T9377] loop7: detected capacity change from 0 to 512 [ 732.521833][ T9368] EXT4-fs (loop8): Remounting filesystem read-only [ 732.533845][ T9368] EXT4-fs (loop8): 1 truncate cleaned up [ 732.539662][ T9368] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 733.019489][ T9387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.986'. [ 733.052324][ T9387] loop0: detected capacity change from 0 to 512 [ 733.675647][ T9377] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 733.709045][ T9387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 733.712534][ T9377] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 733.742990][ T9377] EXT4-fs (loop7): Remounting filesystem read-only [ 733.752125][ T9377] EXT4-fs (loop7): 1 truncate cleaned up [ 733.757793][ T9377] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 733.817567][ T9387] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 733.833103][ T9387] EXT4-fs (loop0): Remounting filesystem read-only [ 733.840077][ T9387] EXT4-fs (loop0): 1 truncate cleaned up [ 733.845816][ T9387] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 735.273672][ T9413] netlink: 76 bytes leftover after parsing attributes in process `syz.8.993'. [ 736.887997][ T9424] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 738.217840][ T9446] netlink: 76 bytes leftover after parsing attributes in process `syz.0.992'. [ 738.230387][ T9446] loop0: detected capacity change from 0 to 512 [ 738.591733][ T9446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 738.918074][ T9446] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 739.013057][ T9446] EXT4-fs (loop0): Remounting filesystem read-only [ 739.022108][ T9446] EXT4-fs (loop0): 1 truncate cleaned up [ 739.027779][ T9446] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 739.940432][ T9461] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 740.230397][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 740.826991][ T9476] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1006'. [ 740.859920][ T9476] loop5: detected capacity change from 0 to 512 [ 741.784850][ T9476] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 741.846032][ T9476] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 741.861817][ T9476] EXT4-fs (loop5): Remounting filesystem read-only [ 741.869727][ T9476] EXT4-fs (loop5): 1 truncate cleaned up [ 741.875838][ T9476] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 747.523942][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.537912][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.018487][ T9578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 752.337210][ T9604] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1035'. [ 754.746932][ T9625] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1040'. [ 754.777352][ T9625] loop5: detected capacity change from 0 to 512 [ 755.347657][ T9625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 755.446461][ T9625] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 755.464636][ T9625] EXT4-fs (loop5): Remounting filesystem read-only [ 755.474488][ T9625] EXT4-fs (loop5): 1 truncate cleaned up [ 755.480343][ T9625] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 755.914080][ T9647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1046'. [ 755.962263][ T9647] loop0: detected capacity change from 0 to 512 [ 755.973184][ T9640] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1044'. [ 756.585924][ T9647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 756.641847][ T9647] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 756.661050][ T9647] EXT4-fs (loop0): Remounting filesystem read-only [ 756.668481][ T9647] EXT4-fs (loop0): 1 truncate cleaned up [ 756.674236][ T9647] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 757.002821][ T9663] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1049'. [ 757.036022][ T9663] loop7: detected capacity change from 0 to 512 [ 757.575545][ T9663] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 757.635694][ T9663] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 757.839609][ T9663] EXT4-fs (loop7): Remounting filesystem read-only [ 757.846708][ T9663] EXT4-fs (loop7): 1 truncate cleaned up [ 757.852524][ T9663] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 757.929278][ T9673] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1050'. [ 757.962779][ T9673] loop0: detected capacity change from 0 to 512 [ 758.387131][ T9673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 758.424395][ T9673] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 758.439183][ T9673] EXT4-fs (loop0): Remounting filesystem read-only [ 758.446505][ T9673] EXT4-fs (loop0): 1 truncate cleaned up [ 758.452357][ T9673] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 758.860721][ T9688] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 759.035337][ T9692] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1053'. [ 759.067848][ T9692] loop7: detected capacity change from 0 to 512 [ 759.087363][ T9692] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 759.156538][ T9692] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 759.174387][ T9692] EXT4-fs (loop7): Remounting filesystem read-only [ 759.183627][ T9692] EXT4-fs (loop7): 1 truncate cleaned up [ 759.189548][ T9692] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 760.315543][ T9691] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1055'. [ 760.333714][ T9691] loop0: detected capacity change from 0 to 512 [ 760.421868][ T9691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 760.444039][ T9691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 760.458919][ T9691] EXT4-fs (loop0): Remounting filesystem read-only [ 760.465900][ T9691] EXT4-fs (loop0): 1 truncate cleaned up [ 760.472040][ T9691] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 760.772562][ T9708] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1059'. [ 765.189757][ T9763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1071'. [ 769.292846][ T9811] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1083'. [ 769.459002][ T9827] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1085'. [ 769.473800][ T9827] loop0: detected capacity change from 0 to 512 [ 769.552833][ T9827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 769.683985][ T9827] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 770.550276][ T9827] EXT4-fs (loop0): Remounting filesystem read-only [ 770.565346][ T9827] EXT4-fs (loop0): 1 truncate cleaned up [ 770.571159][ T9827] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 772.808968][ T9864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1091'. [ 773.091048][ T9864] loop1: detected capacity change from 0 to 512 [ 773.419208][ T9864] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 773.624410][ T9864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 773.641349][ T9864] EXT4-fs (loop1): Remounting filesystem read-only [ 773.648742][ T9864] EXT4-fs (loop1): 1 truncate cleaned up [ 773.654458][ T9864] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 774.067206][ T9881] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1093'. [ 774.099990][ T9881] loop7: detected capacity change from 0 to 512 [ 774.234425][ T9881] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 774.316461][ T9881] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 774.336410][ T9881] EXT4-fs (loop7): Remounting filesystem read-only [ 774.349674][ T9881] EXT4-fs (loop7): 1 truncate cleaned up [ 774.355751][ T9881] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 775.286211][ T9883] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1096'. [ 780.350743][ T9950] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1109'. [ 785.228757][T10004] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1122'. [ 790.895485][T10063] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1135'. [ 790.909354][T10063] loop8: detected capacity change from 0 to 512 [ 790.982696][T10063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 791.298333][T10063] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 791.329053][T10063] EXT4-fs (loop8): Remounting filesystem read-only [ 791.336086][T10063] EXT4-fs (loop8): 1 truncate cleaned up [ 791.342062][T10063] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 802.554921][T10195] device syzkaller0 entered promiscuous mode [ 802.817822][T10202] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1168'. [ 802.850992][T10202] loop5: detected capacity change from 0 to 512 [ 803.013461][T10202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 803.238159][T10202] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 803.257185][T10202] EXT4-fs (loop5): Remounting filesystem read-only [ 803.266314][T10202] EXT4-fs (loop5): 1 truncate cleaned up [ 803.272077][T10202] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 803.684035][T10208] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1169'. [ 804.968526][T10226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1172'. [ 805.000862][T10226] loop1: detected capacity change from 0 to 512 [ 805.580284][T10226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 805.748887][T10226] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 805.764382][T10226] EXT4-fs (loop1): Remounting filesystem read-only [ 805.771227][T10226] EXT4-fs (loop1): 1 truncate cleaned up [ 805.776929][T10226] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 808.454839][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.464686][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.420194][T10275] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1182'. [ 810.455311][T10275] loop5: detected capacity change from 0 to 512 [ 810.789173][T10275] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 811.074806][T10275] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 811.097137][T10275] EXT4-fs (loop5): Remounting filesystem read-only [ 811.111428][T10275] EXT4-fs (loop5): 1 truncate cleaned up [ 811.117309][T10275] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 812.475902][T10301] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 813.877896][T10313] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1191'. [ 813.892360][T10313] loop7: detected capacity change from 0 to 512 [ 813.950273][T10313] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 813.975345][T10313] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 813.995074][T10313] EXT4-fs (loop7): Remounting filesystem read-only [ 814.003726][T10313] EXT4-fs (loop7): 1 truncate cleaned up [ 814.009392][T10313] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 814.619096][T10328] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1194'. [ 814.633436][T10328] loop0: detected capacity change from 0 to 512 [ 814.677466][T10328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 814.723611][T10328] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 814.738632][T10328] EXT4-fs (loop0): Remounting filesystem read-only [ 814.745631][T10328] EXT4-fs (loop0): 1 truncate cleaned up [ 814.751293][T10328] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 818.760170][T10397] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 819.851324][T10405] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 821.870578][T10416] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 827.459204][T10499] loop1: detected capacity change from 0 to 512 [ 828.017129][T10499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 828.179053][T10496] loop7: detected capacity change from 0 to 512 [ 828.198634][T10499] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 828.216138][T10499] EXT4-fs (loop1): Remounting filesystem read-only [ 828.223102][T10499] EXT4-fs (loop1): 1 truncate cleaned up [ 828.228735][T10499] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 828.454831][T10496] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 828.509007][T10496] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 828.528589][T10496] EXT4-fs (loop7): Remounting filesystem read-only [ 828.536212][T10496] EXT4-fs (loop7): 1 truncate cleaned up [ 828.542129][T10496] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 830.035011][T10548] loop5: detected capacity change from 0 to 512 [ 830.129685][T10548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 830.181040][T10548] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 830.201929][T10548] EXT4-fs (loop5): Remounting filesystem read-only [ 830.209021][T10548] EXT4-fs (loop5): 1 truncate cleaned up [ 830.214958][T10548] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 832.181587][T10584] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1244'. [ 832.474494][T10584] loop7: detected capacity change from 0 to 512 [ 832.560619][T10584] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 832.695715][T10584] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 832.715368][T10584] EXT4-fs (loop7): Remounting filesystem read-only [ 832.725003][T10584] EXT4-fs (loop7): 1 truncate cleaned up [ 832.730805][T10584] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 835.356570][T10616] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1249'. [ 835.392498][T10616] loop1: detected capacity change from 0 to 512 [ 835.731030][T10616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 835.809694][T10616] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 835.830429][T10616] EXT4-fs (loop1): Remounting filesystem read-only [ 835.837559][T10616] EXT4-fs (loop1): 1 truncate cleaned up [ 835.843432][T10616] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 838.135274][T10655] loop5: detected capacity change from 0 to 512 [ 838.323228][T10657] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1257'. [ 838.354684][T10657] loop8: detected capacity change from 0 to 512 [ 838.744738][T10655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 838.813421][T10657] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 838.922781][T10657] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 838.940182][T10657] EXT4-fs (loop8): Remounting filesystem read-only [ 838.949598][T10657] EXT4-fs (loop8): 1 truncate cleaned up [ 838.955661][T10657] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 838.985440][T10655] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 839.000765][T10655] EXT4-fs (loop5): Remounting filesystem read-only [ 839.007897][T10655] EXT4-fs (loop5): 1 truncate cleaned up [ 839.013654][T10655] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 845.627792][T10728] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1272'. [ 845.642392][T10728] loop5: detected capacity change from 0 to 512 [ 845.823011][T10728] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 845.892579][T10728] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 845.918659][T10728] EXT4-fs (loop5): Remounting filesystem read-only [ 845.926656][T10728] EXT4-fs (loop5): 1 truncate cleaned up [ 845.932438][T10728] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 849.138325][T10755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 850.983911][T10781] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 857.325565][T10831] loop5: detected capacity change from 0 to 