last executing test programs: 12.278538578s ago: executing program 4 (id=850): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.627291716s ago: executing program 4 (id=858): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f00000000c0)) unshare(0x22060600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.420770768s ago: executing program 0 (id=860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfffffff2, @empty, 0x18}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 9.376597429s ago: executing program 4 (id=861): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003bc000/0x3000)=nil, &(0x7f000076a000/0x3000)=nil, 0x3000, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 8.992023088s ago: executing program 0 (id=862): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.737368371s ago: executing program 0 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x3, 0x3, 0x5, 0x2, 0x3}, {0x8, 0x2, 0x8, 0x8, 0x805, 0xc}, 0xfffff800, 0x8, 0x121e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9b85e05b5271}, @TCA_TBF_RATE64={0xc, 0x4, 0x688f2aa9cd6a07e}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.433057789s ago: executing program 1 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b32, 0x0) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.377248589s ago: executing program 3 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) fadvise64(r0, 0x63eb, 0x0, 0x1) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES16=r1, @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xf, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe86c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x560, 0x3b0, 0x0, 0x94, 0x94, 0x94, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x24}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x94, 0x1bc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5bc) 7.00843633s ago: executing program 1 (id=871): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 6.6294708s ago: executing program 0 (id=872): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 5.957647246s ago: executing program 1 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x8, [{@rand_addr=0x64010100, 0x1}]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x80, 0x0, {0x5, 0x4, 0x0, 0x5, 0x3, 0x68, 0x1, 0x7f, 0x0, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, "17deba91"}}}}}, 0x0) 5.632681875s ago: executing program 3 (id=874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.341321921s ago: executing program 3 (id=875): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @local}, @in6={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x79e}, @in6={0xa, 0x4e22, 0xab54, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}]}, &(0x7f0000000180)=0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/ipc\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x6, 0x5a97ad85}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0xe}, &(0x7f00000001c0)=0xfffffdcb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.870972644s ago: executing program 1 (id=877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1"], 0x2c}}, 0x60040050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x7040, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.970483687s ago: executing program 4 (id=878): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x6, 0x6}}}}]}, 0x48}}, 0x0) 3.891339422s ago: executing program 1 (id=879): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) 3.848649015s ago: executing program 2 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x100, 0x0, 0x0}) socket$inet6(0xa, 0x1, 0x8010800000000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.848274734s ago: executing program 3 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b32, 0x0) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000600)='4', 0x1}, {&(0x7f00000001c0)="a46e5cbd4f7fabbb", 0x8}, {&(0x7f0000000340)}], 0x3, 0x800000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c911, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@noblock_validity}, {@errors_remount}, {@noinit_itable}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9a, 0x4f2, &(0x7f0000000f40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") getpriority(0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.563798252s ago: executing program 2 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=@newlink={0x30, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42248}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x20044080) 3.437177778s ago: executing program 2 (id=883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8000ca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0xd04f, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xda2c, 0xfffe}, 0x8) 3.344720531s ago: executing program 2 (id=884): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) 949.458716ms ago: executing program 4 (id=885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 844.605927ms ago: executing program 1 (id=886): move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) r0 = shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) shmdt(r0) 829.116574ms ago: executing program 0 (id=887): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x400000000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 736.657897ms ago: executing program 3 (id=888): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa8", 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xffff1000, 0x10000, 0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x10}, {0x60000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x50000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3e}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x3b, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x3}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 648.00269ms ago: executing program 4 (id=889): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003bc000/0x3000)=nil, &(0x7f000076a000/0x3000)=nil, 0x3000, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 380.004231ms ago: executing program 2 (id=890): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1"], 0x2c}}, 0x60040050) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x7040, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 290.386534ms ago: executing program 0 (id=891): openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x402) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 177.956653ms ago: executing program 2 (id=892): r0 = io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0xfa0d, 0x40, 0x4, 0xb7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x100, 0x0, 0x0}) socket$inet6(0xa, 0x1, 0x8010800000000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): veth1_to_team: link becomes ready [ 51.976051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.986901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.996819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.006373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.028260][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.052294][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.064072][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.073033][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.082457][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.091165][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.099494][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.108196][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.130201][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.140936][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.152891][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.162529][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.171852][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.183106][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.192206][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.201738][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.210026][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.217623][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.225649][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.240614][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.250721][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.290793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.300998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.320708][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.327838][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.340632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.350068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.358529][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.366203][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.375204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.376150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.415333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.434285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.446710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.461592][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.468700][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.483968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.506190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.523519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.534922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.561622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.572904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.581599][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.588762][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.598685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.607271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.615099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.622831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.630449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.637817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.646617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.681973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.692289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.701994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.711877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.721514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.730001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.738206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.747349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.756490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.765300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.774202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.782840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.796968][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.806721][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.824249][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.846690][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.868157][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.881144][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.897087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.905900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.937257][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.984102][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.989876][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 53.000006][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 53.000191][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.011397][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 53.033436][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.050214][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 53.050412][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.056374][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 53.102966][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.111767][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.120646][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.129358][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.143231][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.150370][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.159414][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.168606][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.183076][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.190314][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.200946][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.216277][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.224554][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.233076][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.244097][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.258570][ T4184] device veth0_vlan entered promiscuous mode [ 53.277417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.304782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.324214][ T4184] device veth1_vlan entered promiscuous mode [ 53.338284][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.353083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.364711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.376234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.386227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.396670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.406501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.426474][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.437651][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.489746][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.498313][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.509102][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.518277][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.529083][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.537927][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.546126][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.555039][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.563494][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.572676][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.581805][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.604824][ T4184] device veth0_macvtap entered promiscuous mode [ 53.617720][ T4184] device veth1_macvtap entered promiscuous mode [ 53.639086][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.653842][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.663149][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.672103][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.681179][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.727762][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.738727][ T4189] device veth0_vlan entered promiscuous mode [ 53.746966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.755616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.765030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.774470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.783309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.791920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.803596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.812635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.821041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.828777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.856092][ T4190] device veth0_vlan entered promiscuous mode [ 53.870239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.878918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.888053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.895814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.907786][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.919526][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.937970][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.947129][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.956175][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.965180][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.978985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.987682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.996954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.005605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.014780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.023524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.034564][ T4187] device veth0_vlan entered promiscuous mode [ 54.046240][ T4190] device veth1_vlan entered promiscuous mode [ 54.073191][ T4189] device veth1_vlan entered promiscuous mode [ 54.087535][ T4187] device veth1_vlan entered promiscuous mode [ 54.122386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.131355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.139223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.147853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.156597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.165268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.217308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.226536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.235076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.245180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.255141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.264401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.272725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.281161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.290414][ T4198] device veth0_vlan entered promiscuous mode [ 54.301054][ T4190] device veth0_macvtap entered promiscuous mode [ 54.333607][ T4190] device veth1_macvtap entered promiscuous mode [ 54.352253][ T4198] device veth1_vlan entered promiscuous mode [ 54.360584][ T4187] device veth0_macvtap entered promiscuous mode [ 54.368471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.376983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.387503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.395960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.404602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.414113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.425464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.434571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.460553][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.468031][ T4189] device veth0_macvtap entered promiscuous mode [ 54.468682][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.486276][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.499648][ T4189] device veth1_macvtap entered promiscuous mode [ 54.510762][ T4187] device veth1_macvtap entered promiscuous mode [ 54.539283][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.550313][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.564931][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.604204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.613985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.630720][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.643817][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.654851][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.665828][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.677097][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.694009][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.702216][ T4198] device veth0_macvtap entered promiscuous mode [ 54.710169][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.723819][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.723909][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.736978][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.749430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.757678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.767072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.775996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.784633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.793765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.806748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.818520][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.829352][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.841904][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.852595][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.864569][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.875424][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.887424][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.897954][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.908874][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.919896][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.930626][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.941570][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.951950][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.962264][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.972388][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.981431][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.992268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.007815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.017282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.033828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.044164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.055679][ T4198] device veth1_macvtap entered promiscuous mode [ 55.062952][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 55.067349][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.075368][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 55.080348][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.091303][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 55.095885][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.112310][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.122134][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.134359][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.140916][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 55.146996][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.161041][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.169961][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.178658][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.187719][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.219976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.229147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.229956][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 55.239479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.278087][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.287452][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.297613][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.306552][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.364590][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.376346][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.393121][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.407271][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.418120][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.434965][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.445538][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.468637][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.486679][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.539337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.570992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.608626][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.639722][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.661153][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.680142][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.691407][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.718876][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.729723][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.746727][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.772144][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.796748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.810744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.829148][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.833082][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.847556][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.860546][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.872867][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.897019][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.938649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.971025][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.979081][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.017759][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.034759][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.085410][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.099517][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.125666][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.136997][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.158702][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.174825][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.225236][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.241380][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.282600][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.292183][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.320627][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.329079][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.378682][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.378987][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.424449][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.424877][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.464827][ T4268] loop1: detected capacity change from 0 to 512 [ 56.480003][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.542978][ T4268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.702784][ T4270] loop3: detected capacity change from 0 to 4096 [ 56.753893][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.2: corrupted inode contents [ 56.807377][ T4270] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 56.831371][ T4268] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #3: comm syz.1.2: mark_inode_dirty error [ 56.849668][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 56.870625][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.2: corrupted inode contents [ 56.878835][ T26] audit: type=1800 audit(1773343931.309:2): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 56.911226][ T4268] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.2: mark_inode_dirty error [ 56.950673][ T4268] Quota error (device loop1): write_blk: dquota write failed [ 56.976977][ T4268] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 57.030707][ T4268] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.2: Failed to acquire dquot type 0 [ 57.083603][ T4279] autofs4:pid:4279:autofs_fill_super: called with bogus options [ 57.153809][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 57.171699][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 57.217122][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 57.225133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.234087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 57.243283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 57.252270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 57.261350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 57.270335][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 57.280145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 57.371032][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.2: corrupted inode contents [ 