last executing test programs: 11.312006529s ago: executing program 2 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x4, 0xb47e, 0xa, 0x12, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) 11.296941179s ago: executing program 0 (id=284): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) 10.960362568s ago: executing program 4 (id=285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) sendto$inet(r0, &(0x7f0000000280)="eb2ec6", 0x3, 0x24040000, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x620000, 0x0) 10.699153844s ago: executing program 2 (id=286): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x4000000) 9.372271677s ago: executing program 2 (id=289): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd000000001a00000000ff0200000000000000000d0098000000007f00000000000000000000000100"/66], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40402) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdir(0x0, 0x13b) 8.515122068s ago: executing program 2 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 8.513986098s ago: executing program 0 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf, [{0x0, 0x80000000, 0x0, 0x0, 0x2, 0xea4a}]}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) 7.130936553s ago: executing program 4 (id=294): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.110568263s ago: executing program 2 (id=295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket$unix(0x1, 0x1, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) 7.086155014s ago: executing program 0 (id=296): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 6.337674223s ago: executing program 2 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "7c379b1a50101fc6"}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRES16, @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff10e8adc4, 0x0, 0x2, 0x3, 0xf409, 0x0, 0x0, 0x2}}, 0x50) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pwritev2(r1, 0x0, 0x0, 0x2, 0x8, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x87, 0x5, 0x1, {{0x6, 0x4, 0x1, 0x1b, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end]}}}}}) 5.951183932s ago: executing program 0 (id=301): pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffff9, 0x6) 5.792433186s ago: executing program 1 (id=303): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 5.792164836s ago: executing program 3 (id=304): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 5.64190566s ago: executing program 1 (id=305): pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.546739962s ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000005a80)={&(0x7f00000058c0)=[&(0x7f0000000300)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000540)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f00000005c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000000600)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f0000000640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f00000006c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000000700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000000740)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000002}}, &(0x7f0000000780)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000007c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000001a80)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4, 0xfffffffffffffff9}, {0x4, 0xf1}, {0x80}, {0x5, 0xb53}, {0x7fffffffffffffff, 0xc9d}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0xff}, {0x8, 0x9}, {0x9, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0xea8, 0x3}, {0x7fffffff}, {0x0, 0x81}, {0x4, 0x3}, {0x3}, {0x3, 0xfffffffeffffffff}, {0x1, 0xfffffffffffffffa}, {0x8, 0xc12}, {0x0, 0x4}, {0x9, 0x380000000000000}, {0x7fffffff, 0x7fffffffffffffff}, {0x6, 0x2}, {0x0, 0x4}, {0x800, 0xfffffffffffffff6}, {0xe, 0x7}, {0x0, 0xff}, {0xbdc}, {0xd57f, 0x7}, {0xffffffffffffffff, 0x5000000000000}, {0xfffffffffffffffa, 0xffffffffffff9e4f}, {0x95, 0x351e}, {0xfffffffffffffff9, 0x5}, {0x3}, {0x8, 0x2}, {0x26, 0x4}, {0x9, 0x32c}, {0x4, 0x8}, {0x12, 0xcdc9}, {0xff, 0x5}, {0x8, 0x84}, {0x1, 0x9}, {0x1000, 0xd378}, {0x3e7c, 0x9}, {0x9, 0xd445}, {0x100000001, 0x6}, {0x5, 0x6}, {0x2b0, 0x6c}, {0x6, 0x6}, {0xa, 0x200}, {0xbf, 0xb6bb}, {0x4bbf, 0xc13e}, {0xb09, 0x2}, {0x4, 0x10000}, {0x5, 0x7}, {0x891, 0xd}, {0x4, 0x6}, {0xd, 0xf8f}, {0x853, 0x8}, {0x2, 0x400}, {0x0, 0x5}, {0x2, 0x4}, {0x7fffffffffffffff, 0x9}, {0x1}, {0x100000000, 0x2d2}, {0x10000, 0xc10000000}, {0x9, 0x2}, {0xff, 0x40}, {0x3, 0x6}, {0x5, 0xa1b}, {0x0, 0xff}, {0x2, 0x4}, {0x2, 0x2}, {0x40, 0x9}, {0x5, 0x7}, {0x6, 0x7fff}, {0x0, 0x1c}, {0x2, 0xa}, {0x5, 0x93}, {0x5, 0x80000000}, {0x1, 0xd5a}, {0x9}, {0x0, 0x5}, {0x8, 0x571e}, {0x6c9, 0xd9}, {0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x80}, {0xdbd4, 0x10}, {0x7fffffff, 0x78}, {0x7, 0x7fffffffffffffff}, {0x0, 0xde3}, {0x7fffffff, 0xd}, {0x100, 0x5}, {0x5, 0x7}, {0x9, 0x7932}, {0xcc, 0x3}, {0x4, 0x9}, {0x6529387b, 0x6}, {0x18, 0xcb3}, {0x2, 0xb}, {0x6, 0x9}, {0x1, 0x7}, {0x200, 0x1}, {0x1, 0x41e}, {0x7fffffffffffffff, 0x1}, {0x5, 0x4}, {0x78fe000000000000, 0x2}, {0x6, 0x6}, {0x8640, 0x3}, {0xfffffffffffffffb, 0x19}, {0x9, 0x10}, {0xe9e9, 0x8}, {0x6d1, 0x3ff}, {0x7fff, 0x7fff}, {0xffffffffffff0001}, {0xf1b, 0x4}, {0x4f, 0x7f}, {0x7ff, 0x380}, {0x7f, 0x6}, {0x5, 0x100000000}, {0xbc9, 0x3ff}, {0x9, 0x8836}, {0x1000, 0x898}, {0x81, 0x4}, {0x4b, 0x300}, {0xfffffffffffffffa, 0x5}, {0x8000000000000000, 0x9}, {0x6401}, {0xb}, {0x7, 0x2f91}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0xa8}, {0x8000, 0xf}, {0xf40a, 0xa97}, {0x8, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5dc, 0x3}, {0x9, 0xf8}, {0x8000000000000000, 0x6}, {0x72, 0x14df43ec}, {0x5, 0x1}, {0x6, 0x9}, {0x142, 0xf064}, {0x4, 0xfffffffffffffff7}, {0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0xad}, {0x7, 0xad3}, {0x4, 0xffffffff}, {0x40, 0xffff}, {0x8, 0x1}, {0x7, 0x400}, {0x3, 0x3636d9fd}, {0x0, 0x2}, {0x36, 0x6}, {0x5, 0x100}, {0x1, 0x6}, {0x800}, {0x2, 0xed}, {0x7, 0x7}, {0x2, 0x10000}, {0x200, 0x6}, {0x0, 0x2}, {0x4, 0x7fffffffffffffff}, {0x101, 0xc6c}, {0x10, 0x9}, {0x2, 0x80000001}, {0x6, 0xf}, {0xffffffffffffffff, 0x6000}, {0x95, 0x9}, {0x719, 0xffffffffffffff01}, {0x7, 0x6}, {0x3ff, 0x4}, {0x3, 0xc}, {0x100000000, 0x3ff}, {0x10, 0x3}, {0x2, 0x7}, {0xf, 0x4}, {0x9, 0x80000001}, {0x0, 0x7}, {0x2, 0x9}, {0x12, 0x3}, {0x10001, 0x8000000000000001}, {0x800, 0x7}, {0x276, 0x1}, {0x9, 0x3}, {0x2, 0x4}, {0x0, 0x10000}, {0x8001, 0x7}, {0xc, 0x8000}, {0x2, 0x3}, {0x96, 0x9}, {0x0, 0x1}, {0x4, 0xdb4}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x5ed}, {0x6, 0x9}, {0x2, 0x1000}, {0x6, 0x73e}, {0x80, 0x4}, {0x8, 0xfffffffffffffffc}, {0x7, 0x40c0}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffffa, 0x2f8}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x6}, {0x3e17, 0x7}, {0x0, 0x6}, {0x0, 0x26d}, {0x7fffffff, 0x8000000000000001}, {}, {0x3, 0x5}, {0xe, 0x7fffffff}, {0x8, 0x41}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0xcd3c}, {0x1, 0x5}, {0xe934, 0x6}, {0x401, 0x200}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x49e}, {0x5, 0x950}, {0x7f, 0xffffffffffffffff}, {0x6, 0x1}, {0x1, 0x9}, {0x7fffffff, 0x1000}, {0x8, 0xfffffffffffffff1}, {0x7, 0xff}, {0x101, 0x13}, {0x200000, 0x280000}, {0x8000, 0x1000}, {0x8, 0x3}, {0x9, 0x27b}, {0x5, 0x2}, {0x3, 0x6}, {0xe, 0x10}, {0xa, 0x9}, {0x1, 0x2}]}, &(0x7f0000002ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f0000002c40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8001}, &(0x7f0000002dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002e00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000002}}, &(0x7f0000002e40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000002e80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2b}, &(0x7f0000003040)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0xb7}, {0x100, 0x9}, {0x1, 0xca5}, {0x2, 0x7ff}, {0x3ff, 0x8}, {0x5, 0xfff}, {0x100000000, 0xfffffffffffffffc}, {0x8, 0x8}, {0x0, 0x6}, {0x6, 0xfffffffffffeffff}, {0x8}, {0x2, 0x10000000}, {0x3, 0x100}, {0x95b7, 0x2}, {0x7ff, 0x5}, {0x0, 0x3}, {0x7, 0xb}, {0x6, 0xecf}, {0x1a00000000000000, 0x6}, {0x48, 0x6}, {0x4, 0x6}, {0x2, 0x39}, {0x283f, 0x6}, {0x8000000000000001, 0x3}, {0x81, 0x6}, {0x1, 0x9}, {0x6, 0x101}, {0xd1, 0x7}, {0x4c0, 0x3}, {0x1, 0x2}, {0x3ff, 0x1}, {0x7ff, 0x1}, {0x1, 0x3}, {0x200, 0x2}, {0x1ff, 0x100000001}, {0x7, 0x8}, {0x3, 0x9}, {0x9, 0x1}, {0x8001, 0xd3}, {0x47, 0xc}, {0x8, 0x3}, {0x4, 0x7fff}, {0x4, 0xfffffffffffffff8}, {0xc, 0x20}, {0x8}, {0x8}, {0x800, 0x6}, {0x3, 0x6}, {0x800, 0x2}, {0xa197, 0x4}, {0x5, 0xffffffff}, {0xffffffff}, {0x180a, 0xfffffffffffffff8}, {0x8}, {0x6, 0x7}, {0x9, 0x5}, {0x4}, {0x6, 0x101}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x4e8f}, {0x3ff, 0x81}, {0x9, 0x8}, {0xf, 0x6489}, {0xffffffff, 0x3}, {0x2557, 0x4}, {0x40000, 0x6}, {0x7, 0xe3c}, {0x0, 0xb}, {0x2, 0x400000000000}, {0x9, 0x2a7}, {0x4, 0x9}, {0x8001, 0x401}, {0x3, 0x1ff}, {0x100000000}, {0x0, 0x9ec}, {0x9, 0xa73}, {0x2c, 0x8000000000000000}, {0xa5f}, {0x8, 0x1}, {0x7fff, 0x1}, {0x10, 0x2}, {0x3, 0xffffffffffffffc0}, {0xb8b, 0x8}, {0x2, 0x252}, {0x100000000, 0x5}, {0x401, 0x7}, {0x4, 0x6}, {0x3, 0x86d}, {0x7fffffff, 0x1000}, {0x9e, 0xffffffffffffffff}, {0x100000001, 0xfff}, {0x800}, {0x4, 0x749}, {0x4, 0x1}, {0xe, 0x3ff}, {0x94c, 0x2}, {0x5, 0xc17}, {0x8}, {0x2, 0x9}, {0x4, 0x5}, {0xe0fa, 0xe}, {0x4, 0x8001}, {0x7, 0xa54}, {0x9c, 0x9}, {0xfffffffffffffffe, 0x1}, {0x8, 0x723}, {0xc6, 0x9}, {0x2c4d, 0x80}, {0x6, 0xecd8}, {0x2, 0x2}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0xa23, 0x1}, {0x10}, {0xffff, 0x8a46}, {0x5, 0x9}, {0xbe, 0x3}, {0x8001, 0x100000000}, {0x7, 0x8}, {0x3a5a, 0x3}, {0x7b5, 0x14425282}, {0x800, 0x9}, {0x2, 0x5}, {0x3, 0x7fff}, {0x8, 0x89}, {0x100, 0x4945}, {0x121faa6e, 0x81}, {0x9aa7, 0x5}, {0xfffffffffffffffa, 0x81}, {0x8000000, 0x731d}, {0xda82, 0x401}, {0x6, 0x6}, {0x4, 0x1}, {0x8, 0x9}, {0x100, 0x99}, {0x2, 0x80}, {0xe, 0x6}, {0x0, 0x4}, {0x1000, 0x200}, {0x9, 0x5}, {0x0, 0x5}, {0x5, 0x400}, {0xfffffffffffffffc, 0xd}, {0x9, 0x6}, {0xffffffffffffffff, 0x6}, {0x6}, {0x9, 0xb}, {0x5, 0x6}, {0x4, 0x2d687c65}, {0xfffffffffffffffc, 0x3}, {0x2, 0x7}, {0x49a, 0x9}, {0x8, 0xc1e}, {0x0, 0x5}, {0x5, 0x3ff}, {0xfffffffffffffeff, 0x7fffffffffffffff}, {0x0, 0x8}, {0x7, 0xf73e}, {0xbf, 0xa7d}, {0x9, 0x9}, {0x101, 0x9}, {0x6, 0x4}, {0x8, 0xd}, {0x2}, {0x2}, {0x800, 0x1}, {0x2b3, 0x3}, {0x7, 0x299}, {0x8, 0x5}, {0x8, 0x423}, {0xff, 0x4}, {0x1ff, 0x9e}, {0x5, 0x4}, {0x8, 0x6}, {0x5}, {0x8, 0x9}, {0x4f, 0x6}, {0x5000000000}, {0x9, 0xfffffffffffffffb}, {0x38d908e5, 0x5}, {0x100, 0x8}, {0x3, 0x3ff}, {0x8001, 0x8}, {0x40, 0x9}, {0x6d2a, 0xfffffffffffffff7}, {0x9, 0x100000001}, {0x1, 0x85}, {0x4, 0xe2f}, {0x8000000000000000, 0x10}, {0x8, 0x4}, {0x3, 0xf}, {0x0, 0x4}, {0x10001, 0xfb}, {0x7}, {0x3, 0x8}, {0x9, 0x40}, {0x4, 0x5}, {0x7, 0x400}, {0x7, 0xfff}, {0x10001, 0x4}, {0x7d91, 0xffffffff7fffffff}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0xb14, 0xfffffffffffffffe}, {0x5, 0x8}, {0x7, 0x9}, {0x9, 0x9f}, {0x10000, 0xffffffff}, {0x80000000, 0x101}, {0x0, 0x10001}, {0xdbac, 0x8}, {0xffffffffffffff76, 0x100000000}, {0x6, 