2048 [ 857.335411][T10831] ======================================================= [ 857.335411][T10831] WARNING: The mand mount option has been deprecated and [ 857.335411][T10831] and is ignored by this kernel. Remove the mand [ 857.335411][T10831] option from the mount to silence this warning. [ 857.335411][T10831] ======================================================= [ 857.426894][T10831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 857.627539][ T25] audit: type=1800 audit(1784226394.955:2): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1294" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 858.208890][T10837] loop0: detected capacity change from 0 to 2048 [ 858.662767][T10837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 858.783308][T10843] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 860.492914][T10869] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 862.685473][T10891] loop0: detected capacity change from 0 to 2048 [ 863.137083][T10891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.499413][T10902] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1311'. [ 869.884800][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.891129][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.414784][T10948] loop5: detected capacity change from 0 to 2048 [ 870.525410][T10948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.619280][ T25] audit: type=1800 audit(1784226407.915:3): pid=10948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1322" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 873.922750][T10990] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 878.843780][T11039] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 878.861939][T11039] overlayfs: failed to resolve './bus': -2 [ 880.955932][T11059] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1344'. [ 880.969684][T11059] loop8: detected capacity change from 0 to 512 [ 881.074260][T11059] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 881.117581][T11059] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 881.132779][T11059] EXT4-fs (loop8): Remounting filesystem read-only [ 881.139750][T11059] EXT4-fs (loop8): 1 truncate cleaned up [ 881.145744][T11059] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 882.454109][T11078] loop5: detected capacity change from 0 to 2048 [ 882.472926][T11080] loop8: detected capacity change from 0 to 4096 [ 882.601341][T11078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 882.706009][ T25] audit: type=1800 audit(1784226420.035:4): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1347" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 883.858634][T11089] loop0: detected capacity change from 0 to 2048 [ 883.893913][T11091] loop5: detected capacity change from 0 to 4096 [ 884.606699][T11089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.761051][ T25] audit: type=1800 audit(1784226422.085:5): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1350" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 885.751504][T11107] loop8: detected capacity change from 0 to 2048 [ 886.799330][T11109] loop0: detected capacity change from 0 to 4096 [ 887.015421][T11125] loop1: detected capacity change from 0 to 2048 [ 887.159229][T11125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.520206][ T25] audit: type=1800 audit(1784226424.845:6): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1357" name="bus" dev="loop1" ino=1319 res=0 errno=0 [ 887.549482][T11121] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1356'. [ 887.559323][T11107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.563511][T11121] loop7: detected capacity change from 0 to 512 [ 887.631181][ T25] audit: type=1800 audit(1784226424.955:7): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1353" name="bus" dev="loop8" ino=1319 res=0 errno=0 [ 887.663680][T11121] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 887.719959][T11121] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 887.738884][T11121] EXT4-fs (loop7): Remounting filesystem read-only [ 887.750042][T11121] EXT4-fs (loop7): 1 truncate cleaned up [ 887.755913][T11121] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 888.659271][T11136] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 890.972536][T11179] loop0: detected capacity change from 0 to 4096 [ 892.074965][T11191] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1370'. [ 892.285287][T11191] loop0: detected capacity change from 0 to 512 [ 892.353731][T11191] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 892.456031][T11191] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 892.474665][T11191] EXT4-fs (loop0): Remounting filesystem read-only [ 892.485392][T11191] EXT4-fs (loop0): 1 truncate cleaned up [ 892.491287][T11191] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 894.539640][T11219] loop5: detected capacity change from 0 to 2048 [ 894.785792][T11219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.884789][ T25] audit: type=1800 audit(1784226432.205:8): pid=11218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1373" name="bus" dev="loop5" ino=1319 res=0 errno=0 [ 895.209837][T11226] loop0: detected capacity change from 0 to 2048 [ 895.266213][T11226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.536561][ T25] audit: type=1800 audit(1784226432.825:9): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1376" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 897.213473][T11242] loop0: detected capacity change from 0 to 4096 [ 897.933396][T11228] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1377'. [ 898.775392][T11262] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1382'. [ 898.847085][T11262] loop7: detected capacity change from 0 to 512 [ 899.194579][T11266] loop8: detected capacity change from 0 to 4096 [ 899.352769][T11262] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 899.459692][T11262] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 899.476975][T11262] EXT4-fs (loop7): Remounting filesystem read-only [ 899.486216][T11262] EXT4-fs (loop7): 1 truncate cleaned up [ 899.491968][T11262] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 902.631093][T11326] loop1: detected capacity change from 0 to 2048 [ 902.928039][T11326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.129119][ T25] audit: type=1800 audit(1784226440.455:10): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1391" name="bus" dev="loop1" ino=1319 res=0 errno=0 [ 904.434924][T11337] loop1: detected capacity change from 0 to 2048 [ 904.515006][T11337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.615375][ T25] audit: type=1800 audit(1784226441.935:11): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1395" name="bus" dev="loop1" ino=1321 res=0 errno=0 [ 906.138613][T11354] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1393'. [ 909.199491][T11403] loop5: detected capacity change from 0 to 4096 [ 910.248148][T11417] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1411'. [ 910.263006][T11417] loop7: detected capacity change from 0 to 512 [ 910.273244][T11417] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 910.880838][T11424] loop0: detected capacity change from 0 to 2048 [ 910.993015][T11424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.100359][ T25] audit: type=1800 audit(1784226448.405:12): pid=11421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1414" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 911.141124][T11417] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 911.157657][T11417] EXT4-fs (loop7): Remounting filesystem read-only [ 