57.385432][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 57.393885][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 57.406037][ T4268] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.2: mark_inode_dirty error [ 57.418377][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.2: corrupted inode contents [ 57.431629][ T4268] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.2: mark_inode_dirty error [ 57.445334][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.2: corrupted inode contents [ 57.471188][ T4268] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 58.475854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 58.486943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 58.508976][ T4268] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.2: corrupted inode contents [ 58.553464][ T4268] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.2: mark_inode_dirty error [ 58.594782][ T4268] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 58.607248][ T4268] EXT4-fs (loop1): 1 truncate cleaned up [ 58.617655][ T4290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.620972][ T4268] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 58.745198][ T4268] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.792024][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 60.069608][ C1] sched: RT throttling activated [ 61.420042][ T4268] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 61.648300][ T4307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 61.695802][ T4309] loop2: detected capacity change from 0 to 2048 [ 61.702582][ T4307] netlink: 312 bytes leftover after parsing attributes in process `syz.4.11'. [ 61.790030][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 61.878336][ T4316] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 61.905115][ T4307] capability: warning: `syz.4.11' uses 32-bit capabilities (legacy support in use) [ 61.917662][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 61.993898][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 62.013835][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 62.041308][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 62.090971][ T4309] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 62.123044][ T4309] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.141012][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 62.152572][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 63.239065][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 63.903263][ T4336] loop0: detected capacity change from 0 to 256 [ 64.273930][ T4338] loop3: detected capacity change from 0 to 512 [ 66.150441][ T4338] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.072072][ T4339] loop1: detected capacity change from 0 to 128 [ 68.243181][ T4338] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 68.267969][ T4336] FAT-fs (loop0): Directory bread(block 64) failed [ 68.274887][ T4336] FAT-fs (loop0): Directory bread(block 65) failed [ 68.282491][ T4336] FAT-fs (loop0): Directory bread(block 66) failed [ 68.289131][ T4336] FAT-fs (loop0): Directory bread(block 67) failed [ 68.295787][ T4336] FAT-fs (loop0): Directory bread(block 68) failed [ 68.302383][ T4336] FAT-fs (loop0): Directory bread(block 69) failed [ 68.308987][ T4336] FAT-fs (loop0): Directory bread(block 70) failed [ 68.316635][ T4336] FAT-fs (loop0): Directory bread(block 71) failed [ 68.323298][ T4336] FAT-fs (loop0): Directory bread(block 72) failed [ 68.329885][ T4336] FAT-fs (loop0): Directory bread(block 73) failed [ 68.592754][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 68.709844][ T4297] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 69.016481][ T4358] loop0: detected capacity change from 0 to 1024 [ 69.023325][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.367040][ T4358] ======================================================= [ 69.367040][ T4358] WARNING: The mand mount option has been deprecated and [ 69.367040][ T4358] and is ignored by this kernel. Remove the mand [ 69.367040][ T4358] option from the mount to silence this warning. [ 69.367040][ T4358] ======================================================= [ 69.419917][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.431618][ T4297] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 69.449234][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.488997][ T4297] usb 4-1: config 0 descriptor?? [ 69.524111][ T4358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.556192][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 69.594425][ T4297] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 69.690178][ T1111] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.716807][ T1111] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 69.757173][ T1111] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.811524][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.841983][ T4351] udc-core: couldn't find an available UDC or it's busy [ 69.876178][ T4351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.916147][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 69.925725][ T4352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 70.218994][ T4375] udc-core: couldn't find an available UDC or it's busy [ 70.226382][ T4375] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.126446][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.581482][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.593741][ T4297] usb 4-1: USB disconnect, device number 2 [ 71.729705][ T4227] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.819064][ T4369] delete_channel: no stack [ 71.864235][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.979728][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 72.055221][ T4297] usb 3-1: USB disconnect, device number 2 [ 72.099865][ T4227] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.118696][ T4227] usb 2-1: config 0 has no interface number 0 [ 72.206621][ T4227] usb 2-1: config 0 interface 184 has no altsetting 0 [ 73.130024][ T4227] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 73.130063][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.130076][ T4227] usb 2-1: Product: syz [ 73.130085][ T4227] usb 2-1: Manufacturer: syz [ 73.130095][ T4227] usb 2-1: SerialNumber: syz [ 73.131957][ T4227] usb 2-1: config 0 descriptor?? [ 73.171999][ T4227] smsc75xx v1.0.0 [ 74.631855][ T4227] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 74.720919][ T4227] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.642686][ T7] cfg80211: failed to load regulatory.db [ 76.719823][ T4227] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 76.843155][ T4227] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 77.461429][ T4227] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.225993][ T4227] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 79.429830][ T4227] usb 2-1: USB disconnect, device number 2 [ 81.289217][ T4458] trusted_key: encrypted_key: insufficient parameters specified [ 82.049696][ T26] audit: type=1326 audit(1773343956.479:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.0.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48f3b7c799 code=0x0 [ 82.196098][ T4462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.49'. [ 82.234860][ T4462] loop0: detected capacity change from 0 to 128 [ 82.302146][ T4462] FAT-fs (loop0): Unrecognized mount option "ext4" or missing value [ 83.409907][ T4474] 9pnet_virtio: no channels available for device syz [ 84.669811][ T4474] 9pnet_virtio: no channels available for device syz [ 86.590185][ T4497] loop3: detected capacity change from 0 to 1024 [ 86.667464][ T4483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.763058][ T4497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.842912][ T4497] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.56: Allocating blocks 497-513 which overlap fs metadata [ 86.901656][ T4495] EXT4-fs (loop3): pa ffff88807537f380: logic 131104, phys. 177, len 21 [ 86.910289][ T4495] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 87.648038][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.742073][ T4516] trusted_key: encrypted_key: insufficient parameters specified [ 88.225657][ T4522] loop3: detected capacity change from 0 to 512 [ 88.264907][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.316064][ T4522] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.362276][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 88.500238][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.619995][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.829800][ T4227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.860760][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.150998][ T4227] usb 2-1: Product: syz [ 90.159951][ T4227] usb 2-1: Manufacturer: syz [ 90.174856][ T4227] usb 2-1: SerialNumber: syz [ 90.210759][ T4227] usb 2-1: can't set config #1, error -71 [ 90.219191][ T4524] delete_channel: no stack [ 90.230275][ T4227] usb 2-1: USB disconnect, device number 3 [ 90.407446][ T4542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.68'. [ 90.489304][ T4542] lo speed is unknown, defaulting to 1000 [ 90.537825][ T4542] lo speed is unknown, defaulting to 1000 [ 90.581203][ T4542] lo speed is unknown, defaulting to 1000 [ 90.603503][ T4545] loop1: detected capacity change from 0 to 512 [ 90.618852][ T4542] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.669716][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.680743][ T4542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.756476][ T4542] lo speed is unknown, defaulting to 1000 [ 90.768676][ T4542] lo speed is unknown, defaulting to 1000 [ 90.778816][ T4542] lo speed is unknown, defaulting to 1000 [ 90.793073][ T4542] lo speed is unknown, defaulting to 1000 [ 90.805445][ T4542] lo speed is unknown, defaulting to 1000 [ 90.939844][ T4546] 9pnet_virtio: no channels available for device syz [ 91.029759][ T4230] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 91.050285][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.065862][ T4230] usb 4-1: config 0 has no interfaces? [ 91.229861][ T4230] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 91.239127][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 91.255150][ T4230] usb 4-1: Product: syz [ 91.259357][ T4230] usb 4-1: Manufacturer: syz [ 91.265904][ T4230] usb 4-1: SerialNumber: syz [ 91.287788][ T4230] usb 4-1: config 0 descriptor?? [ 91.536169][ T4227] usb 4-1: USB disconnect, device number 3 [ 92.039847][ T4546] 9pnet_virtio: no channels available for device syz [ 94.589137][ T4578] loop3: detected capacity change from 0 to 4096 [ 94.691575][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.719750][ T4286] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.794315][ T4578] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.77: corrupted inode contents [ 94.902175][ T4578] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #15: comm syz.3.77: mark_inode_dirty error [ 94.929968][ T4578] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.77: corrupted inode contents [ 94.952176][ T4578] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.77: mark_inode_dirty error [ 94.970094][ T4286] usb 3-1: Using ep0 maxpacket: 16 [ 95.049223][ T4578] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.77: corrupted inode contents [ 95.160081][ T4286] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.181325][ T4578] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.77: mark_inode_dirty error [ 95.208863][ T4578] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.77: corrupted inode contents [ 95.231487][ T4286] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.274083][ T4578] EXT4-fs error (device loop3): ext4_truncate:4279: inode #15: comm syz.3.77: mark_inode_dirty error [ 95.305708][ T4578] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.77: couldn't truncate inode 15 (err -117) [ 95.409905][ T4286] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.449179][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.468094][ T4286] usb 3-1: Product: syz [ 95.517369][ T4588] capability: warning: `syz.4.81' uses deprecated v2 capabilities in a way that may be insecure [ 95.529933][ T4286] usb 3-1: Manufacturer: syz [ 95.541597][ T4286] usb 3-1: SerialNumber: syz [ 95.737669][ T4595] loop3: detected capacity change from 0 to 1024 [ 95.812644][ T4595] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 95.949972][ T4286] usb 3-1: 0:2 : does not exist [ 96.723856][ T4286] usb 3-1: USB disconnect, device number 3 [ 96.748032][ T4595] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,stripe=0x000000000000000e,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 96.941008][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.182123][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.170087][ T1111] usb 5-1: config 0 has no interfaces? [ 98.217474][ T4621] delete_channel: no stack [ 98.250020][ T1111] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 98.299675][ T1111] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.324359][ T1111] usb 5-1: Manufacturer: syz [ 98.351307][ T1111] usb 5-1: config 0 descriptor?? [ 98.706804][ T4616] syz.3.90 (4616) used greatest stack depth: 18512 bytes left [ 98.919711][ T1111] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.769073][ T4646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.101'. [ 99.879422][ T4229] usb 5-1: USB disconnect, device number 2 [ 100.083010][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.103671][ T1111] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 100.120961][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.151904][ T1111] usb 1-1: config 0 descriptor?? [ 101.007054][ T1111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 101.017521][ T4635] udc-core: couldn't find an available UDC or it's busy [ 101.041324][ T4635] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.169485][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 101.365123][ T4659] udc-core: couldn't find an available UDC or it's busy [ 101.372944][ T4659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.903334][ T4660] x_tables: duplicate underflow at hook 1 [ 102.080301][ T1111] usb 1-1: USB disconnect, device number 2 [ 102.246945][ T4669] loop4: detected capacity change from 0 to 2048 [ 102.347396][ T4176] Alternate GPT is invalid, using primary GPT. [ 102.367522][ T4176] loop4: p2 p3 p7 [ 102.509315][ T4669] Alternate GPT is invalid, using primary GPT. [ 102.528548][ T4669] loop4: p2 p3 p7 [ 102.735335][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 102.746563][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 102.755717][ T4681] loop2: detected capacity change from 0 to 512 [ 102.758742][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 102.871848][ T4681] EXT4-fs (loop2): Ignoring removed oldalloc option [ 102.888466][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 103.197087][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 103.988463][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 104.008481][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 104.021895][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 104.069951][ T4681] EXT4-fs (loop2): 1 truncate cleaned up [ 104.075768][ T4681] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000001,. Quota mode: writeback. [ 104.115498][ T4695] device dummy0 entered promiscuous mode [ 104.174778][ T4695] device dummy0 left promiscuous mode [ 105.222226][ T4706] device team0 entered promiscuous mode [ 105.231035][ T4706] device team_slave_0 entered promiscuous mode [ 105.297923][ T4706] device team_slave_1 entered promiscuous mode [ 105.343879][ T4706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.364410][ T4706] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 105.383664][ T4710] lo speed is unknown, defaulting to 1000 [ 105.389495][ T4710] lo speed is unknown, defaulting to 1000 [ 105.396388][ T4710] lo speed is unknown, defaulting to 1000 [ 105.409763][ T4710] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.420749][ T4709] bridge0: port 3(vlan2) entered blocking state [ 105.439948][ T4709] bridge0: port 3(vlan2) entered disabled state [ 105.447535][ T4709] device vlan2 entered promiscuous mode [ 105.453590][ T4709] device bond0 entered promiscuous mode [ 105.459275][ T4709] device bond_slave_0 entered promiscuous mode [ 105.466407][ T4709] device bond_slave_1 entered promiscuous mode [ 105.473263][ T4709] device macvlan2 entered promiscuous mode [ 105.494474][ T4710] lo speed is unknown, defaulting to 1000 [ 105.522613][ T4710] lo speed is unknown, defaulting to 1000 [ 105.534408][ T4710] lo speed is unknown, defaulting to 1000 [ 105.542503][ T4710] lo speed is unknown, defaulting to 1000 [ 105.549263][ T4710] lo speed is unknown, defaulting to 1000 [ 105.624601][ T4722] netlink: 596 bytes leftover after parsing attributes in process `syz.4.130'. [ 105.768715][ T4729] loop0: detected capacity change from 0 to 256 [ 106.156875][ T4750] loop4: detected capacity change from 0 to 128 [ 108.245356][ T4795] loop4: detected capacity change from 0 to 512 [ 108.304684][ T4795] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 108.373956][ T4802] trusted_key: encrypted_key: insufficient parameters specified [ 108.902560][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,grpjquota=,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 109.090269][ T4795] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.267704][ T4811] loop0: detected capacity change from 0 to 512 [ 109.363713][ T4811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.497148][ T4811] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.160: invalid indirect mapped block 1023410176 (level 0) [ 109.506712][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.522305][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 109.538382][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 109.545882][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 109.553656][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 109.554083][ T4816] program syz.4.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.562440][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 109.578478][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 109.590539][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.598038][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.611571][ T4819] device bridge_slave_0 left promiscuous mode [ 109.619312][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.669276][ T4811] EXT4-fs error (device loop0): mb_free_blocks:1874: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 109.680041][ T4819] device bridge_slave_1 left promiscuous mode [ 109.694171][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.736346][ T4811] EXT4-fs (loop0): 1 truncate cleaned up [ 109.757761][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,jqfmt=vfsold,stripe=0x0000000000004000,lazytime,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 109.758111][ T4819] bond0: (slave bond_slave_0): Releasing backup interface [ 109.908542][ T4819] device bond_slave_0 left promiscuous mode [ 109.988085][ T4819] bond0: (slave bond_slave_1): Releasing backup interface [ 110.011876][ T4819] device bond_slave_1 left promiscuous mode [ 110.048727][ T4819] device team_slave_0 left promiscuous mode [ 110.907860][ T4819] team0: Port device team_slave_0 removed [ 111.001643][ T4819] device team_slave_1 left promiscuous mode [ 111.126189][ T4819] team0: Port device team_slave_1 removed [ 111.166208][ T4848] trusted_key: encrypted_key: insufficient parameters specified [ 111.254705][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.265033][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.281913][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.289543][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.308889][ T4819] bond0: (slave macvlan2): Releasing backup interface [ 111.920082][ T4819] device macvlan2 left promiscuous mode [ 112.166115][ T4819] device team0 left promiscuous mode [ 112.192955][ T4819] device vlan2 left promiscuous mode [ 112.198411][ T4819] device bond0 left promiscuous mode [ 112.205606][ T4819] bridge0: port 3(vlan2) entered disabled state [ 112.335094][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.342930][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.356680][ T4839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.532264][ T4854] device syzkaller0 entered promiscuous mode [ 113.540015][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.804235][ T4881] only policy match revision 0 supported [ 115.804812][ T4881] unable to load match [ 116.613215][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 116.756262][ T4889] trusted_key: encrypted_key: insufficient parameters specified [ 117.260597][ T4227] usb 5-1: device descriptor read/all, error -71 [ 117.289434][ T4890] loop4: detected capacity change from 0 to 512 [ 118.268472][ T4890] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.187: inode has both inline data and extents flags [ 118.312666][ T4890] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.187: couldn't read orphan inode 15 (err -117) [ 118.327676][ T4890] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.930620][ T4933] trusted_key: encrypted_key: insufficient parameters specified [ 121.747565][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.129754][ T4229] usb 2-1: device descriptor read/64, error -71 [ 122.420194][ T4229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.964877][ T4227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.209779][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 123.918509][ T26] audit: type=1326 audit(1773343998.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.1.211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eef09c799 code=0x0 [ 123.980014][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.999124][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.199879][ T4227] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.218420][ T4970] lo speed is unknown, defaulting to 1000 [ 124.225042][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.225071][ T4227] usb 5-1: Product: syz [ 124.225089][ T4227] usb 5-1: Manufacturer: syz [ 124.225106][ T4227] usb 5-1: SerialNumber: syz [ 124.303003][ T4970] lo speed is unknown, defaulting to 1000 [ 124.539955][ T4227] usb 5-1: 0:2 : does not exist [ 124.602863][ T4227] usb 5-1: USB disconnect, device number 5 [ 124.890804][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.047599][ T4981] ip6t_srh: unknown srh invflags 4000 [ 125.549679][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.896313][ T7] usb 1-1: device descriptor read/64, error -71 [ 126.589860][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.799686][ T7] usb 1-1: device descriptor read/64, error -71 [ 126.920057][ T7] usb usb1-port1: attempt power cycle [ 127.226640][ T5005] Zero length message leads to an empty skb [ 127.279696][ T4297] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.329665][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.374563][ T5007] tipc: Started in network mode [ 127.395858][ T5007] tipc: Node identity 963c0787c122, cluster identity 4711 [ 127.429867][ T7] usb 1-1: device descriptor read/8, error -71 [ 127.438075][ T5007] tipc: Enabled bearer , priority 0 [ 127.473387][ T5008] device syzkaller0 entered promiscuous mode [ 127.519745][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 127.531291][ T5007] tipc: Resetting bearer [ 127.558456][ T5006] tipc: Resetting bearer [ 127.587110][ T5006] tipc: Disabling bearer [ 127.639766][ T4297] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.699737][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.709664][ T4297] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 127.717212][ T4297] usb 5-1: can't read configurations, error -71 [ 127.819807][ T7] usb 1-1: device descriptor read/8, error -71 [ 127.949775][ T7] usb usb1-port1: unable to enumerate USB device [ 128.089684][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.440785][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 128.820027][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.342963][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.640634][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.655147][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.663792][ T21] usb 2-1: Product: syz [ 129.668155][ T21] usb 2-1: Manufacturer: syz [ 129.673188][ T21] usb 2-1: SerialNumber: syz [ 129.738614][ T5034] trusted_key: encrypted_key: insufficient parameters specified [ 130.719864][ T21] usb 2-1: 0:2 : does not exist [ 130.796301][ T21] usb 2-1: USB disconnect, device number 6 [ 131.168817][ T5042] lo speed is unknown, defaulting to 1000 [ 131.176943][ T5042] lo speed is unknown, defaulting to 1000 [ 131.713044][ T5064] loop4: detected capacity change from 0 to 256 [ 133.290649][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309826][ T5049] sctp: failed to load transform for md5: -2 [ 133.630988][ T5064] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 135.859867][ T5085] input: syz1 as /devices/virtual/input/input6 [ 136.089849][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.339741][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 136.459778][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.505328][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.589665][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.702045][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.728143][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.749493][ T21] usb 5-1: Product: syz [ 136.767169][ T21] usb 5-1: Manufacturer: syz [ 136.788534][ T21] usb 5-1: SerialNumber: syz [ 137.000052][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.029640][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.077857][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.119362][ T4228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.139836][ T21] usb 5-1: 0:2 : does not exist [ 137.165061][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.189192][ T21] usb 5-1: USB disconnect, device number 8 [ 137.241711][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.381584][ T4228] usb 1-1: config 0 descriptor?? [ 137.905736][ T4228] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 138.093245][ T5111] loop4: detected capacity change from 0 to 256 [ 141.230962][ T4228] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.273274][ T4228] usb 1-1: USB disconnect, device number 7 [ 141.472604][ T5118] trusted_key: encrypted_key: insufficient parameters specified [ 144.844854][ T5151] fido_id[5151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 146.007773][ T5168] trusted_key: encrypted_key: insufficient parameters specified [ 147.524847][ T5167] loop2: detected capacity change from 0 to 256 [ 147.611031][ T5167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 147.909799][ T4280] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 148.457820][ T5171] team0 (unregistering): Port device team_slave_0 removed [ 148.681466][ T5171] team0 (unregistering): Port device team_slave_1 removed [ 148.789925][ T4280] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 148.804407][ T4280] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 148.836155][ T4280] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 148.846599][ T4280] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 148.865356][ T4280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.135148][ T5199] netlink: 75 bytes leftover after parsing attributes in process `syz.0.278'. [ 150.345145][ T4280] usb 4-1: string descriptor 0 read error: -71 [ 150.364409][ T4280] usb 4-1: USB disconnect, device number 4 [ 150.441810][ T5211] trusted_key: encrypted_key: insufficient parameters specified [ 150.562715][ T5216] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.284' resets device [ 150.855583][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.069897][ T5069] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.151645][ T5272] trusted_key: encrypted_key: insufficient parameters specified [ 157.047950][ T5273] loop2: detected capacity change from 0 to 256 [ 160.554333][ T5297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.572928][ T5324] loop0: detected capacity change from 0 to 256 [ 164.727311][ T5324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 166.240752][ T4280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.659881][ T4280] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.674395][ T4280] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 166.684641][ T4280] usb 1-1: config 220 interface 0 has no altsetting 0 [ 166.789732][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.794624][ T5342] device syzkaller0 entered promiscuous mode [ 166.860817][ T4280] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.892492][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.938711][ T4280] usb 1-1: Product: syz [ 166.958128][ T4280] usb 1-1: Manufacturer: syz [ 166.999955][ T4280] usb 1-1: SerialNumber: syz [ 167.489962][ T4280] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 167.499855][ T4280] usb 1-1: No valid video chain found. [ 167.587748][ T4280] usb 1-1: USB disconnect, device number 8 [ 167.829810][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 167.920013][ T5366] loop1: detected capacity change from 0 to 256 [ 167.999979][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.107050][ T5366] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 168.357275][ T23] usb 4-1: config 0 has no interfaces? [ 169.400099][ T23] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 169.409998][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.266562][ T23] usb 4-1: Product: syz [ 170.316874][ T23] usb 4-1: config 0 descriptor?? [ 170.439738][ T23] usb 4-1: can't set config #0, error -71 [ 170.476260][ T23] usb 4-1: USB disconnect, device number 6 [ 171.345043][ T5069] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.488475][ T5393] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 171.507219][ T5393] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 171.760398][ T5069] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 171.773592][ T5069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.786370][ T5409] trusted_key: encrypted_key: insufficient parameters specified [ 171.879806][ T5069] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 171.933579][ T5069] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 171.966886][ T5069] usb 3-1: Manufacturer: syz [ 171.987149][ T5069] usb 3-1: config 0 descriptor?? [ 172.189710][ T5069] rc_core: IR keymap rc-hauppauge not found [ 172.203699][ T5069] Registered IR keymap rc-empty [ 172.225873][ T5069] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 172.253713][ T5069] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 173.000176][ T5428] loop4: detected capacity change from 0 to 256 [ 176.040629][ T7] usb 3-1: USB disconnect, device number 4 [ 176.659660][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 177.058419][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 177.101387][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 177.389665][ T5069] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 177.588507][ T5454] lo speed is unknown, defaulting to 1000 [ 177.627843][ T5454] lo speed is unknown, defaulting to 1000 [ 177.732852][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 177.819690][ T4228] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.881688][ T5461] loop2: detected capacity change from 0 to 256 [ 177.890973][ T5069] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 177.899346][ T5069] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 177.962913][ T5069] usb 5-1: config 0 has no interface number 0 [ 177.969428][ T5069] usb 5-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.039467][ T5069] usb 5-1: config 0 interface 66 has no altsetting 0 [ 178.076182][ T5069] usb 5-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 180.666454][ T5069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.719110][ T5069] usb 5-1: config 0 descriptor?? [ 180.787766][ T5464] device syzkaller1 entered promiscuous mode [ 180.794249][ T5069] usb 5-1: can't set config #0, error -71 [ 180.865438][ T5069] usb 5-1: USB disconnect, device number 9 [ 180.910445][ T5465] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.249666][ T4280] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.489683][ T4280] usb 5-1: Using ep0 maxpacket: 16 [ 184.609798][ T4280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.609814][ T4280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.774908][ T4280] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.774928][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.774938][ T4280] usb 5-1: Product: syz [ 184.774946][ T4280] usb 5-1: Manufacturer: syz [ 184.774954][ T4280] usb 5-1: SerialNumber: syz [ 185.089828][ T4280] usb 5-1: 0:2 : does not exist [ 185.143555][ T4280] usb 5-1: USB disconnect, device number 10 [ 185.331217][ T5523] loop1: detected capacity change from 0 to 256 [ 187.667533][ T5523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 187.789781][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.197737][ T5530] syz.4.373 uses obsolete (PF_INET,SOCK_PACKET) [ 189.839970][ T5566] loop2: detected capacity change from 0 to 256 [ 190.019644][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.965639][ T5566] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 193.141031][ T7] usb 5-1: device not accepting address 11, error -71 [ 193.493512][ T5577] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.965065][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.378583][ T5069] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.412352][ T5602] loop3: detected capacity change from 0 to 256 [ 196.689945][ T5069] usb 3-1: Using ep0 maxpacket: 16 [ 197.650493][ T5602] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 197.662964][ T5069] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.054128][ T5069] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.154883][ T5069] usb 3-1: string descriptor 0 read error: -71 [ 198.187093][ T5069] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.247905][ T5069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.335993][ T5069] usb 3-1: can't set config #1, error -71 [ 198.513402][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 198.601583][ T5069] usb 3-1: USB disconnect, device number 5 [ 198.955160][ T5626] trusted_key: encrypted_key: insufficient parameters specified [ 199.321375][ T5629] device syzkaller0 entered promiscuous mode [ 199.521786][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 199.662975][ T5643] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.189734][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.459782][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 201.610409][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.649774][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.656040][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.665630][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.674096][ T7] usb 1-1: Product: syz [ 202.678305][ T7] usb 1-1: Manufacturer: syz [ 202.683375][ T7] usb 1-1: SerialNumber: syz [ 203.004397][ T5677] trusted_key: encrypted_key: insufficient parameters specified [ 203.759868][ T7] usb 1-1: 0:2 : does not exist [ 203.779992][ T4227] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.808190][ T7] usb 1-1: USB disconnect, device number 9 [ 203.850413][ T5681] device syzkaller0 entered promiscuous mode [ 204.104146][ T5687] ptrace attach of ""[5688] was attempted by "./syz-executor exec"[5687] [ 204.104417][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.204866][ T4227] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 204.316743][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 205.351892][ T21] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 205.379738][ T4227] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 205.501111][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.519749][ T4227] usb 5-1: Product: syz [ 205.523961][ T4227] usb 5-1: Manufacturer: syz [ 205.528613][ T4227] usb 5-1: SerialNumber: syz [ 206.328963][ T5704] only policy match revision 0 supported [ 206.328983][ T5704] unable to load match [ 206.907151][ T4227] usb 5-1: config 0 descriptor?? [ 206.946388][ T4227] usb 5-1: can't set config #0, error -71 [ 206.976981][ T4227] usb 5-1: USB disconnect, device number 13 [ 207.021844][ T21] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 207.047846][ T21] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 207.060449][ T21] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 207.086937][ T21] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 207.207143][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.221634][ T5716] device syzkaller0 entered promiscuous mode [ 207.249768][ T21] usb 2-1: can't set config #32, error -71 [ 207.260899][ T21] usb 2-1: USB disconnect, device number 8 [ 207.319801][ T5721] trusted_key: encrypted_key: insufficient parameters specified [ 207.985895][ T4297] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.112155][ T5726] lo speed is unknown, defaulting to 1000 [ 208.146474][ T5726] lo speed is unknown, defaulting to 1000 [ 208.319675][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 209.316925][ T4297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.329603][ T4297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.379348][ T5740] autofs4:pid:5740:autofs_fill_super: called with bogus options [ 209.499872][ T4297] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.545894][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.586440][ T4297] usb 3-1: Product: syz [ 209.597865][ T4297] usb 3-1: Manufacturer: syz [ 209.608285][ T4297] usb 3-1: SerialNumber: syz [ 209.879648][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.940499][ T5750] device syzkaller0 entered promiscuous mode [ 209.961142][ T4297] usb 3-1: 0:2 : does not exist [ 210.036932][ T4297] usb 3-1: USB disconnect, device number 6 [ 210.149787][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 210.454381][ T5758] trusted_key: encrypted_key: insufficient parameters specified [ 211.123358][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.135972][ T21] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 211.197973][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.289758][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.298772][ T21] usb 2-1: Product: syz [ 211.362209][ T21] usb 2-1: Manufacturer: syz [ 211.517599][ T21] usb 2-1: SerialNumber: syz [ 211.530399][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 212.265647][ T21] usb 2-1: config 0 descriptor?? [ 212.405993][ T21] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 212.418311][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 212.440300][ T5769] device team_slave_0 entered promiscuous mode [ 212.441843][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.446942][ T5769] device team_slave_1 entered promiscuous mode [ 212.480004][ T5769] device macsec1 entered promiscuous mode [ 212.490941][ T21] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 212.509344][ T21] usb 2-1: media controller created [ 212.515741][ T5769] device team0 entered promiscuous mode [ 212.528420][ T5769] team0: Device macsec1 is already an upper device of the team interface [ 212.589874][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.623034][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.641556][ T23] usb 4-1: config 0 has no interfaces? [ 212.835870][ T21] usb 2-1: selecting invalid altsetting 7 [ 212.864967][ T21] cxusb: set interface failed [ 212.886798][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 212.908630][ T5769] device team0 left promiscuous mode [ 212.914541][ T23] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 212.927454][ T5769] device team_slave_0 left promiscuous mode [ 212.933510][ T5769] device team_slave_1 left promiscuous mode [ 212.946929][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 212.991186][ T21] DVB: Unable to find symbol lgdt330x_attach() [ 213.003712][ T23] usb 4-1: Product: syz [ 213.009327][ T21] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 213.032294][ T23] usb 4-1: Manufacturer: syz [ 213.051017][ T23] usb 4-1: SerialNumber: syz [ 213.069151][ T23] usb 4-1: config 0 descriptor?? [ 213.260111][ T23] usb 4-1: can't set config #0, error -71 [ 213.273877][ T23] usb 4-1: USB disconnect, device number 7 [ 213.952306][ T21] rc_core: IR keymap rc-dvico-portable not found [ 213.958676][ T21] Registered IR keymap rc-empty [ 213.980397][ T21] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 213.983631][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 213.998041][ T21] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 214.147385][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 214.236969][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 214.842815][ T21] usb 2-1: USB disconnect, device number 9 [ 214.854237][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 215.165418][ T5794] trusted_key: encrypted_key: insufficient parameters specified [ 215.512460][ T21] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 216.379719][ T4297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.401617][ T5816] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 216.437461][ T5816] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 216.729874][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 216.759755][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 216.799994][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 216.834690][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 216.845167][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 216.861472][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 