0x25d}, {0xfff, 0x8001}, {0xcdc, 0x3}, {0x6, 0x9}, {0x6144, 0xc}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x98}, {0x9, 0xab1}, {0x7fffffffffffffff, 0x9}, {0x9}, {0xc0a, 0x4}, {0x0, 0x2}, {0xff, 0x23520000}, {0x1, 0xb2}, {0x4}, {0x0, 0x7}, {0x7f, 0x2aa}, {0x1, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x40000000000}, {0x3, 0x6}, {0x9, 0xb}, {0x9, 0x9}, {0xfff, 0x8}, {0x80000001}, {0x100, 0x5}, {0x9, 0x401}, {0x7fffffff, 0xdee1}, {0xfffffffffffffff7, 0x3}, {0x1, 0x6}, {0xfffffffffffffff8, 0x2}, {0xfbef, 0x1}, {0xff, 0x7}, {0x2, 0x6}, {0x8000000000000000, 0x7fffffff}, {0x8, 0xd}]}, &(0x7f0000004100)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004140)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000041c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004240)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000042c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x20000000}}, &(0x7f0000004300)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f00000044c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000004500)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004540)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004580)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, 0x0, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x4, 0x2}, {0x800, 0x9}, {0xb97, 0x1}, {0x5, 0x8}, {0x6, 0x101}, {0x8}, {0x486, 0x3ff}, {0x6, 0x9}, {0x6}, {0x1, 0x9}, {0x8, 0xd81c}, {0x7, 0x2}, {0x9, 0x3ff}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x72}, {0x100, 0x7}, {0xa9d8, 0xa800000}, {0x8, 0x7a}, {0x4, 0x10000}, {0x8, 0x92c}, {0x80000001, 0x2}, {0x8, 0x9}, {0x0, 0x5d0}, {0x9, 0x8000}, {0x6, 0x5}, {0x7fff, 0x6}, {0x4, 0xfffffffffffffffd}, {0x2, 0x6}, {0x0, 0x81}, {0x7, 0x7}, {0x0, 0x8189}, {0x3, 0x4}, {0x31e4, 0x8}, {0x5, 0x3}, {0x7f, 0x6}, {0x3, 0x5}, {0x7, 0xe4}, {0xffffffffffff0001, 0x101}, {0x5, 0x81}, {0x80000000, 0x8f}, {0x4, 0x9}, {0x80000000, 0x5}, {0x722, 0x6}, {0x400, 0xa}, {0x698, 0x79}, {0x4000000, 0x3}, {0xffffffff00000000, 0x7f}, {0x4, 0x7}, {0xd, 0x400}, {0x7, 0x33b7}, {0x800}, {0x64c2, 0x200}, {0x3, 0x6}, {0x80000000, 0x8}, {0x3, 0x6}, {0x1, 0xf}, {0xc361, 0x2ceb}, {0x8}, {0x7}, {0x4, 0x7}, {0xf, 0x5}, {0x4, 0x100000001}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1ff}, {0x8000000000000001, 0x9b6}, {0x2, 0x10001}, {0x100, 0x3}, {0x2, 0x8d78}, {0x6, 0xfffffffffffffa8d}, {0x80000001}, {0x7, 0x6}, {0x10, 0x3f}, {0x7, 0xd}, {0xa2d6, 0x6}, {0x8, 0x24000}, {0x1, 0x8}, {0x9, 0x80}, {0x7fffffff, 0xe0}, {0x8, 0x4}, {0x9, 0x4}, {0x8001, 0x400}, {0x9af2, 0x6}, {0x7fffffff, 0x6}, {0x81, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x8b, 0xe}, {0x7, 0x33}, {0x8, 0xcf}, {0x153, 0xc81}, {0x3, 0x80000001}, {0x8000, 0x1}, {0xf, 0x1}, {0x100000000, 0x5}, {0x4, 0x8001}, {0x1, 0x1}, {0x406d, 0x9}, {0x8000000000000000, 0x8}, {0x4, 0x5}, {0x6, 0x3e}, {0x2, 0x6}, {0xfffffffffffffffe, 0x7ff}, {0x6, 0x100000000}, {0x4, 0x1}, {0x9, 0x4}, {0x3, 0xb}, {0x40, 0xc9}, {0x3, 0x80000001}, {0x0, 0x8}, {0x8, 0x2f4}, {0x7, 0x5}, {0xffffffffffffff00, 0xa8f}, {0x1, 0x7}, {0x8, 0x10}, {0xb04, 0x22}, {0x2d2edf24, 0x62}, {0xfffffffffffffff6, 0xb86}, {0x3, 0x6}, {0x81, 0x7}, {0x6, 0x1}, {0x733f, 0x7583}, {0x8001, 0x8}, {0x2, 0xb}, {0x7, 0x8}, {0xb0}, {0x8000, 0xff}, {0x7, 0x5}, {0x8, 0x6}, {0x401, 0xe}, {0x1ff, 0x9}, {0x1, 0x800}, {0x9, 0x6}, {0x9, 0xc5f}, {0x200, 0x6}, {0x5, 0x4}, {0x7a, 0x24f96762}, {0x3, 0x7}, {0xa, 0xfffffffffffffffd}, {0x7435, 0x7}, {0x100000001, 0xffff}, {0x7, 0x4c}, {0x128f, 0x100000000}, {0xffffffff80000001, 0x1}, {0x9, 0x8000000000000001}, {0xfffffffffffff801, 0xd}, {0xe399, 0x86}, {0xa2, 0x8001}, {0x5, 0x1}, {0x7fff, 0xffff}, {0x8, 0x1}, {0xd, 0x5}, {0x6, 0x2}, {0x8, 0x87}, {0x5, 0x1}, {0x80000000, 0x2}, {0x0, 0x800000000000000}, {0x3, 0x27e}, {0x8, 0xfffffffffffffaa1}, {0x101, 0x80}, {0x6, 0x7ff}, {0x452, 0x1}, {0x1ff0, 0x4}, {0x2, 0x3895e5c1}, {0x3, 0x2}, {0x5, 0x8}, {0x9, 0x2}, {0x6, 0x7d0}, {0x4c, 0x9d}, {0xfffffc0000000000, 0x5}, {0x1, 0x168459ed}, {0x9d5, 0x3}, {0xcc2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x2f, 0x1}, {0x9, 0x3ff}, {0x4, 0x2c2f}, {0x0, 0xfffffffffffffeff}, {0x5, 0x100000001}, {0xffff, 0x2}, {0x8, 0x607eca40}, {0x0, 0x8000000000000001}, {0x0, 0x8001}, {0x7fffffffffffffff, 0x8}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x7}, {0xd8ec, 0x8}, {0x9a0, 0xc1a}, {0x10001, 0x8}, {0xcc, 0xc8}, {0x2, 0x4}, {0xd, 0x9}, {0x1ff, 0xfffffffffffffffc}, {0x6, 0x3}, {0xec8, 0x6}, {0x6, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x9, 0x158}, {0xfffffffffffffffc, 0x3}, {0x8000, 0x9a41}, {0x0, 0x1}, {0x8, 0xb}, {0x1, 0x6}, {0x1b, 0x4}, {0xfffffffffffffffc, 0x6}, {0x1ff}, {0x1, 0x9}, {0x6, 0x200}, {0x2, 0x8}, {0x3, 0x401}, {0x3, 0x8}, {0x8, 0x889}, {0x9, 0xf}, {0x4, 0x20}, {0xc, 0x1400}, {0x48000000000000, 0x9}, {0x9, 0x3}, {0xb, 0x9}, {0x4, 0x70}, {0x7, 0x21e9}, {0xccb, 0x6}, {0x7, 0x6}, {0x89, 0x4}, {0x38e, 0x10}, {0x3, 0x4}, {0x0, 0x31}, {0xcd13, 0x3}, {0x5, 0x7fffffff}, {0xffffffff, 0x2}, {0x2, 0x9}, {0x84a3, 0x15b}, {0x3, 0x88e}, {0x10, 0x7}, {0x2, 0xf}, {0x0, 0x4}, {0x1, 0xc}, {0xfff, 0x7}, {0x5, 0x4475}, {0x0, 0x81}, {0x80000000, 0xff}, {0x17}, {0x7}, {0x9, 0x2}, {0x683e0b48, 0x7}, {0x36, 0x1ff}, {0x1, 0x7}, {0x7, 0x3}, {0x9, 0x4}]}, &(0x7f0000005640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x5}, &(0x7f0000005780)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000100)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000005800)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000005880)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="71ca305b6d785977913e0000417b88594afcdf08f6dee6186e5f1ff38731631801ab95ca3995a4a5289c2aab986a64ffe8944bfb00f3fdeb28ed6a5128b0fe6252d89067c3d498a339d2e0f693775f4b", 0x50}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000401000005000000221c17e87e5acf444a482d6f015b5d0f6abe5bae259bcbbb584400000c00000014000000030000"], 0x74}, 0x4000) fsmount(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 4.355218932s ago: executing program 3 (id=307): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) 4.00177187s ago: executing program 1 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 3.956385402s ago: executing program 3 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x6, &(0x7f0000003f00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) ioperm(0x7ff, 0x8, 0x4) request_key(0x0, 0x0, &(0x7f0000000000)='/\r\x00\xfaF\x1c\xdd\xd4\x84r\v{\xaez\xf5\x9e\xab16\xee\xddg\b\x00\x00\x00\x00\x00\x00\x00\xa7~', 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc1d03000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) prctl$PR_SET_PTRACER(0x59616d61, r1) 2.82266563s ago: executing program 3 (id=310): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) 2.82237717s ago: executing program 4 (id=311): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x4c, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040040) 2.743433642s ago: executing program 1 (id=312): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0214200011000000004000000000000003000500000000"], 0x88}}, 0x20000000) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.640863724s ago: executing program 1 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) sendfile(r3, r3, 0x0, 0x10001) 2.511106498s ago: executing program 4 (id=314): r0 = fsopen(&(0x7f0000000200)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000740)=""/138, 0x8a, 0x0) r6 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700"], 0x48) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100001200010000000000000000007368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000008000100c50000000800010001800000080001997dbebc0c893cc200ff01000008000100080000000800010040e9000007000100020000000800010008000000"], 0x118}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') pread64(r12, &(0x7f0000000600)=""/92, 0x5c, 0xf7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x18, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 2.270704233s ago: executing program 4 (id=315): r0 = socket(0x40000000015, 0x5, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.708520058s ago: executing program 3 (id=316): pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setuid(0xee01) flistxattr(r2, 0x0, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.708097418s ago: executing program 3 (id=317): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$nl_generic(0x11, 0x3, 0x10) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) clock_adjtime(0x5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181000, 0x64) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.671781539s ago: executing program 0 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 1.526785692s ago: executing program 4 (id=319): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780), &(0x7f0000000280), &(0x7f0000000140)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 51.810901][ T4174] cgroup: Unknown subsys name 'net' [ 51.940488][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.138993][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.941444][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 54.972031][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 55.004168][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 55.033813][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 55.086140][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 55.164513][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.171663][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.180229][ T4198] device bridge_slave_0 entered promiscuous mode [ 55.201378][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.208638][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.216514][ T4194] device bridge_slave_0 entered promiscuous mode [ 55.229089][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.236460][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.244796][ T4198] device bridge_slave_1 entered promiscuous mode [ 55.252484][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.259542][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.267766][ T4187] device bridge_slave_0 entered promiscuous mode [ 55.274997][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.283145][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.290869][ T4196] device bridge_slave_0 entered promiscuous mode [ 55.298307][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.305508][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.313736][ T4194] device bridge_slave_1 entered promiscuous mode [ 55.335634][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.342805][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.350555][ T4187] device bridge_slave_1 entered promiscuous mode [ 55.357841][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.365104][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.372907][ T4196] device bridge_slave_1 entered promiscuous mode [ 