911.167975][T11417] EXT4-fs (loop7): 1 truncate cleaned up [ 911.173805][T11417] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 911.828534][T11431] loop8: detected capacity change from 0 to 2048 [ 911.993263][T11431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.069343][ T25] audit: type=1800 audit(1784226449.395:13): pid=11431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1416" name="bus" dev="loop8" ino=1369 res=0 errno=0 [ 914.015537][T11460] loop1: detected capacity change from 0 to 2048 [ 914.190292][T11460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 915.199055][T11467] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1420'. [ 917.368383][T11499] loop0: detected capacity change from 0 to 4096 [ 917.832319][T11505] loop1: detected capacity change from 0 to 2048 [ 918.810057][T11505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 919.031795][ T25] audit: type=1800 audit(1784226456.345:14): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1429" name="bus" dev="loop1" ino=1321 res=0 errno=0 [ 920.760238][T11527] loop5: detected capacity change from 0 to 2048 [ 920.837888][T11527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 920.963623][ T25] audit: type=1800 audit(1784226458.295:15): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1436" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 921.460331][T11531] loop0: detected capacity change from 0 to 4096 [ 921.786126][T11538] loop7: detected capacity change from 0 to 2048 [ 921.949973][T11538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.397079][ T25] audit: type=1800 audit(1784226459.365:16): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1437" name="bus" dev="loop7" ino=1321 res=0 errno=0 [ 923.028716][T11558] loop7: detected capacity change from 0 to 2048 [ 923.402222][T11562] loop5: detected capacity change from 0 to 4096 [ 923.410807][T11558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.493265][ T25] audit: type=1800 audit(1784226460.825:17): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1440" name="bus" dev="loop7" ino=1321 res=0 errno=0 [ 924.452812][T11581] loop0: detected capacity change from 0 to 2048 [ 924.728134][T11581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 924.812758][ T25] audit: type=1800 audit(1784226462.145:18): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1445" name="bus" dev="loop0" ino=1320 res=0 errno=0 [ 925.404765][T11595] loop1: detected capacity change from 0 to 4096 [ 926.288113][T11604] loop0: detected capacity change from 0 to 2048 [ 926.414827][T11604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 926.484930][ T25] audit: type=1800 audit(1784226463.805:19): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1448" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 927.729055][T11620] loop8: detected capacity change from 0 to 2048 [ 928.064679][T11620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.326846][ T25] audit: type=1800 audit(1784226465.655:20): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1454" name="bus" dev="loop8" ino=1320 res=0 errno=0 [ 931.318876][T11653] loop7: detected capacity change from 0 to 2048 [ 931.335066][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.341495][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.371900][T11653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 931.422369][ T25] audit: type=1800 audit(1784226468.755:21): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1460" name="bus" dev="loop7" ino=1321 res=0 errno=0 [ 933.538003][T11686] loop0: detected capacity change from 0 to 2048 [ 934.028268][T11693] loop8: detected capacity change from 0 to 2048 [ 934.161565][T11686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.172385][T11693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.237224][ T25] audit: type=1800 audit(1784226471.565:22): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1466" name="bus" dev="loop0" ino=1320 res=0 errno=0 [ 934.468615][ T25] audit: type=1800 audit(1784226471.745:23): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1467" name="bus" dev="loop8" ino=1320 res=0 errno=0 [ 935.735660][T11722] loop0: detected capacity change from 0 to 2048 [ 936.293041][T11722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.385000][ T25] audit: type=1800 audit(1784226473.715:24): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1470" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 936.967689][T11736] loop1: detected capacity change from 0 to 4096 [ 938.989644][T11763] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 939.749621][T11775] loop1: detected capacity change from 0 to 2048 [ 939.849868][T11778] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 939.916163][T11775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.977238][ T25] audit: type=1800 audit(1784226477.305:25): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1482" name="bus" dev="loop1" ino=1321 res=0 errno=0 [ 940.800515][T11794] loop0: detected capacity change from 0 to 4096 [ 943.614354][T11809] loop0: detected capacity change from 0 to 4096 [ 944.080506][T11819] loop1: detected capacity change from 0 to 4096 [ 944.262828][T11821] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 945.301367][T11849] loop1: detected capacity change from 0 to 4096 [ 945.597303][T11826] loop0: detected capacity change from 0 to 2048 [ 945.703661][T11826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 946.951224][ T25] audit: type=1800 audit(1784226484.275:26): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1491" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 947.446310][T11873] loop5: detected capacity change from 0 to 4096 [ 948.998987][T11887] loop5: detected capacity change from 0 to 2048 [ 949.157681][T11887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 949.260860][ T25] audit: type=1800 audit(1784226486.585:27): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1499" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 949.773328][T11901] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 951.702476][T11929] loop1: detected capacity change from 0 to 4096 [ 952.360206][T11931] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 953.132823][T11955] loop1: detected capacity change from 0 to 2048 [ 953.249339][T11955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 953.442212][ T25] audit: type=1800 audit(1784226490.705:28): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1513" name="bus" dev="loop1" ino=1321 res=0 errno=0 [ 953.996278][T11966] loop0: detected capacity change from 0 to 2048 [ 954.070995][T11966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 954.128326][ T25] audit: type=1800 audit(1784226491.455:29): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1512" name="bus" dev="loop0" ino=1321 res=0 errno=0 [ 955.336511][T11982] loop5: detected capacity change from 0 to 2048 [ 955.399329][T11982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 955.490659][ T25] audit: type=1800 audit(1784226492.805:30): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1518" name="bus" dev="loop5" ino=1321 res=0 errno=0 [ 956.640095][T12002] loop0: detected capacity change from 0 to 4096 [ 957.413893][T12011] loop8: detected capacity change from 0 to 2048 [ 957.976436][T12011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 958.178095][ T25] audit: type=1800 audit(1784226495.505:31): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1519" name="bus" dev="loop8" ino=1321 res=0 errno=0 [ 958.666463][T12021] loop5: detected capacity change from 0 to 4096 [ 959.442161][T12030] loop0: detected capacity