216.889818][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 216.902511][ T4297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.924404][ T4297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.942405][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 216.966764][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 216.982341][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.996444][ T5827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.160086][ T4297] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.180634][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.198277][ T4297] usb 3-1: Product: syz [ 217.220934][ T4297] usb 3-1: Manufacturer: syz [ 217.234151][ T4297] usb 3-1: SerialNumber: syz [ 217.246943][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.258005][ T21] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.266994][ T21] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 217.276795][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.326276][ T21] usb 1-1: config 0 descriptor?? [ 218.402140][ T21] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 218.430476][ T21] dvb-usb: bulk message failed: -22 (3/0) [ 218.639928][ T21] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 218.659890][ T4297] usb 3-1: 0:2 : does not exist [ 218.659919][ T21] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 218.731201][ T5843] trusted_key: encrypted_key: insufficient parameters specified [ 218.806861][ T21] usb 1-1: media controller created [ 218.813695][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.862604][ T4297] usb 3-1: USB disconnect, device number 7 [ 219.095411][ T21] dvb-usb: bulk message failed: -22 (6/0) [ 219.110781][ T21] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 219.167189][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 219.479316][ T21] dvb-usb: schedule remote query interval to 150 msecs. [ 219.487381][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.524847][ T21] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 219.565469][ T21] usb 1-1: USB disconnect, device number 10 [ 219.576344][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 219.689981][ T21] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 219.986408][ T5873] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 220.280018][ T5873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.179688][ T4297] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.389619][ T5892] trusted_key: encrypted_key: insufficient parameters specified [ 222.169679][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 222.319807][ T4297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.364378][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.579866][ T4297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.623257][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.682584][ T4297] usb 5-1: Product: syz [ 222.727565][ T4297] usb 5-1: Manufacturer: syz [ 222.778935][ T4297] usb 5-1: SerialNumber: syz [ 223.169809][ T4297] usb 5-1: 0:2 : does not exist [ 223.223851][ T4297] usb 5-1: USB disconnect, device number 14 [ 223.423644][ T5902] ODEBUG: Out of memory. ODEBUG disabled [ 223.500489][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.646145][ T5917] mmap: syz.2.491 (5917) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 223.659659][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.940252][ T4230] usb 4-1: device descriptor read/64, error -71 [ 224.229671][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.449651][ T4230] usb 4-1: device descriptor read/64, error -71 [ 224.569961][ T4230] usb usb4-port1: attempt power cycle [ 224.795253][ T5931] device syzkaller0 entered promiscuous mode [ 224.979686][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.090471][ T4230] usb 4-1: device descriptor read/8, error -71 [ 225.115029][ T5938] device syzkaller0 entered promiscuous mode [ 225.359707][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.476009][ T4230] usb 4-1: device descriptor read/8, error -71 [ 225.602088][ T4230] usb usb4-port1: unable to enumerate USB device [ 226.635446][ T5902] Set syz1 is full, maxelem 65536 reached [ 227.439661][ T4230] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 228.706144][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.720396][ T4230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 228.735373][ T4230] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 228.763974][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.791522][ T4230] usb 2-1: config 0 descriptor?? [ 228.842321][ T4230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 228.852407][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 228.872707][ T4230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 228.901674][ T4230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 228.916105][ T4230] usb 2-1: media controller created [ 228.947938][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.970282][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 228.979265][ T4230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 229.042912][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 229.049774][ T4234] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.076095][ T4230] dvb-usb: schedule remote query interval to 150 msecs. [ 229.084560][ T4230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 229.096753][ T4230] usb 2-1: USB disconnect, device number 10 [ 229.159694][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 229.192239][ T4230] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 229.429710][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 229.440693][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.449499][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 229.459633][ T4234] usb 1-1: config 0 has no interfaces? [ 229.708122][ T4234] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 229.717322][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 229.729680][ T4234] usb 1-1: Product: syz [ 229.733878][ T4234] usb 1-1: Manufacturer: syz [ 229.738632][ T4234] usb 1-1: SerialNumber: syz [ 229.746498][ T4234] usb 1-1: config 0 descriptor?? [ 229.759871][ T7] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 229.853549][ T6008] loop1: detected capacity change from 0 to 256 [ 230.273251][ T6008] exfat: Bad value for 'uid' [ 231.177198][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.185425][ T7] usb 5-1: Product: syz [ 231.186844][ T5767] usb 1-1: USB disconnect, device number 11 [ 231.189631][ T7] usb 5-1: Manufacturer: syz [ 231.189651][ T7] usb 5-1: SerialNumber: syz [ 231.191503][ T7] usb 5-1: config 0 descriptor?? [ 231.388640][ T6020] device syzkaller0 entered promiscuous mode [ 232.649772][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 232.660829][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.909286][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 232.918362][ T7] usb 5-1: media controller created [ 232.935862][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.999738][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.069358][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 233.085959][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 233.098863][ T7] usb 5-1: USB disconnect, device number 15 [ 233.201017][ T6048] loop0: detected capacity change from 0 to 256 [ 233.543018][ T6048] exfat: Bad value for 'uid' [ 234.459342][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 234.825916][ T6061] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 234.949236][ T6061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.349713][ T4297] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.435455][ T26] audit: type=1326 audit(1773344109.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 235.622757][ T26] audit: type=1326 audit(1773344109.879:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 235.659654][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 235.684642][ T26] audit: type=1326 audit(1773344109.879:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 235.756096][ T26] audit: type=1326 audit(1773344109.879:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e3a41c007 code=0x7ffc0000 [ 235.831148][ T4297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.831481][ T26] audit: type=1326 audit(1773344109.879:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 235.874498][ T4297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.904340][ T26] audit: type=1326 audit(1773344109.879:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 235.958463][ T26] audit: type=1326 audit(1773344109.879:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 236.083980][ T26] audit: type=1326 audit(1773344109.879:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 236.186057][ T4297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.199846][ T26] audit: type=1326 audit(1773344109.879:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 236.232983][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.276793][ T4297] usb 1-1: Product: syz [ 236.276801][ T26] audit: type=1326 audit(1773344109.879:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.4.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x7ffc0000 [ 236.353821][ T4297] usb 1-1: Manufacturer: syz [ 236.367616][ T4297] usb 1-1: SerialNumber: syz [ 236.711410][ T4297] usb 1-1: 0:2 : does not exist [ 236.876267][ T4297] usb 1-1: USB disconnect, device number 12 [ 237.813229][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.104084][ T6105] loop0: detected capacity change from 0 to 256 [ 240.678894][ T6105] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 242.218803][ T6134] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 242.293436][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.316083][ T6134] bond0: (slave team0): Enslaving as an active interface with an up link [ 243.594399][ T6155] loop0: detected capacity change from 0 to 256 [ 243.751786][ T6155] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 244.616356][ T6176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.819699][ T5767] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.190061][ T5767] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 245.205495][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.314078][ T5767] usb 4-1: config 0 descriptor?? [ 245.664975][ T6200] input: syz1 as /devices/virtual/input/input12 [ 245.966172][ T6205] kernel profiling enabled (shift: 6) [ 246.046133][ T6202] input: syz0 as /devices/virtual/input/input13 [ 246.194943][ T6210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.217584][ T6210] bond0: (slave team0): Releasing backup interface [ 246.247507][ T6210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.274444][ T6210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.289343][ T6210] device bridge_slave_0 left promiscuous mode [ 246.299413][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.333071][ T6210] device bridge_slave_1 left promiscuous mode [ 246.352911][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.368088][ T6210] bond0: (slave bond_slave_0): Releasing backup interface [ 246.405167][ T6210] bond0: (slave bond_slave_1): Releasing backup interface [ 246.419804][ T4228] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.508046][ T6210] team0: Port device team_slave_0 removed [ 246.538041][ T6210] team0: Port device team_slave_1 removed [ 246.585986][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.594516][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.604806][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.612697][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.689738][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 246.809964][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 246.834567][ T4228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 247.039988][ T4228] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 247.056466][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.084898][ T4228] usb 2-1: Product: syz [ 247.095023][ T4228] usb 2-1: Manufacturer: syz [ 247.115272][ T4228] usb 2-1: SerialNumber: syz [ 247.146459][ T4228] usb 2-1: config 0 descriptor?? [ 247.194351][ T4192] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 247.326407][ T4228] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 247.447635][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.489603][ T4192] usb 3-1: Using ep0 maxpacket: 16 [ 247.549339][ T6238] loop0: detected capacity change from 0 to 256 [ 249.219712][ T5767] usb 4-1: Cannot set autoneg [ 249.224762][ T5767] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 249.266232][ T6238] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 249.855444][ T5767] usb 4-1: USB disconnect, device number 12 [ 249.879793][ T4192] usb 3-1: config 0 has no interfaces? [ 249.904592][ T21] usb 2-1: USB disconnect, device number 11 [ 249.989328][ T4192] usb 3-1: string descriptor 0 read error: -71 [ 250.001190][ T4192] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.031018][ T4192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.067503][ T4192] usb 3-1: config 0 descriptor?? [ 250.109692][ T4192] usb 3-1: can't set config #0, error -71 [ 250.122625][ T4192] usb 3-1: USB disconnect, device number 8 [ 250.125864][ T6249] hub 9-0:1.0: USB hub found [ 250.170564][ T6249] hub 9-0:1.0: 1 port detected [ 250.279611][ T4228] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.373741][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.411332][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.430184][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.451296][ T6261] device bridge_slave_0 left promiscuous mode [ 250.459171][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.471027][ T6261] device bridge_slave_1 left promiscuous mode [ 250.480243][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.493408][ T6261] bond0: (slave bond_slave_0): Releasing backup interface [ 250.529977][ T6261] bond0: (slave bond_slave_1): Releasing