55.409027][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.439307][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.450084][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.471697][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.479114][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.486945][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.496080][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.512936][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.524039][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.533323][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.540377][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.548793][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.557889][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.569202][ T4198] team0: Port device team_slave_0 added [ 55.582025][ T4198] team0: Port device team_slave_1 added [ 55.589868][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.641656][ T4187] team0: Port device team_slave_0 added [ 55.657756][ T4187] team0: Port device team_slave_1 added [ 55.670953][ T4194] team0: Port device team_slave_0 added [ 55.678876][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.697547][ T4196] team0: Port device team_slave_0 added [ 55.705516][ T4196] team0: Port device team_slave_1 added [ 55.711873][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.719278][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.745385][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.757849][ T4194] team0: Port device team_slave_1 added [ 55.765634][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.785886][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.793225][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.819409][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.846349][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.853436][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.879978][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.898082][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.905602][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.931761][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.968894][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.976123][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.002553][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.015444][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.023124][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.049304][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.062505][ T4186] team0: Port device team_slave_0 added [ 56.069248][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.076907][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.103672][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.131444][ T4186] team0: Port device team_slave_1 added [ 56.137930][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.145059][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.171277][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.195977][ T4198] device hsr_slave_0 entered promiscuous mode [ 56.202919][ T4198] device hsr_slave_1 entered promiscuous mode [ 56.224229][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.230952][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.237894][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.245970][ T4187] Cannot create hsr debugfs directory [ 56.286551][ T4194] device hsr_slave_0 entered promiscuous mode [ 56.293633][ T4194] device hsr_slave_1 entered promiscuous mode [ 56.300772][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.308509][ T4194] Cannot create hsr debugfs directory [ 56.325484][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.332511][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.358552][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.381131][ T4196] device hsr_slave_0 entered promiscuous mode [ 56.387965][ T4196] device hsr_slave_1 entered promiscuous mode [ 56.394503][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.402046][ T4196] Cannot create hsr debugfs directory [ 56.408244][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.415261][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.441553][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.583193][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 56.593715][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.600372][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.607079][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.614797][ T4186] Cannot create hsr debugfs directory [ 56.662442][ T2301] Bluetooth: hci4: command 0x0409 tx timeout [ 56.668561][ T2301] Bluetooth: hci2: command 0x0409 tx timeout [ 56.672420][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 56.675168][ T2301] Bluetooth: hci1: command 0x0409 tx timeout [ 56.781048][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.797236][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.824888][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.839775][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.890534][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.901700][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.920966][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.940674][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.008569][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.039432][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.046898][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.067661][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.076910][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.094874][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.108373][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.135297][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.145507][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.154457][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.168059][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.179467][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.217412][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.227653][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.238094][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.247489][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.254881][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.267034][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.274971][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.289785][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.300168][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.309359][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.319201][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.326344][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.343029][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.350264][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.365916][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.389509][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.397872][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.407406][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.417672][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.429186][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.437949][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.446767][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.453891][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.470089][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.482845][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.493933][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.524460][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.533741][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.543679][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.556048][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.563230][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.571260][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.581230][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.589917][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.598980][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.607954][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.616914][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.626343][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.635042][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.644336][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.653095][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.661258][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.670158][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.683006][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.710762][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.723652][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.736465][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.744919][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.754763][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.764854][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.773902][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.784524][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.850345][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.881899][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.911122][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.928031][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.942213][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.950230][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.959353][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.969023][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.977228][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.986974][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.000748][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.008087][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.017189][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.029327][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.050899][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.076110][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.084142][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.093824][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.104397][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.112947][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.120017][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.128049][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.138065][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.163620][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.172584][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.180893][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.187984][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.200654][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.209547][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.218035][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.225138][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.233728][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.242642][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.250