change from 0 to 4096 [ 960.201859][T12035] loop8: detected capacity change from 0 to 4096 [ 965.000836][T12081] loop7: detected capacity change from 0 to 4096 [ 965.298239][T12086] loop0: detected capacity change from 0 to 4096 [ 966.159233][T12100] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 970.303670][T12135] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 970.320054][T12135] overlayfs: failed to resolve './bus': -2 [ 972.863613][T12166] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 974.254451][T12178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 977.731463][T12221] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 978.423978][T12235] loop0: detected capacity change from 0 to 4096 [ 982.635270][T12295] loop8: detected capacity change from 0 to 2048 [ 982.805843][T12295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.109853][T12320] overlayfs: failed to resolve './file0': -2 [ 984.284325][T12319] loop8: detected capacity change from 0 to 2048 [ 984.328711][T12319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.396217][ T25] audit: type=1800 audit(1784226521.715:32): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1589" name="bus" dev="loop8" ino=1369 res=0 errno=0 [ 987.815252][T12369] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 987.831541][T12369] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 987.955704][T12369] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 987.983827][T12371] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 990.504353][T12393] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 992.764657][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.770190][T12445] device syzkaller0 entered promiscuous mode [ 992.771002][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.297548][T12481] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1613'. [ 995.497417][T12482] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 996.421426][T12486] loop5: detected capacity change from 0 to 4096 [ 998.923869][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 999.257974][T12540] sg_write: data in/out 10058/128 bytes for SCSI command 0x0-- guessing data in; [ 999.257974][T12540] program syz.7.1638 not setting count and/or reply_len properly [ 999.521910][T12546] sctp: failed to load transform for md5: -2 [ 1000.157970][T12572] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1646'. [ 1000.233187][T12572] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1646'. [ 1001.826010][ T9665] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1002.045971][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1002.072369][T12628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.932243][ T4294] usb 6-1: Using ep0 maxpacket: 8 [ 1003.011818][ T5060] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1003.096774][ T4294] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1003.107057][ T4294] usb 6-1: config 0 has no interface number 0 [ 1003.251818][ T5060] usb 1-1: Using ep0 maxpacket: 32 [ 1003.296881][ T4294] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1003.311215][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.337528][ T4294] usb 6-1: Product: syz [ 1003.341966][ T9665] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1003.353816][ T4294] usb 6-1: Manufacturer: syz [ 1003.358442][ T4294] usb 6-1: SerialNumber: syz [ 1003.365005][ T9665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.374856][ T4294] usb 6-1: config 0 descriptor?? [ 1003.376658][ T5060] usb 1-1: config 100 has an invalid interface number: 254 but max is 0 [ 1003.393852][ T5060] usb 1-1: config 100 has no interface number 0 [ 1003.400347][ T9665] usb 2-1: Product: syz [ 1003.410519][ T9665] usb 2-1: Manufacturer: syz [ 1003.420691][ T9665] usb 2-1: SerialNumber: syz [ 1003.515039][T12660] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1670'. [ 1003.571947][ T5060] usb 1-1: New USB device found, idVendor=045e, idProduct=0403, bcdDevice=87.3a [ 1003.593340][ T5060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.631869][ T5060] usb 1-1: Product: syz [ 1003.636270][ T5060] usb 1-1: Manufacturer: syz [ 1003.640880][ T5060] usb 1-1: SerialNumber: syz [ 1003.682079][ T4294] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1003.699516][ T4294] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 1003.783630][ T4294] usb 6-1: USB disconnect, device number 2 [ 1003.931906][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1004.004074][ T5060] usb 1-1: USB disconnect, device number 2 [ 1004.066924][ T4233] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1005.051651][ T4233] usb 9-1: Using ep0 maxpacket: 8 [ 1005.451790][ T4294] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1005.742307][ T4294] usb 6-1: Using ep0 maxpacket: 16 [ 1005.864949][ T4294] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1005.934238][ T4294] usb 6-1: config 1 has no interface number 0 [ 1005.978757][ T4294] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1006.025193][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1006.051737][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1006.060301][ T4294] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1006.063756][ T4233] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1006.099188][ T4233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.107515][ T4233] usb 9-1: Product: syz [ 1006.112001][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1006.125653][ T4233] usb 9-1: Manufacturer: syz [ 1006.127846][ T4294] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1006.138799][ T4233] usb 9-1: SerialNumber: syz [ 1006.158498][ T4233] usb 9-1: config 0 descriptor?? [ 1006.163661][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1006.211834][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1006.226250][T12718] tipc: Failed to remove unknown binding: 66,0,0/0:3734295119/3734295121 [ 1006.233738][ T4233] gspca_main: se401-2.14.0 probing 047d:5003 [ 1006.265279][T12718] tipc: Failed to remove unknown binding: 66,0,0/0:3734295119/3734295120 [ 1006.276705][T12729] tipc: Failed to remove unknown binding: 66,0,0/0:3734295119/3734295121 [ 1006.285834][T12729] tipc: Failed to remove unknown binding: 66,0,0/0:3734295119/3734295120 [ 1006.297661][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1006.347779][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1006.411800][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1006.471873][ T4294] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1006.492071][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1006.504299][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1006.504311][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1006.508064][ T9665] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1006.533341][ T9665] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1006.561165][ T9665] usb 2-1: USB disconnect, device number 2 [ 1006.948121][ T4233] gspca_se401: ExtraFeatures: 255 [ 1006.958800][ T4233] gspca_se401: Too many frame sizes [ 1006.993593][ T4294] usb 6-1: Product: syz [ 1007.016560][ T4294] usb 6-1: Manufacturer: syz [ 1007.021200][ T4294] usb 6-1: SerialNumber: syz [ 1007.082078][T12703] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1007.104486][T12703] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1007.171493][ T4231] usb 9-1: USB disconnect, device number 2 [ 1007.364027][T12756] block device autoloading is deprecated and will be removed. [ 1007.412688][ T9665] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1007.633993][T12703] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1007.637433][T12759] dlm: dev_write: no op 0 0 [ 1007.731995][T12703] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1008.211872][ T4304] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1008.727586][ T4294] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1008.819359][ T9665] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1008.831845][ T4304] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1008.846063][ T9665] usb 2-1: config 1 has no interface number 0 [ 1008.861866][ T9665] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1008.872734][ T9665] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.896632][ T4294] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1008.922029][ T4304] usb 8-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.943489][ T4304] usb 8-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1009.018315][ T4294] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:95:02:59:ea:f5 [ 1009.033922][ T25] audit: type=1326 audit(1784226546.365:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1009.063079][ T9665] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1009.161214][ T25] audit: type=1326 audit(1784226546.365:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1009.219562][ T9665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.227882][ T9665] usb 2-1: Product: syz [ 1009.232472][ T9665] usb 2-1: Manufacturer: syz [ 1009.237668][ T9665] usb 2-1: SerialNumber: syz [ 1009.238756][ T4294] usb 6-1: USB disconnect, device number 3 [ 1009.251772][ T4304] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1009.260934][ T4304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.269374][T12742] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1009.282293][ T4304] usb 8-1: Product: syz [ 1009.286569][ T4304] usb 8-1: Manufacturer: syz [ 1009.288083][ T4294] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1009.291265][ T25] audit: type=1326 audit(1784226546.405:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1009.931200][ T4304] usb 8-1: SerialNumber: syz [ 1009.942578][ T25] audit: type=1326 audit(1784226546.405:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1009.967884][ T9665] usb 2-1: Expected 3 endpoints, found: 2 [ 1010.027221][ T9665] usb 2-1: USB disconnect, device number 3 [ 1010.117027][ T25] audit: type=1326 audit(1784226546.405:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1010.157179][ T25] audit: type=1326 audit(1784226546.415:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1010.206338][ T4294] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1010.231711][ T4294] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1010.241233][ T4294] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1010.310372][ T4304] ati_remote2 8-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1010.429101][ T4304] usb 8-1: USB disconnect, device number 2 [ 1010.443698][ T25] audit: type=1326 audit(1784226546.415:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1010.833039][ T25] audit: type=1326 audit(1784226546.415:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1010.857152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.914102][ T25] audit: type=1326 audit(1784226546.415:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1010.947014][ T25] audit: type=1326 audit(1784226546.415:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1701" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d2c5e59 code=0x7ffc0000 [ 1011.061800][ T4399] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1011.193471][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1712'. [ 1011.324758][T12850] Trying to write to read-only block-device nullb0 [ 1011.342381][ T4399] usb 1-1: Using ep0 maxpacket: 8 [ 1011.472892][ T4399] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 1011.477869][T12864] device ip6erspan0 entered promiscuous mode [ 1011.498756][T12863] capability: warning: `syz.7.1724' uses deprecated v2 capabilities in a way that may be insecure [ 1011.508008][ T4399] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.565054][ T4399] usb 1-1: config 255 has no interface number 0 [ 1011.571359][ T4399] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1011.609666][T12871] afs: Unknown parameter 'obj_type' [ 1011.625290][ T4399] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1011.661242][ T4399] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 183, setting to 64 [ 1011.674866][ T4399] usb 1-1: config 255 interface 106 altsetting 15 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1011.702415][ T4399] usb 1-1: config 255 interface 106 has no altsetting 0 [ 1012.839527][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1013.949354][ T4294] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1014.031896][ T4399] usb 1-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=9a.00 [ 1014.044787][ T4399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.072729][ T4399] usb 1-1: Product: syz [ 1014.076960][ T4399] usb 1-1: Manufacturer: syz [ 1014.181866][ T4399] usb 1-1: can't set config #255, error -71 [ 1014.207099][ T4399] usb 1-1: USB disconnect, device number 3 [ 1014.232290][ T4294] usb 2-1: Using ep0 maxpacket: 16 [ 1014.371953][ T4294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.404197][ T4294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.512502][ T4294] usb 2-1: string descriptor 0 read error: -71 [ 1014.549266][ T4294] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.636793][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.705283][T12904] process 'syz.8.1732' launched '/dev/fd/4' with NULL argv: empty string added [ 1014.722002][ T4294] usb 2-1: can't set config #1, error -71 [ 1014.743135][ T4294] usb 2-1: USB disconnect, device number 4 [ 1015.311988][ T9665] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1015.386198][T12936] tipc: Failed to remove unknown binding: 66,0,0/0:1490604439/1490604441 [ 1015.401977][T12936] tipc: Failed to remove unknown binding: 66,0,0/0:1490604439/1490604440 [ 1015.482653][ T4190] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1015.561659][ T9665] usb 2-1: Using ep0 maxpacket: 16 [ 1015.681899][ T9665] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1015.696858][ T9665] usb 2-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 1015.721866][ T9665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.744007][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 1015.745166][ T9665] usb 2-1: config 0 descriptor?? [ 1015.792242][T12964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1755'. [ 1015.892021][ T4190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1015.952980][ T4190] usb 1-1: not running at top speed; connect to a high speed hub [ 1016.023175][T12983] tipc: Failed to remove unknown binding: 66,0,0/0:1963356944/1963356946 [ 1016.031655][T12983] tipc: Failed to remove unknown binding: 66,0,0/0:1963356944/1963356945 [ 1016.051980][ T4190] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1016.242535][ T4190] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1016.256062][ T9665] ntrig 0003:1B96:0013.0001: unknown global tag 0xc [ 1016.271223][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.285643][ T9665] ntrig 0003:1B96:0013.0001: item 0 1 1 12 parsing failed [ 1016.301118][ T4190] usb 1-1: Product: syz [ 1016.310104][ T9665] ntrig 0003:1B96:0013.0001: parse failed [ 1016.336457][ T4190] usb 1-1: Manufacturer: syz [ 1016.398487][ T9665] ntrig: probe of 0003:1B96:0013.0001 failed with error -22 [ 1016.411900][ T4190] usb 1-1: SerialNumber: syz [ 1016.668851][ T9665] usb 2-1: USB disconnect, device