backup interface [ 250.577511][ T6261] team0: Port device team_slave_0 removed [ 250.597639][ T6261] team0: Port device team_slave_1 removed [ 250.618505][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.627448][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.638349][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.648302][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.699803][ T4228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.715660][ T4228] usb 5-1: config 0 has no interface number 0 [ 250.763684][ T4192] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.775235][ T6266] netlink: 165 bytes leftover after parsing attributes in process `syz.1.595'. [ 251.009869][ T4228] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.019396][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.034250][ T4228] usb 5-1: Product: syz [ 251.038550][ T4228] usb 5-1: Manufacturer: syz [ 251.043501][ T4192] usb 3-1: Using ep0 maxpacket: 8 [ 251.050182][ T4228] usb 5-1: SerialNumber: syz [ 251.144816][ T6273] loop1: detected capacity change from 0 to 256 [ 251.287612][ T6273] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 252.211980][ T4228] usb 5-1: config 0 descriptor?? [ 252.358466][ T4192] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.369348][ T4192] usb 3-1: config 179 has no interface number 0 [ 252.375914][ T4192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 252.389669][ T4192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 252.401061][ T4192] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.415243][ T4192] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.428927][ T4192] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 252.438681][ T4192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.469885][ T4228] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 252.488873][ T4228] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.506261][ T4192] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 252.538309][ T4228] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 252.551429][ T4228] usb 5-1: media controller created [ 252.587793][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.683560][ T6309] trusted_key: encrypted_key: insufficient parameters specified [ 254.074124][ T4228] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 254.085581][ T6242] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 254.134033][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 254.182087][ T4228] usb 5-1: USB disconnect, device number 16 [ 254.232096][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 254.255595][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 254.271816][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 254.290958][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 254.309159][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 254.506393][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 254.518037][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.526630][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.641084][ T6325] loop3: detected capacity change from 0 to 256 [ 256.772770][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.830967][ T6325] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 258.360581][ T5767] usb 3-1: USB disconnect, device number 9 [ 258.607917][ T5767] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 259.140969][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.189984][ T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.201587][ T6344] trusted_key: encrypted_key: insufficient parameters specified [ 260.246740][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 261.079976][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.098665][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 261.116240][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.300303][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.311426][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.697100][ T23] usb 4-1: config 0 descriptor?? [ 262.864498][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 262.980247][ T4234] usb 4-1: USB disconnect, device number 13 [ 263.009690][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.218669][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.237480][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.245618][ T21] usb 5-1: Product: syz [ 263.251213][ T21] usb 5-1: Manufacturer: syz [ 263.257687][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.627551][ T21] usb 5-1: can't set config #1, error -71 [ 263.668995][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.902969][ T21] usb 5-1: USB disconnect, device number 17 [ 263.942187][ T6374] device bridge_slave_0 left promiscuous mode [ 264.010293][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.227823][ T6374] device bridge_slave_1 left promiscuous mode [ 264.246017][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.321682][ T6393] trusted_key: encrypted_key: insufficient parameters specified [ 264.646185][ T6374] bond0: (slave bond_slave_0): Releasing backup interface [ 264.740834][ T6374] bond0: (slave bond_slave_1): Releasing backup interface [ 264.978698][ T6374] team0: Port device team_slave_0 removed [ 265.346519][ T6405] loop0: detected capacity change from 0 to 512 [ 265.502178][ T6374] team0: Port device team_slave_1 removed [ 265.517124][ T6405] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 265.524507][ T6405] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.598152][ T6405] EXT4-fs (loop0): orphan cleanup on readonly fs [ 265.617405][ T6405] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 265.637973][ T6405] EXT4-fs (loop0): Remounting filesystem read-only [ 265.645516][ T6405] __quota_error: 27 callbacks suppressed [ 265.645532][ T6405] Quota error (device loop0): write_blk: dquota write failed [ 265.658767][ T6405] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 265.668709][ T6405] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.639: Failed to acquire dquot type 0 [ 265.684354][ T6405] EXT4-fs (loop0): Remounting filesystem read-only [ 265.691348][ T6405] EXT4-fs (loop0): 1 truncate cleaned up [ 265.709457][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.895162][ T6405] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 265.969066][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.118993][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.140338][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.336085][ T6385] gre0: MTU too low for tipc bearer [ 266.361607][ T6385] tipc: Enabling of bearer rejected, failed to enable media [ 266.403179][ T6380] device syzkaller0 entered promiscuous mode [ 268.921623][ T6435] trusted_key: encrypted_key: insufficient parameters specified [ 270.249649][ T4227] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.526809][ T6445] loop3: detected capacity change from 0 to 512 [ 273.098995][ T6445] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 273.106460][ T6445] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.220371][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 273.387287][ T6445] EXT4-fs: failed to create workqueue [ 273.392792][ T6445] EXT4-fs (loop3): mount failed [ 273.459985][ T4227] usb 1-1: device descriptor read/all, error -71 [ 274.655729][ T6466] device syzkaller0 entered promiscuous mode [ 275.302479][ T6470] trusted_key: encrypted_key: insufficient parameters specified [ 277.103039][ T6493] loop4: detected capacity change from 0 to 512 [ 278.998062][ T6491] input: syz1 as /devices/virtual/input/input15 [ 280.326395][ T6522] loop3: detected capacity change from 0 to 256 [ 281.294781][ T6522] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 284.690393][ T6551] device syzkaller0 entered promiscuous mode [ 285.100759][ T6558] trusted_key: encrypted_key: insufficient parameters specified [ 286.146402][ T6572] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 286.384407][ T6578] loop2: detected capacity change from 0 to 256 [ 286.622040][ T6578] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 289.020358][ T6600] device syzkaller0 entered promiscuous mode [ 289.091572][ T6607] trusted_key: encrypted_key: insufficient parameters specified [ 290.677146][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 291.228535][ T6632] loop4: detected capacity change from 0 to 256 [ 291.437593][ T6632] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 293.161662][ T6645] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 293.603901][ T6651] trusted_key: encrypted_key: insufficient parameters specified [ 295.348398][ T6658] device syzkaller0 entered promiscuous mode [ 295.724759][ T4229] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 296.027329][ T6674] loop2: detected capacity change from 0 to 256 [ 296.069797][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 296.190160][ T4229] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 296.209851][ T4229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 296.266799][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.319894][ T4229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 297.229645][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 297.268063][ T4229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.336757][ T4229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.405772][ T6674] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 298.039684][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.416234][ T4229] usb 2-1: usb_control_msg returned -32 [ 298.422531][ T4229] usbtmc 2-1:16.0: can't read capabilities [ 298.459779][ T4226] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 298.713199][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 299.019862][ T4226] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 299.034635][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.169685][ T4226] usb 1-1: Product: syz [ 299.184113][ T4226] usb 1-1: config 0 descriptor?? [ 299.199788][ T4226] usb 1-1: can't set config #0, error -71 [ 299.292973][ T4226] usb 1-1: USB disconnect, device number 15 [ 299.794011][ T4226] usb 2-1: USB disconnect, device number 12 [ 299.996013][ T6699] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.266812][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 300.306649][ T6707] device dummy0 entered promiscuous mode [ 300.314352][ T6707] device macvlan2 entered promiscuous mode [ 300.344760][ T6707] device dummy0 left promiscuous mode [ 300.419997][ T4226] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 300.827603][ T6727] ptrace attach of "./syz-executor exec"[6728] was attempted by "./syz-executor exec"[6727] [ 300.869879][ T4226] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.893185][ T4226] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.934428][ T6722] lo speed is unknown, defaulting to 1000 [ 300.947672][ T6722] lo speed is unknown, defaulting to 1000 [ 300.955741][ T4226] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.995714][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.309889][ T4226] usb 2-1: GET_CAPABILITIES returned 0 [ 301.317965][ T4226] usbtmc 2-1:16.0: can't read capabilities [ 301.543670][ T4226] usb 2-1: USB disconnect, device number 13 [ 304.053440][ T6765] trusted_key: encrypted_key: insufficient parameters specified [ 304.365122][ T6769] device syzkaller0 entered promiscuous mode [ 305.089059][ T6782] lo speed is unknown, defaulting to 1000 [ 305.121577][ T6782] lo speed is unknown, defaulting to 1000 [ 305.365296][ T6789] process 'syz.3.754' launched './file0' with NULL argv: empty string added [ 305.462664][ T6790] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 305.620557][ T4196] Bluetooth: Wrong link type (-22) [ 307.859641][ T4227] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 308.149725][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 308.279757][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.295350][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.459803][ T4227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.479373][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.497207][ T4227] usb 3-1: Product: syz [ 309.501719][ T4227] usb 3-1: Manufacturer: syz [ 309.529688][ T4227] usb 3-1: SerialNumber: syz [ 309.598629][ T6856] fuse: Bad value for 'fd' [ 309.899802][ T4227] usb 3-1: 0:2 : does not exist [ 309.948878][ T4227] usb 3-1: USB disconnect, device number 10 [ 310.231764][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.483053][ T6863] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 310.663539][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 313.958811][ T6917] trusted_key: encrypted_key: insufficient parameters specified [ 316.823301][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.089279][ T6885] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.115257][ T6885] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.129872][ T6885] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.160063][ T6885] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.328357][ T5069] lo speed is unknown, defaulting to 1000 [ 317.335457][ T6913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.792'. [ 317.372943][ T5767] lo speed is unknown, defaulting to 1000 [ 317.820988][ T6947] autofs4:pid:6947:autofs_fill_super: called with bogus options [ 317.848797][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.865382][ T6951] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 318.004398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 318.560212][ T26] audit: type=1326 audit(1773344192.999:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.639650][ T26] audit: type=1326 audit(1773344193.029:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.662592][ T26] audit: type=1326 audit(1773344193.029:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.685825][ T26] audit: type=1326 audit(1773344193.029:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.786695][ T26] audit: type=1326 