973][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.258151][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.266938][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.277378][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.285106][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.292859][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.300900][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.322883][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.337694][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.353743][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.361229][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.370618][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.381194][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.390492][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.397614][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.406878][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.417008][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.426235][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.434892][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.443786][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.452979][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.461479][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.470332][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.479790][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.505545][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.521376][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.533055][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.549617][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.558651][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.568316][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.577336][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.587049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.597928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.607863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.616912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.633676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.647672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.662756][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 58.675267][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.686587][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.700656][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.713458][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.723247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.733756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.742942][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 58.747098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.749126][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 58.760623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.763627][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 58.772043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.777415][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 58.791432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.799955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.808715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.817234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.826148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.839199][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.883146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.891486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.916018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.929766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.959265][ T4194] device veth0_vlan entered promiscuous mode [ 58.980473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.996353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.027930][ T4194] device veth1_vlan entered promiscuous mode [ 59.044479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.055540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.072842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.090650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.099440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.128773][ T4187] device veth0_vlan entered promiscuous mode [ 59.167862][ T4187] device veth1_vlan entered promiscuous mode [ 59.180374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.189014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.207056][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.231995][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.250761][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.259355][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.268592][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.277886][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.287441][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.295198][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.311807][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.321782][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.335976][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.346265][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.358407][ T4194] device veth0_macvtap entered promiscuous mode [ 59.369820][ T4194] device veth1_macvtap entered promiscuous mode [ 59.379417][ T4187] device veth0_macvtap entered promiscuous mode [ 59.395981][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.406029][ T4187] device veth1_macvtap entered promiscuous mode [ 59.436245][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.445194][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.454207][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.463894][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.471824][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.480907][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.492839][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.507349][ T4196] device veth0_vlan entered promiscuous mode [ 59.514912][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.523488][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.531492][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.541067][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.550131][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.563017][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.571840][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.582672][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.595491][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.615495][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.637573][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.649655][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.661860][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.675052][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.684316][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.693408][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.701930][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.711050][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.720156][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.729343][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.738768][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.747780][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.756454][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.767453][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.776103][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.787644][ T4196] device veth1_vlan entered promiscuous mode [ 59.804810][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.814001][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.824901][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.833737][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.846786][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.856032][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.866149][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.875189][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.896464][ T4186] device veth0_vlan entered promiscuous mode [ 59.950204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.959141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.967905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.977536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.986600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.995607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.004537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.012590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.024892][ T4198] device veth0_vlan entered promiscuous mode [ 60.037967][ T4186] device veth1_vlan entered promiscuous mode [ 60.047633][ T4196] device veth0_macvtap entered promiscuous mode [ 60.093423][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.101484][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.118004][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.138025][ T4196] device veth1_macvtap entered promiscuous mode [ 60.176232][ T4198] device veth1_vlan entered promiscuous mode [ 60.183552][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.191550][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.218421][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.226794][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.235971][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.241815][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.253151][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.261780][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.290272][ T4186] device veth0_macvtap entered promiscuous mode [ 60.302617][ T4186] device veth1_macvtap entered promiscuous mode [ 60.309766][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.320593][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.330873][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.345177][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.356491][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.380034][ T4198] device veth0_macvtap entered promiscuous mode [ 60.390301][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.398958][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.407697][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.416829][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.426150][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.434967][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.446605][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.457242][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.457266][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.475792][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.481963][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.494244][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.505222][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.516783][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.530242][ T4198] device veth1_macvtap entered promiscuous mode [ 60.538416][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.547706][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.557297][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.567891][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.580338][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.590229][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.591650][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.600296][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.612648][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.616152][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.635922][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.646492][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.658361][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.669670][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.680551][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.691073][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.702887][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.717891][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.728502][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.739034][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.750388][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 60.756454][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.766630][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.777140][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.787218][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.798083][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.810255][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.819637][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.827410][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 60.834323][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.848263][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.853537][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 60.860111][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.871649][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 60.871664][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.893835][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.905113][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.934332][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 60.937461][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.951030][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.961180][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.972030][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.985546][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.026423][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.046502][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.066504][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.084181][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.094097][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.107470][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.119322][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.130234][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.140267][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.151997][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165732][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.176559][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.186759][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.197445][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.208812][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.267131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.283611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.309198][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.328337][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.342980][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.351866][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.371844][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.573405][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.580239][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.593329][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.599957][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.649611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.657630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.670093][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.678130][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.678148][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.678984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.703924][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.716915][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.725554][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.736674][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.744961][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.777339][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.786072][ T4229] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 61.794443][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.803986][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.030009][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.152767][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 62.172209][ T4229] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 62.181840][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.206266][ T4229] usb 5-1: config 0 descriptor?? [ 62.252131][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.492564][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 62.612248][ T4228] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.645503][ T4228] usb 4-1: config 0 has no interface number 0 [ 62.665294][ T4228] usb 4-1: config 0 interface 184 has no altsetting 0 [ 62.687262][ T4229] betop 0003:11C2:2208.0001: item fetching failed at offset 0/6 [ 62.700759][ T4229] betop 0003:11C2:2208.0001: parse failed [ 62.723149][ T4229] betop: probe of 0003:11C2:2208.0001 failed with error -22 [ 62.823640][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 62.852270][ T4228] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 62.873477][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.900274][ T21] usb 5-1: USB disconnect, device number 2 [ 62.903974][ T4228] usb 4-1: Product: syz [ 62.910335][ T4228] usb 4-1: Manufacturer: syz [ 62.925957][ T4228] usb 4-1: SerialNumber: syz [ 62.934134][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 62.950805][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 62.958072][ T4228] usb 4-1: config 0 descriptor?? [ 62.984023][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 62.990062][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 63.013330][ T4228] smsc75xx v1.0.0 [ 63.192240][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.598608][ T4231] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 63.607347][ T4231] usb 2-1: config 1 has no interface number 0 [ 63.618954][ T4231] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 63.653818][ T4231] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 63.689452][ T4231] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 63.907536][ T4231] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 63.929904][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.938790][ T4231] usb 2-1: Product: syz [ 63.952587][ T4231] usb 2-1: Manufacturer: syz [ 63.962421][ T4231] usb 2-1: SerialNumber: syz [ 63.992429][ T4309] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.001393][ T4309] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.026230][ T4231] usb 2-1: Expected 3 endpoints, found: 2 [ 64.102495][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 64.108621][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 64.254517][ T4188] usb 2-1: USB disconnect, device number 2 [ 64.356261][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 64.383225][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.425979][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 64.445181][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 64.458799][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 64.471458][ T4228] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 64.487246][ T4228] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 64.509522][ T4228] usb 4-1: USB disconnect, device number 2 [ 64.970333][ T4349] loop4: detected capacity change from 0 to 1024 [ 64.992864][ T4347] overlayfs: invalid origin (0000) [ 65.035460][ T4352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.107713][ T4349] hfsplus: extend alloc file! (16384,256,150995124) [ 65.310593][ T4362] loop3: detected capacity change from 0 to 512 [ 65.523206][ T4362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.539606][ T4362] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.985387][ T4398] 9pnet: p9_errstr2errno: server reported unknown error  [ 65.992816][ T4188] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.055582][ T4405] loop0: detected capacity change from 0 to 512 [ 66.082245][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.095692][ T4405] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.108301][ T4405] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.192283][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 66.198734][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 66.222374][ T4229] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 66.392167][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 66.392278][ T4188] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 66.405592][ T4188] usb 5-1: config 1 has no interface number 0 [ 66.513839][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 66.551414][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.631107][ T4228] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 66.663496][ T4229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.700825][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.718637][ T4229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 66.778009][ T4229] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 66.839112][ T4228] usb 2-1: config 0 descriptor?? [ 66.916694][ T4188] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 66.925764][ T4229] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.926680][ T4188] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 66.946089][ T4188] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 67.103081][ T4229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.117756][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.126674][ T4229] usb 4-1: Product: syz [ 67.131016][ T4229] usb 4-1: Manufacturer: syz [ 67.144849][ T4229] usb 4-1: SerialNumber: syz [ 67.172235][ T4188] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 67.181407][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.182924][ T4400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 67.190226][ T4188] usb 5-1: Product: syz [ 67.201549][ T4188] usb 5-1: Manufacturer: syz [ 67.208494][ T4188] usb 5-1: SerialNumber: syz [ 67.225410][ T4229] cdc_mbim 4-1:1.0: skipping garbage [ 67.242590][ T4373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.249657][ T4373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.273157][ T4188] usb 5-1: Expected 3 endpoints, found: 2 [ 67.279728][ T4420] loop0: detected capacity change from 0 to 512 [ 67.352099][ T4420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.363729][ T4420] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.375114][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x3 [ 67.402303][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x7 [ 67.410808][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x7 [ 67.420121][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.428700][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.436183][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.441929][ T4400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 67.443494][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.457555][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.464955][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.472026][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.482351][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.489378][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.502237][ T4228] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 67.509325][ T4228] lg-g15 0003:046D:C22D.0002: unbalanced collection at end of report description [ 67.546937][ T4228] lg-g15: probe of 0003:046D:C22D.0002 failed with error -22 [ 67.579385][ T4188] usb 5-1: USB disconnect, device number 3 [ 67.598056][ T4228] usb 2-1: USB disconnect, device number 3 [ 67.903205][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.124373][ T4400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 68.272550][ T4188] Bluetooth: hci5: command 0x1009 tx timeout [ 68.325793][ T4441] loop1: detected capacity change from 0 to 512 [ 68.332460][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.332495][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.332517][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 68.332553][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.332576][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.339861][ T21] usb 1-1: config 0 descriptor?? [ 68.382440][ T4229] cdc_mbim 4-1:1.0: bind() failure [ 68.412448][ T4229] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 68.446672][ T4229] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 68.482310][ T4229] usbtest: probe of 4-1:1.1 failed with error -71 [ 68.517820][ T4229] usb 4-1: USB disconnect, device number 3 [ 68.537970][ T4441] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.549417][ T4441] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.243012][ T4427] udc-core: couldn't find an available UDC or it's busy [ 69.250167][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.314456][ T4450] loop3: detected capacity change from 0 to 512 [ 69.327661][ T4427] udc-core: couldn't find an available UDC or it's busy [ 69.335327][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.344151][ T4427] udc-core: couldn't find an available UDC or it's busy [ 69.344959][ T4452] zero sized request [ 69.351208][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.212106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.232110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.242097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.252098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.262098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.272095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.282096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.292096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.302106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.312091][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.695657][ T4450] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.786034][ T4450] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.822288][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 70.828291][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 70.879205][ T21] usb 1-1: USB disconnect, device number 2 [ 70.969918][ T4192] Bluetooth: Wrong link type (-22) [ 71.230189][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238141][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.296077][ T4467] netlink: 168 bytes leftover after parsing attributes in process `syz.0.77'. [ 71.377363][ T4473] loop1: detected capacity change from 0 to 512 [ 71.810544][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.001239][ T4473] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.054833][ T4489] loop4: detected capacity change from 0 to 512 [ 72.234049][ T4489] ======================================================= [ 72.234049][ T4489] WARNING: The mand mount option has been deprecated and [ 72.234049][ T4489] and is ignored by this kernel. Remove the mand [ 72.234049][ T4489] option from the mount to silence this warning. [ 72.234049][ T4489] ======================================================= [ 72.280243][ T4489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.342402][ T4489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 72.360469][ T4489] EXT4-fs (loop4): Remounting filesystem read-only [ 72.367731][ T4489] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.83: invalid indirect mapped block 4278190080 (level 0) [ 72.409186][ T4489] EXT4-fs (loop4): Remounting filesystem read-only [ 72.415995][ T4489] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.83: invalid indirect mapped block 1 (level 1) [ 72.442373][ T4489] EXT4-fs (loop4): Remounting filesystem read-only [ 72.449592][ T4489] EXT4-fs (loop4): 1 truncate cleaned up [ 72.455420][ T4489] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 72.762160][ T4228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.829294][ T4509] loop1: detected capacity change from 0 to 512 [ 72.907109][ T4199] Bluetooth: Wrong link type (-22) [ 73.122584][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.267492][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.442717][ T4513] loop0: detected capacity change from 0 to 512 [ 73.447777][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 73.548473][ T4513] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 73.571464][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.632296][ T4509] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.647527][ T4228] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.675587][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.717793][ T4228] usb 4-1: config 0 descriptor?? [ 73.817463][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 73.839329][ T4513] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.585178][ T4534] udc-core: couldn't find an available UDC or it's busy [ 74.612582][ T4534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.652207][ T4534] udc-core: couldn't find an available UDC or it's busy [ 74.659178][ T4534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.671300][ T4534] udc-core: couldn't find an available UDC or it's busy [ 74.678852][ T4534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.797819][ T4537] loop4: detected capacity change from 0 to 512 [ 74.917908][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.925540][ T4543] loop1: detected capacity change from 0 to 512 [ 74.936112][ T4498] udc-core: couldn't find an available UDC or it's busy [ 74.943309][ T4537] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.989641][ T4498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.055466][ T4498] udc-core: couldn't find an available UDC or it's busy [ 75.116268][ T4498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.128649][ T4543] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 75.265487][ T4543] EXT4-fs (loop1): Remounting filesystem read-only [ 75.296882][ T4543] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.96: invalid indirect mapped block 4278190080 (level 0) [ 75.318219][ T4543] EXT4-fs (loop1): Remounting filesystem read-only [ 75.392928][ T4543] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.96: invalid indirect mapped block 1 (level 1) [ 75.439265][ T4543] EXT4-fs (loop1): Remounting filesystem read-only [ 75.442413][ T4228] usbhid 4-1:0.0: can't add hid device: -71 [ 75.456653][ T4543] EXT4-fs (loop1): 1 truncate cleaned up [ 75.462022][ T4228] usbhid: probe of 4-1:0.0 failed with error -71 [ 75.474035][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 75.480132][ T4551] tipc: Started in network mode [ 75.518810][ T4228] usb 4-1: USB disconnect, device number 4 [ 75.587363][ T4551] tipc: Node identity 7f000001, cluster identity 4711 [ 75.614723][ T4551] tipc: Enabling of bearer rejected, failed to enable media [ 76.023820][ T146] Bluetooth: Wrong link type (-22) [ 76.795913][ T4574] loop4: detected capacity change from 0 to 512 [ 76.852849][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.861802][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.870713][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.880227][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.889149][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.898637][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.907865][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.917657][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.926563][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.936204][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 76.947634][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.957267][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.964856][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.087799][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.137832][ T4574] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.386151][ T4586] loop2: detected capacity change from 0 to 512 [ 78.273423][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.309592][ T4586] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.417178][ T4593] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.687454][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.989980][ T4619] tap0: tun_chr_ioctl cmd 2147767507 [ 79.052199][ T4622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.071990][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.085819][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.882804][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 79.922243][ T4228] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.931441][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.084580][ T4228] usb 5-1: config 0 descriptor?? [ 81.773123][ T13] cfg80211: failed to load regulatory.db [ 81.842242][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 81.922249][ T4228] usbhid 5-1:0.0: can't add hid device: -71 [ 81.928270][ T4228] usbhid: probe of 5-1:0.0 failed with error -71 [ 81.963395][ T4228] usb 5-1: USB disconnect, device number 4 [ 82.272739][ T23] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 