number 5 [ 1017.605461][ T4190] usb 1-1: unit 4 not found! [ 1017.610472][ T4190] usb 1-1: unit 127 not found! [ 1017.616567][ T4190] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8213 device_setup=1 to enable and report any issues to g@b4.vu [ 1017.777656][T13030] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1017.777656][T13030] program syz.8.1777 not setting count and/or reply_len properly [ 1017.806767][ T4190] usb 1-1: USB disconnect, device number 4 [ 1017.893453][T13042] netlink: 'syz.0.1779': attribute type 5 has an invalid length. [ 1018.093808][ T9830] udevd[9830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.308930][T13074] device ip6tnl1 entered promiscuous mode [ 1018.466766][T13089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1790'. [ 1018.941678][ T4190] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1019.206619][ T4190] usb 2-1: Using ep0 maxpacket: 8 [ 1019.355794][ T4190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1019.385910][ T4190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1020.772654][ T4190] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1020.811689][ T4190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.822140][ T4190] usb 2-1: Product: syz [ 1020.826321][ T4190] usb 2-1: Manufacturer: syz [ 1020.851083][ T4190] usb 2-1: SerialNumber: syz [ 1020.866533][ T4190] usb 2-1: config 0 descriptor?? [ 1021.020523][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 1021.133041][ T9665] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1021.345064][ T4190] usb 2-1: USB disconnect, device number 6 [ 1021.352866][ T4294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1021.373163][ T9665] usb 8-1: Using ep0 maxpacket: 32 [ 1021.491885][ T9665] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1021.661875][ T9665] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1021.681176][ T9665] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.701430][ T9665] usb 8-1: Product: syz [ 1021.711640][ T9665] usb 8-1: Manufacturer: syz [ 1021.716272][ T9665] usb 8-1: SerialNumber: syz [ 1021.752044][ T4294] usb 1-1: config 192 has an invalid interface number: 238 but max is 0 [ 1021.760453][ T4294] usb 1-1: config 192 has no interface number 0 [ 1021.796407][ T9665] snd-ua101 8-1:1.1: sample format descriptor not found [ 1021.816145][ T9665] snd-ua101 8-1:1.0: invalid num_altsetting [ 1021.931888][ T4294] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=75.48 [ 1021.949196][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.986831][ T4294] usb 1-1: Product: syz [ 1021.999335][ T4294] usb 1-1: Manufacturer: syz [ 1022.011663][ T4294] usb 1-1: SerialNumber: syz [ 1022.054352][ T4744] usb 8-1: USB disconnect, device number 3 [ 1022.080932][T13230] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 1022.218955][T13235] bond1: (slave veth0_to_bond): making interface the new active one [ 1022.239354][T13235] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1022.254685][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 1022.288097][T13238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1022.319492][T13235] syz.5.1827 (13235) used greatest stack depth: 19984 bytes left [ 1022.389986][ T4294] usb 1-1: USB disconnect, device number 5 [ 1022.406556][ T9665] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1022.661682][ T9665] usb 2-1: Using ep0 maxpacket: 32 [ 1023.242410][T11243] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1023.556469][ T9665] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1023.646146][ T9665] usb 2-1: config 1 interface 0 altsetting 54 bulk endpoint 0x1 has invalid maxpacket 8 [ 1023.703612][ T9665] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1023.736040][ T4233] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1024.184459][ T9665] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1025.150025][ T9665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.159347][ T9665] usb 2-1: Product: syz [ 1025.163809][ T9665] usb 2-1: Manufacturer: syz [ 1025.168419][ T9665] usb 2-1: SerialNumber: syz [ 1025.191874][ T9665] usb 2-1: can't set config #1, error -71 [ 1025.207202][ T9665] usb 2-1: USB disconnect, device number 7 [ 1025.233604][T13302] [ 1025.251836][ T4233] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1025.264827][T13302] ============================= [ 1025.269699][T13302] WARNING: suspicious RCU usage [ 1025.278108][ T4233] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1025.301652][ T4233] usb 6-1: config 0 has no interface number 0 [ 1025.308135][T13302] syzkaller #0 Not tainted [ 1025.313556][ T4233] usb 6-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1025.328192][T13302] ----------------------------- [ 1025.342911][T13302] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 1025.347704][ T4233] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1025.360865][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.371206][T13302] [ 1025.371206][T13302] other info that might help us debug this: [ 1025.371206][T13302] [ 1025.386893][ T4233] usb 6-1: config 0 descriptor?? [ 1025.418610][T13302] [ 1025.418610][T13302] rcu_scheduler_active = 2, debug_locks = 1 [ 1025.422024][T13261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1025.444009][T13302] 1 lock held by syz.0.1845/13302: [ 1025.449221][T13302] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 1025.471781][T13302] [ 1025.471781][T13302] stack backtrace: [ 1025.487064][T13302] CPU: 1 PID: 13302 Comm: syz.0.1845 Not tainted syzkaller #0 [ 1025.494557][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1025.504628][T13302] Call Trace: [ 1025.507979][T13302] [ 1025.510984][T13302] dump_stack_lvl+0x188/0x250 [ 1025.515723][T13302] ? load_image+0x410/0x410 [ 1025.520306][T13302] ? show_regs_print_info+0x20/0x20 [ 1025.525537][T13302] ? lockdep_rcu_suspicious+0x110/0x180 [ 1025.531101][T13302] ? local_bh_enable+0x20/0x20 [ 1025.535882][T13302] rhltable_lookup+0x787/0x7a0 [ 1025.540659][T13302] ? mark_lock+0x94/0x320 [ 1025.545068][T13302] ? mr_mfc_find_parent+0x190/0x190 [ 1025.550275][T13302] ? local_bh_enable+0x20/0x20 [ 1025.555051][T13302] ? lock_chain_count+0x20/0x20 [ 1025.559910][T13302] mr_mfc_find_any_parent+0xb7/0x1d0 [ 1025.565203][T13302] ? local_bh_enable+0x20/0x20 [ 1025.569981][T13302] ip_mr_forward+0x247/0xf60 [ 1025.574592][T13302] ipmr_mfc_add+0x2273/0x2bd0 [ 1025.579286][T13302] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 1025.584231][T13302] ? __lock_acquire+0x7b50/0x7b50 [ 1025.589282][T13302] ip_mroute_setsockopt+0xecd/0x1230 [ 1025.594583][T13302] ? ipmr_rule_default+0x70/0x70 [ 1025.599546][T13302] ? __might_sleep+0xf0/0xf0 [ 1025.604213][T13302] ip_setsockopt+0x568/0x31e0 [ 1025.608923][T13302] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 1025.614300][T13302] ? aa_sk_perm+0x7dc/0x910 [ 1025.618883][T13302] ? aa_af_perm+0x340/0x340 [ 1025.623395][T13302] ? __fget_files+0x402/0x470 [ 1025.628104][T13302] ? aa_sock_opt_perm+0x74/0x100 [ 1025.633043][T13302] ? sock_common_setsockopt+0x32/0xb0 [ 1025.638445][T13302] ? raw_setsockopt+0xc2/0x170 [ 1025.643236][T13302] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1025.648538][T13302] __sys_setsockopt+0x2bf/0x3d0 [ 1025.653476][T13302] __x64_sys_setsockopt+0xb1/0xc0 [ 1025.658523][T13302] do_syscall_64+0x4c/0xa0 [ 1025.662972][T13302] ? clear_bhb_loop+0x30/0x80 [ 1025.667752][T13302] ? clear_bhb_loop+0x30/0x80 [ 1025.672438][T13302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1025.678363][T13302] RIP: 0033:0x7f560d2c5e59 [ 1025.682869][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.702578][T13302] RSP: 