audit(1773344193.029:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.874526][ T26] audit: type=1326 audit(1773344193.029:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 318.938767][ T26] audit: type=1326 audit(1773344193.029:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 319.081862][ T26] audit: type=1326 audit(1773344193.029:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 319.104431][ T26] audit: type=1326 audit(1773344193.029:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 319.133618][ T26] audit: type=1326 audit(1773344193.029:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eef09c799 code=0x7ffc0000 [ 321.282008][ T6978] device syzkaller0 entered promiscuous mode [ 321.462869][ T6982] device syzkaller0 entered promiscuous mode [ 321.479569][ T5767] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 321.875884][ T5767] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 321.909731][ T5767] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.089824][ T5767] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.100066][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 322.113630][ T6996] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 322.128592][ T5767] usb 5-1: Product: syz [ 322.133480][ T5767] usb 5-1: Manufacturer: syz [ 322.138105][ T5767] usb 5-1: SerialNumber: syz [ 322.363625][ T7001] trusted_key: encrypted_key: insufficient parameters specified [ 323.027512][ T5767] usb 5-1: config 0 descriptor?? [ 323.069827][ T6976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 323.122789][ T5767] usb 5-1: selecting invalid altsetting 0 [ 323.331487][ T6976] usb 5-1: selecting invalid altsetting 0 [ 323.367048][ T6976] usb 5-1: 0:0: usb_set_interface failed (-22) [ 323.403707][ T6975] usb 5-1: selecting invalid altsetting 0 [ 323.433081][ T6975] usb 5-1: 0:0: usb_set_interface failed (-22) [ 323.482747][ T6975] usb 5-1: selecting invalid altsetting 0 [ 323.489563][ T4234] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 323.515340][ T6975] usb 5-1: 0:0: usb_set_interface failed (-22) [ 323.550558][ T6975] usb 5-1: selecting invalid altsetting 0 [ 323.573157][ T6975] usb 5-1: 0:0: usb_set_interface failed (-22) [ 323.604869][ T1108] usb 5-1: USB disconnect, device number 18 [ 323.759603][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 323.879764][ T4234] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 323.908599][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.918950][ T4234] usb 4-1: config 0 has no interface number 0 [ 323.925269][ T4234] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.119766][ T4234] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 324.128957][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.179542][ T4234] usb 4-1: Product: syz [ 324.183863][ T4234] usb 4-1: Manufacturer: syz [ 324.209606][ T4234] usb 4-1: SerialNumber: syz [ 324.231455][ T4234] usb 4-1: config 0 descriptor?? [ 324.301370][ T4234] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input17 [ 324.321987][ T7025] device syzkaller0 entered promiscuous mode [ 324.356082][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 324.406021][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 324.623745][ T4234] usb 4-1: USB disconnect, device number 14 [ 324.716808][ T7039] trusted_key: encrypted_key: insufficient parameters specified [ 326.441882][ T7062] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 326.610034][ T7066] 9pnet_virtio: no channels available for device syz [ 326.967368][ T7070] batman_adv: batadv0: Adding interface: dummy0 [ 326.986683][ T7070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.012001][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.080742][ T7070] batman_adv: batadv0: Interface activated: dummy0 [ 327.127124][ T7074] batadv0: mtu less than device minimum [ 327.135441][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.147326][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.158675][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.170103][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.182041][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.193705][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.205060][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.217914][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.229389][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.405328][ T7079] trusted_key: encrypted_key: insufficient parameters specified [ 330.355201][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 330.355217][ T26] audit: type=1326 audit(1773344204.789:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a41a799 code=0x0 [ 330.473289][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.489411][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.515980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.656972][ T4196] block nbd4: Receive control failed (result -32) [ 331.664180][ T4188] block nbd4: Receive control failed (result -32) [ 332.452674][ T7100] block nbd4: shutting down sockets [ 332.688873][ T7126] device syzkaller0 entered promiscuous mode [ 332.981392][ T7131] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 333.215573][ T7131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.850353][ T7153] tipc: Started in network mode [ 334.855326][ T7153] tipc: Node identity 7ea39955fe74, cluster identity 4711 [ 334.890216][ T7153] tipc: Enabled bearer , priority 0 [ 334.945991][ T7153] device syzkaller0 entered promiscuous mode [ 334.984742][ T7153] tipc: Resetting bearer [ 335.062552][ T7152] tipc: Resetting bearer [ 335.291547][ T7152] tipc: Disabling bearer [ 335.435857][ T7168] netlink: 'syz.3.869': attribute type 10 has an invalid length. [ 336.032441][ T7168] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 336.346988][ T7174] device syzkaller0 entered promiscuous mode [ 337.439041][ T5767] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 337.709625][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 337.909846][ T5767] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.920735][ T5767] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.159714][ T5767] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.334116][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.343197][ T5767] usb 1-1: Product: syz [ 338.357788][ T5767] usb 1-1: Manufacturer: syz [ 338.362543][ T5767] usb 1-1: SerialNumber: syz [ 338.810819][ T7207] net_ratelimit: 10 callbacks suppressed [ 338.810838][ T7207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.053621][ T5767] usb 1-1: 0:2 : does not exist [ 339.068844][ T7213] loop3: detected capacity change from 0 to 512 [ 339.939773][ T5767] usb 1-1: USB disconnect, device number 16 [ 340.042690][ T7213] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 340.050037][ T7213] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.088750][ T7213] EXT4-fs (loop3): orphan cleanup on readonly fs [ 341.098723][ T7213] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 341.116237][ T7213] EXT4-fs (loop3): Remounting filesystem read-only [ 341.122980][ T7213] Quota error (device loop3): write_blk: dquota write failed [ 341.130566][ T7213] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 341.140507][ T7213] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.881: Failed to acquire dquot type 0 [ 341.153489][ T7213] EXT4-fs (loop3): Remounting filesystem read-only [ 341.160548][ T7213] EXT4-fs (loop3): 1 truncate cleaned up [ 341.498622][ T7213] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 342.072681][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.320771][ T7242] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2628165002 (84101280064 ns) > initial count (14428759840 ns). Using initial count to start timer. [ 342.355269][ T7242] ------------[ cut here ]------------ [ 342.369109][ T7242] WARNING: CPU: 0 PID: 7242 at arch/x86/kvm/x86.c:10372 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 342.389014][ T7242] Modules linked in: [ 342.393552][ T7242] CPU: 0 PID: 7242 Comm: syz.2.892 Not tainted syzkaller #0 [ 342.408215][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.423805][ T7242] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 342.424128][ T1108] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 342.431324][ T7242] Code: e8 b1 f1 ae 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 96 f1 ae 00 e9 c8 ed ff ff e8 5c e6 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 342.458544][ T7242] RSP: 0018:ffffc9000336fc30 EFLAGS: 00010283 [ 342.464716][ T7242] RAX: ffffffff810f3ab4 RBX: ffff88805fd74000 RCX: 0000000000080000 [ 342.472977][ T7242] RDX: ffffc900057b9000 RSI: 00000000000003f6 RDI: 00000000000003f7 [ 342.481516][ T7242] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 342.494122][ T7242] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff88807b574001 [ 342.502422][ T7242] R13: 1ffff1100bfae81e R14: ffff88805fd740f0 R15: ffff88807b574000 [ 342.510632][ T7242] FS: 00007f65936b66c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 342.706517][ T7242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.904986][ T7242] CR2: 00007ff516235e80 CR3: 000000004b207000 CR4: 00000000003526e0 [ 343.313879][ T7242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.339095][ T7242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.356558][ T7242] Call Trace: [ 343.360113][ T7242] [ 343.363731][ T7242] ? __lock_acquire+0x7d10/0x7d10 [ 343.368817][ T7242] kvm_vcpu_ioctl+0x8f7/0xc10 [ 343.379844][ T7242] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 343.385557][ T7242] ? bpf_lsm_file_ioctl+0x5/0x10 [ 343.399616][ T7242] ? security_file_ioctl+0x7c/0xa0 [ 343.404868][ T7242] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 343.420269][ T7242] __se_sys_ioctl+0xfa/0x170 [ 343.424913][ T7242] do_syscall_64+0x4c/0xa0 [ 343.429359][ T7242] ? clear_bhb_loop+0x30/0x80 [ 343.449604][ T7242] ? clear_bhb_loop+0x30/0x80 [ 343.454344][ T7242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.469602][ T7242] RIP: 0033:0x7f659545c799 [ 343.474074][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.519581][ T7242] RSP: 002b:00007f65936b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.528058][ T7242] RAX: ffffffffffffffda RBX: 00007f65956d5fa0 RCX: 00007f659545c799 [ 343.549613][ T7242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 343.557637][ T7242] RBP: 00007f65954f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 343.589597][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.597644][ T7242] R13: 00007f65956d6038 R14: 00007f65956d5fa0 R15: 00007fffce46fb98 [ 343.619600][ T7242] [ 343.622674][ T7242] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.630140][ T7242] CPU: 1 PID: 7242 Comm: syz.2.892 Not tainted syzkaller #0 [ 343.637530][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.647737][ T7242] Call Trace: [ 343.651031][ T7242] [ 343.654414][ T7242] dump_stack_lvl+0x188/0x250 [ 343.659124][ T7242] ? show_regs_print_info+0x20/0x20 [ 343.664474][ T7242] ? load_image+0x400/0x400 [ 343.669034][ T7242] panic+0x2e5/0x810 [ 343.672973][ T7242] ? bpf_jit_dump+0xd0/0xd0 [ 343.674895][ T1108] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 343.677610][ T7242] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 343.677638][ T7242] __warn+0x248/0x2b0 [ 343.695441][ T7242] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 343.696992][ T1108] usb 1-1: config 1 has no interface number 0 [ 343.701285][ T7242] report_bug+0x1b7/0x2e0 [ 343.701322][ T7242] handle_bug+0x3a/0x70 [ 343.701342][ T7242] exc_invalid_op+0x16/0x40 [ 343.701361][ T7242] asm_exc_invalid_op+0x16/0x20 [ 343.701383][ T7242] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 343.726319][ T1108] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 343.731852][ T7242] Code: e8 b1 f1 ae 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 96 f1 ae 00 e9 c8 ed ff ff e8 5c e6 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 343.731875][ T7242] RSP: 0018:ffffc9000336fc30 EFLAGS: 00010283 [ 343.731898][ T7242] RAX: ffffffff810f3ab4 RBX: ffff88805fd74000 RCX: 0000000000080000 [ 343.731914][ T7242] RDX: ffffc900057b9000 RSI: 00000000000003f6 RDI: 00000000000003f7 [ 343.731928][ T7242] RBP: 0000000000000000 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 343.731943][ T7242] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff88807b574001 [ 343.731957][ T7242] R13: 1ffff1100bfae81e R14: ffff88805fd740f0 R15: ffff88807b574000 [ 343.731978][ T7242] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 343.732015][ T7242] ? __lock_acquire+0x7d10/0x7d10 [ 343.732056][ T7242] kvm_vcpu_ioctl+0x8f7/0xc10 [ 343.770042][ T1108] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x24, skipping [ 343.775703][ T7242] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 343.775759][ T7242] ? bpf_lsm_file_ioctl+0x5/0x10 [ 343.809831][ T1108] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.813946][ T7242] ? security_file_ioctl+0x7c/0xa0 [ 343.813981][ T7242] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 343.866555][ T7242] __se_sys_ioctl+0xfa/0x170 [ 343.871133][ T7242] do_syscall_64+0x4c/0xa0 [ 343.875647][ T7242] ? clear_bhb_loop+0x30/0x80 [ 343.880463][ T7242] ? clear_bhb_loop+0x30/0x80 [ 343.885137][ T7242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.891016][ T7242] RIP: 0033:0x7f659545c799 [ 343.895451][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.915135][ T7242] RSP: 002b:00007f65936b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.923662][ T7242] RAX: ffffffffffffffda RBX: 00007f65956d5fa0 RCX: 00007f659545c799 [ 343.931632][ T7242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 343.939755][ T7242] RBP: 00007f65954f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 343.947708][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.955759][ T7242] R13: 00007f65956d6038 R14: 00007f65956d5fa0 R15: 00007fffce46fb98 [ 343.963730][ T7242] [ 343.967051][ T7242] Kernel Offset: disabled [ 343.971584][ T7242] Rebooting in 86400 seconds..