82.324443][ T23] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 82.485578][ T23] usb 2-1: config 0 has no interface number 0 [ 82.552902][ T23] usb 2-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 82.687018][ T23] usb 2-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 82.814877][ T4644] autofs4:pid:4644:autofs_fill_super: called with bogus options [ 82.839121][ T23] usb 2-1: config 0 interface 143 has no altsetting 0 [ 82.972260][ T23] usb 2-1: string descriptor 0 read error: -71 [ 82.988411][ T23] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 83.011498][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.099698][ T23] usb 2-1: config 0 descriptor?? [ 83.142546][ T23] usb 2-1: can't set config #0, error -71 [ 83.169278][ T23] usb 2-1: USB disconnect, device number 4 [ 85.375566][ T4678] __nla_validate_parse: 136 callbacks suppressed [ 85.375579][ T4678] netlink: 188 bytes leftover after parsing attributes in process `syz.2.141'. [ 86.018199][ T4695] netlink: 'syz.0.146': attribute type 12 has an invalid length. [ 86.052255][ T4695] netlink: 'syz.0.146': attribute type 29 has an invalid length. [ 86.060216][ T4695] netlink: 148 bytes leftover after parsing attributes in process `syz.0.146'. [ 86.149571][ T4695] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 86.222389][ T4695] netlink: 'syz.0.146': attribute type 2 has an invalid length. [ 86.265281][ T4695] netlink: 7 bytes leftover after parsing attributes in process `syz.0.146'. [ 89.450553][ T4729] netlink: 188 bytes leftover after parsing attributes in process `syz.0.155'. [ 89.746980][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 90.024938][ T4744] loop3: detected capacity change from 0 to 512 [ 90.190570][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.282799][ T4744] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.339988][ T4753] Need at least one configuration in g1. [ 90.363870][ T4753] udc dummy_udc.0: failed to start g1: -22 [ 90.412254][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.783441][ T4228] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 90.849191][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.125767][ T4228] usb 5-1: config 0 descriptor?? [ 92.188047][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.237189][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.306005][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.493975][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.524769][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.565254][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 93.013861][ T4780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.043368][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 93.153915][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 93.191284][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 93.570796][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 93.624316][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 93.715075][ T4791] 9pnet_virtio: no channels available for device syz [ 94.017269][ T26] audit: type=1800 audit(1786125126.110:2): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.172" name="UDC" dev="configfs" ino=34506 res=0 errno=0 [ 94.064904][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.189468][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.197587][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.293451][ T4228] usb 5-1: Cannot set autoneg [ 94.298310][ T4228] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 94.357225][ T4804] loop4: detected capacity change from 0 to 512 [ 94.370584][ T4228] usb 5-1: USB disconnect, device number 5 [ 94.411324][ T4805] loop2: detected capacity change from 0 to 512 [ 95.582239][ T4804] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.635435][ T4805] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.644488][ T4804] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.655851][ T4805] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.960184][ T4839] __nla_validate_parse: 135 callbacks suppressed [ 97.960224][ T4839] netlink: 188 bytes leftover after parsing attributes in process `syz.1.183'. [ 98.662141][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.029598][ T4843] loop0: detected capacity change from 0 to 2048 [ 99.071015][ T4844] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 99.127719][ T4180] loop0: p2 < > p3 < p5 > p4 [ 99.141127][ T4180] loop0: partition table partially beyond EOD, truncated [ 99.148403][ T4180] loop0: p2 start 4278190080 is beyond EOD, truncated [ 99.152346][ T1108] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 99.152376][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.155074][ T4180] loop0: p4 size 8192 extends beyond EOD, truncated [ 99.156220][ T4180] loop0: p5 size 8192 extends beyond EOD, truncated [ 99.178935][ T4843] loop0: p2 < > p3 < p5 > p4 [ 99.178959][ T4843] loop0: partition table partially beyond EOD, truncated [ 99.179392][ T4843] loop0: p2 start 4278190080 is beyond EOD, truncated [ 99.180665][ T4843] loop0: p4 size 8192 extends beyond EOD, truncated [ 99.181760][ T4843] loop0: p5 size 8192 extends beyond EOD, truncated [ 99.722270][ T1108] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.558057][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.566632][ T1108] usb 3-1: Product: syz [ 100.570886][ T1108] usb 3-1: Manufacturer: syz [ 100.576180][ T1108] usb 3-1: SerialNumber: syz [ 100.585982][ T1108] usb 3-1: config 0 descriptor?? [ 100.622219][ T1108] usb 3-1: can't set config #0, error -71 [ 100.722787][ T1108] usb 3-1: USB disconnect, device number 2 [ 100.935566][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 100.984701][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.017986][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.058094][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.922140][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.930010][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.938216][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.946421][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.954450][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.962510][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.970342][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.978443][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 101.986443][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.002478][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.010605][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.018842][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.025221][ T4858] loop1: detected capacity change from 0 to 512 [ 102.027620][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.041706][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.052250][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.060007][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.067812][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.086081][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.108394][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.124452][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.134853][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.144287][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.152326][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.160361][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.629266][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.959835][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 102.974283][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.022296][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 103.336828][ T4229] hid-generic 0004:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.354871][ T4858] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.402769][ T4858] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.480397][ T4874] Zero length message leads to an empty skb [ 103.527415][ T4878] netlink: 188 bytes leftover after parsing attributes in process `syz.2.188'. [ 103.609714][ T4875] fido_id[4875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.720548][ T4874] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 104.262134][ T4188] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.542209][ T4188] usb 5-1: Using ep0 maxpacket: 8 [ 104.662435][ T4188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.762721][ T4188] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 104.770320][ T4188] usb 5-1: can't read configurations, error -71 [ 111.129887][ T4952] loop4: detected capacity change from 0 to 2048 [ 111.283518][ T4180] loop4: p2 < > p3 < p5 > p4 [ 111.288341][ T4180] loop4: partition table partially beyond EOD, truncated [ 111.329616][ T4180] loop4: p2 start 4278190080 is beyond EOD, truncated [ 111.369074][ T4180] loop4: p4 size 8192 extends beyond EOD, truncated [ 111.923134][ T4180] loop4: p5 size 8192 extends beyond EOD, truncated [ 111.985812][ T4952] loop4: p2 < > p3 < p5 > p4 [ 111.990602][ T4952] loop4: partition table partially beyond EOD, truncated [ 112.066772][ T4952] loop4: p2 start 4278190080 is beyond EOD, truncated [ 112.268321][ T4952] loop4: p4 size 8192 extends beyond EOD, truncated [ 112.303157][ T4952] loop4: p5 size 8192 extends beyond EOD, truncated [ 113.267993][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 116.015184][ T4990] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.991531][ T5003] loop0: detected capacity change from 0 to 2048 [ 117.129726][ T5003] loop0: p2 < > p3 < p5 > p4 [ 117.134600][ T5003] loop0: partition table partially beyond EOD, truncated [ 117.172384][ T5003] loop0: p2 start 4278190080 is beyond EOD, truncated [ 117.202749][ T5003] loop0: p4 size 8192 extends beyond EOD, truncated [ 117.212854][ T5003] loop0: p5 size 8192 extends beyond EOD, truncated [ 118.478638][ T5013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 118.497079][ T5015] using random self ethernet address [ 118.542252][ T5015] using random host ethernet address [ 118.868978][ T5027] loop2: detected capacity change from 0 to 512 [ 118.928845][ T5027] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 120.072268][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 120.104818][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 120.442091][ T5027] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 120.506389][ T5038] loop3: detected capacity change from 0 to 2048 [ 120.514714][ T5027] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.663615][ T5038] loop3: p2 < > p3 < p5 > p4 [ 120.687410][ T5038] loop3: partition table partially beyond EOD, truncated [ 120.891566][ T5038] loop3: p2 start 4278190080 is beyond EOD, truncated [ 123.601822][ T5038] loop3: p4 size 8192 extends beyond EOD, truncated [ 123.609627][ T5038] loop3: p5 size 8192 extends beyond EOD, truncated [ 123.752737][ T3559] loop3: p2 < > p3 < p5 > p4 [ 123.757495][ T3559] loop3: partition table partially beyond EOD, truncated [ 