002b:00007f560b51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1025.711005][T13302] RAX: ffffffffffffffda RBX: 00007f560d54dfa0 RCX: 00007f560d2c5e59 [ 1025.718995][T13302] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 1025.726981][T13302] RBP: 00007f560d35be6f R08: 000000000000003c R09: 0000000000000000 [ 1025.734979][T13302] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1025.742961][T13302] R13: 00007f560d54e038 R14: 00007f560d54dfa0 R15: 00007fff93153fa8 [ 1025.750972][T13302] [ 1025.752866][T13312] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1841'. [ 1025.754054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.805141][T13302] [ 1025.808930][T13302] ============================= [ 1025.822956][T13302] WARNING: suspicious RCU usage [ 1025.833503][T13302] syzkaller #0 Not tainted [ 1025.846861][T13302] ----------------------------- [ 1025.854602][T13302] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 1025.868527][T13302] [ 1025.868527][T13302] other info that might help us debug this: [ 1025.868527][T13302] [ 1025.879600][T13302] [ 1025.879600][T13302] rcu_scheduler_active = 2, debug_locks = 1 [ 1025.882655][ T9665] usb 6-1: USB disconnect, device number 4 [ 1025.895786][T13302] 1 lock held by syz.0.1845/13302: [ 1025.901073][T13302] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 1025.913963][T13302] [ 1025.913963][T13302] stack backtrace: [ 1025.920023][T13302] CPU: 1 PID: 13302 Comm: syz.0.1845 Not tainted syzkaller #0 [ 1025.927490][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1025.937552][T13302] Call Trace: [ 1025.940836][T13302] [ 1025.943775][T13302] dump_stack_lvl+0x188/0x250 [ 1025.948462][T13302] ? load_image+0x410/0x410 [ 1025.952978][T13302] ? show_regs_print_info+0x20/0x20 [ 1025.958202][T13302] ? lockdep_rcu_suspicious+0x110/0x180 [ 1025.963756][T13302] ? local_bh_enable+0x20/0x20 [ 1025.968535][T13302] rhltable_lookup+0x512/0x7a0 [ 1025.973320][T13302] ? local_bh_enable+0x20/0x20 [ 1025.978095][T13302] ? mr_mfc_find_parent+0x190/0x190 [ 1025.983309][T13302] ? local_bh_enable+0x20/0x20 [ 1025.988090][T13302] ? lock_chain_count+0x20/0x20 [ 1025.992955][T13302] mr_mfc_find_any_parent+0xb7/0x1d0 [ 1025.998256][T13302] ? local_bh_enable+0x20/0x20 [ 1026.003034][T13302] ip_mr_forward+0x247/0xf60 [ 1026.007648][T13302] ipmr_mfc_add+0x2273/0x2bd0 [ 1026.012345][T13302] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 1026.017292][T13302] ? __lock_acquire+0x7b50/0x7b50 [ 1026.022344][T13302] ip_mroute_setsockopt+0xecd/0x1230 [ 1026.027649][T13302] ? ipmr_rule_default+0x70/0x70 [ 1026.032607][T13302] ? __might_sleep+0xf0/0xf0 [ 1026.037210][T13302] ip_setsockopt+0x568/0x31e0 [ 1026.041900][T13302] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 1026.047274][T13302] ? aa_sk_perm+0x7dc/0x910 [ 1026.051761][T13302] ? aa_af_perm+0x340/0x340 [ 1026.056246][T13302] ? __fget_files+0x402/0x470 [ 1026.060902][T13302] ? aa_sock_opt_perm+0x74/0x100 [ 1026.065817][T13302] ? sock_common_setsockopt+0x32/0xb0 [ 1026.071168][T13302] ? raw_setsockopt+0xc2/0x170 [ 1026.075912][T13302] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1026.081179][T13302] __sys_setsockopt+0x2bf/0x3d0 [ 1026.086151][T13302] __x64_sys_setsockopt+0xb1/0xc0 [ 1026.091168][T13302] do_syscall_64+0x4c/0xa0 [ 1026.095575][T13302] ? clear_bhb_loop+0x30/0x80 [ 1026.100255][T13302] ? clear_bhb_loop+0x30/0x80 [ 1026.104914][T13302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1026.110920][T13302] RIP: 0033:0x7f560d2c5e59 [ 1026.115334][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.135157][T13302] RSP: 002b:00007f560b51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1026.143567][T13302] RAX: ffffffffffffffda RBX: 00007f560d54dfa0 RCX: 00007f560d2c5e59 [ 1026.151542][T13302] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 1026.159518][T13302] RBP: 00007f560d35be6f R08: 000000000000003c R09: 0000000000000000 [ 1026.167475][T13302] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1026.175432][T13302] R13: 00007f560d54e038 R14: 00007f560d54dfa0 R15: 00007fff93153fa8 [ 1026.183412][T13302] [ 1026.186498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.197745][T13302] [ 1026.200092][T13302] ============================= [ 1026.206259][T13302] WARNING: suspicious RCU usage [ 1026.211212][T13302] syzkaller #0 Not tainted [ 1026.215750][T13302] ----------------------------- [ 1026.220629][T13302] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 1026.229389][T13302] [ 1026.229389][T13302] other info that might help us debug this: [ 1026.229389][T13302] [ 1026.239674][T13302] [ 1026.239674][T13302] rcu_scheduler_active = 2, debug_locks = 1 [ 1026.248868][T13302] 1 lock held by syz.0.1845/13302: [ 1026.254153][T13302] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 1026.263971][T13302] [ 1026.263971][T13302] stack backtrace: [ 1026.269938][T13302] CPU: 1 PID: 13302 Comm: syz.0.1845 Not tainted syzkaller #0 [ 1026.277382][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1026.287422][T13302] Call Trace: [ 1026.290693][T13302] [ 1026.293610][T13302] dump_stack_lvl+0x188/0x250 [ 1026.298274][T13302] ? load_image+0x410/0x410 [ 1026.302769][T13302] ? show_regs_print_info+0x20/0x20 [ 1026.307974][T13302] ? lockdep_rcu_suspicious+0x110/0x180 [ 1026.313504][T13302] ? local_bh_enable+0x20/0x20 [ 1026.318269][T13302] rhltable_lookup+0x5fc/0x7a0 [ 1026.323037][T13302] ? local_bh_enable+0x20/0x20 [ 1026.327801][T13302] ? mr_mfc_find_parent+0x190/0x190 [ 1026.332979][T13302] ? local_bh_enable+0x20/0x20 [ 1026.337728][T13302] ? lock_chain_count+0x20/0x20 [ 1026.342598][T13302] mr_mfc_find_any_parent+0xb7/0x1d0 [ 1026.347881][T13302] ? local_bh_enable+0x20/0x20 [ 1026.352635][T13302] ip_mr_forward+0x247/0xf60 [ 1026.357241][T13302] ipmr_mfc_add+0x2273/0x2bd0 [ 1026.361951][T13302] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 1026.366906][T13302] ? __lock_acquire+0x7b50/0x7b50 [ 1026.371966][T13302] ip_mroute_setsockopt+0xecd/0x1230 [ 1026.377265][T13302] ? ipmr_rule_default+0x70/0x70 [ 1026.382230][T13302] ? __might_sleep+0xf0/0xf0 [ 1026.386831][T13302] ip_setsockopt+0x568/0x31e0 [ 1026.391519][T13302] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 1026.396897][T13302] ? aa_sk_perm+0x7dc/0x910 [ 1026.401418][T13302] ? aa_af_perm+0x340/0x340 [ 1026.405940][T13302] ? __fget_files+0x402/0x470 [ 1026.410720][T13302] ? aa_sock_opt_perm+0x74/0x100 [ 1026.415692][T13302] ? sock_common_setsockopt+0x32/0xb0 [ 1026.421076][T13302] ? raw_setsockopt+0xc2/0x170 [ 1026.425839][T13302] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1026.431131][T13302] __sys_setsockopt+0x2bf/0x3d0 [ 1026.435996][T13302] __x64_sys_setsockopt+0xb1/0xc0 [ 1026.441032][T13302] do_syscall_64+0x4c/0xa0 [ 1026.445461][T13302] ? clear_bhb_loop+0x30/0x80 [ 1026.450125][T13302] ? clear_bhb_loop+0x30/0x80 [ 1026.454790][T13302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1026.460683][T13302] RIP: 0033:0x7f560d2c5e59 [ 1026.465085][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.484767][T13302] RSP: 002b:00007f560b51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1026.493176][T13302] RAX: ffffffffffffffda RBX: 00007f560d54dfa0 RCX: 00007f560d2c5e59 [ 1026.501152][T13302] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 1026.509106][T13302] RBP: 00007f560d35be6f R08: 000000000000003c R09: 0000000000000000 [ 1026.517089][T13302] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1026.525056][T13302] R13: 00007f560d54e038 R14: 00007f560d54dfa0 R15: 00007fff93153fa8 [ 1026.533041][T13302] [ 1026.536153][ C1] vkms_vblank_simulate: vblank timer overrun