124.043338][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.052424][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.061747][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.074517][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.083637][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.095371][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.104502][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.116099][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.125156][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.135694][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 124.160740][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.177233][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.185875][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.314921][ T3559] loop3: p2 start 4278190080 is beyond EOD, truncated [ 124.474811][ T3559] loop3: p4 size 8192 extends beyond EOD, truncated [ 124.592998][ T3559] loop3: p5 size 8192 extends beyond EOD, truncated [ 126.282402][ T3559] loop3: p2 < > p3 < p5 > p4 [ 126.287212][ T3559] loop3: partition table partially beyond EOD, truncated [ 126.499372][ T3559] loop3: p2 start 4278190080 is beyond EOD, truncated [ 126.640959][ T3559] loop3: p4 size 8192 extends beyond EOD, truncated [ 126.765098][ T3559] loop3: p5 size 8192 extends beyond EOD, truncated [ 127.324668][ T5085] device syzkaller0 entered promiscuous mode [ 127.553479][ T5093] loop2: detected capacity change from 0 to 512 [ 127.684996][ T5093] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 127.854571][ T5093] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 127.977260][ T5093] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.001197][ T5101] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 128.054457][ T5096] udevd[5096]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 128.054504][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 128.178812][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 128.401296][ T5095] udevd[5095]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 128.441412][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 128.458430][ T5096] udevd[5096]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 128.493662][ T26] audit: type=1326 audit(1786125159.593:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abd3e60d9 code=0x7ffc0000 [ 128.561430][ T26] audit: type=1326 audit(1786125159.593:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 129.202085][ T26] audit: type=1326 audit(1786125159.593:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 129.400963][ T26] audit: type=1326 audit(1786125159.593:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 129.521010][ T5120] loop3: detected capacity change from 0 to 512 [ 129.744807][ T5120] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 129.788371][ T5120] EXT4-fs (loop3): Remounting filesystem read-only [ 129.795301][ T5120] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.256: invalid indirect mapped block 4278190080 (level 0) [ 129.835178][ T5120] EXT4-fs (loop3): Remounting filesystem read-only [ 129.841909][ T5120] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.256: invalid indirect mapped block 1 (level 1) [ 129.931040][ T26] audit: type=1326 audit(1786125159.593:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 130.739273][ T26] audit: type=1326 audit(1786125159.593:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 130.819206][ T5120] EXT4-fs (loop3): Remounting filesystem read-only [ 130.826162][ T5120] EXT4-fs (loop3): 1 truncate cleaned up [ 130.831822][ T5120] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 130.883286][ T26] audit: type=1326 audit(1786125159.593:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 130.939002][ T26] audit: type=1326 audit(1786125159.593:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 131.028230][ T26] audit: type=1326 audit(1786125159.593:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 131.130774][ T26] audit: type=1326 audit(1786125159.593:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.3.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abd3e5d6b code=0x7ffc0000 [ 131.253030][ T5137] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5132] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5137] [ 131.919093][ T5146] __nla_validate_parse: 135 callbacks suppressed [ 131.919127][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.934810][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.943770][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.954243][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.963211][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.973810][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.982828][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.993332][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 132.002337][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 132.012680][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 132.029027][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.044521][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.052618][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.464470][ T2301] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 132.665273][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.673171][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.824129][ T5156] loop2: detected capacity change from 0 to 512 [ 132.848599][ T2301] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 132.857330][ T5157] JFS: discard option not supported on device [ 132.864721][ T5157] Mount JFS Failure: -22 [ 132.870869][ T5157] jfs_mount failed w/return code = -22 [ 132.976532][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.056659][ T5156] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.180508][ T5167] loop3: detected capacity change from 0 to 2048 [ 133.278828][ T4180] loop3: p2 < > p3 < p5 > p4 [ 133.283805][ T4180] loop3: partition table partially beyond EOD, truncated [ 133.300579][ T5172] loop0: detected capacity change from 0 to 512 [ 133.304746][ T4180] loop3: p2 start 4278190080 is beyond EOD, truncated [ 133.341923][ T4180] loop3: p4 size 8192 extends beyond EOD, truncated [ 133.368708][ T4180] loop3: p5 size 8192 extends beyond EOD, truncated [ 133.388457][ T5167] loop3: p2 < > p3 < p5 > p4 [ 133.403373][ T4229] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 133.419697][ T5167] loop3: partition table partially beyond EOD, truncated [ 133.431392][ T5172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.462295][ T5148] ceph: No mds server is up or the cluster is laggy [ 133.478645][ T5167] loop3: p2 start 4278190080 is beyond EOD, truncated [ 133.965639][ T5167] loop3: p4 size 8192 extends beyond EOD, truncated [ 134.024861][ T5172] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.043147][ T5167] loop3: p5 size 8192 extends beyond EOD, truncated [ 136.484707][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.493269][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.156236][ T5210] loop4: detected capacity change from 0 to 512 [ 138.219994][ T5210] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 138.293453][ T5210] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 138.323500][ T5210] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.891938][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.056738][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.547397][ T5192] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.556477][ T5192] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.566310][ T5192] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.575588][ T5192] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.742627][ T5192] syz.2.273 (5192) used greatest stack depth: 19632 bytes left [ 139.854050][ T5227] configfs-gadget gadget: USB CDC Phonet function [ 139.860676][ T5227] configfs-gadget gadget: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 139.869650][ T5231] device syzkaller0 entered promiscuous mode [ 140.152391][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.462631][ T4231] usb 1-1: Dual-Role OTG device on HNP port [ 141.120229][ T4231] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 5.15 [ 141.162134][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.265237][ C1] configfs-gadget gadget: Using interface 4 [ 141.498086][ T4231] usblp 1-1:1.4: usblp0: USB Bidirectional printer dev 3 if 4 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 141.744432][ T4231] usb 1-1: USB disconnect, device number 3 [ 141.914436][ T4231] usblp0: removed [ 143.630842][ T5264] tc action pedit offset 0 out of bounds [ 143.642541][ T5267] Illegal XDP return value 4294967274, expect packet loss! [ 144.398822][ T5272] __nla_validate_parse: 136 callbacks suppressed [ 144.398860][ T5272] netlink: 188 bytes leftover after parsing attributes in process `syz.2.295'. [ 145.269021][ T5296] netlink: 72 bytes leftover after parsing attributes in process `syz.1.303'. [ 145.292208][ T4260] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.307027][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.612614][ T4229] usb 1-1: Dual-Role OTG device on HNP port [ 145.722191][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.745691][ T4229] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 5.15 [ 146.561700][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.572131][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 146.583095][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 146.592227][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.692646][ C0] configfs-gadget gadget: Using interface 2 [ 146.772261][ T4260] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 146.787877][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.807335][ T4229] usblp 1-1:1.2: usblp0: USB Bidirectional printer dev 4 if 2 alt 0 proto 2 vid 0x1234 pid 0x5678 [ 146.827081][ T4260] usb 5-1: Product: syz [ 146.832503][ T4260] usb 5-1: Manufacturer: syz [ 146.867724][ T4260] usb 5-1: SerialNumber: syz [ 146.903805][ T4260] usb 5-1: config 0 descriptor?? [ 147.478079][ T5319] netlink: 188 bytes leftover after parsing attributes in process `syz.3.309'. [ 148.143145][ T4260] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux1 [ 148.172436][ T4260] usb 5-1: USB disconnect, device number 8 [ 149.399558][ T5356] jffs2: notice: (5356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.662596][ T4260] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 151.025042][ T4194] ------------[ cut here ]------------ [ 151.031602][ T4194] kernel BUG at fs/jffs2/nodelist.c:462! [ 151.038123][ T4194] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 151.044226][ T4194] CPU: 1 PID: 4194 Comm: syz-executor Not tainted syzkaller #0 [ 151.051792][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.061866][ T4194] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 151.067883][ T4194] Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 151.087486][ T4194] RSP: 0018:ffffc90002f0fb38 EFLAGS: 00010293 [ 151.093561][ T4194] RAX: ffffffff82a517e9 RBX: ffff888055d5c000 RCX: ffff888023705940 [ 151.101621][ T4194] RDX: 0000000000000000 RSI: ffff888055d5c000 RDI: ffff888023084000 [ 151.109589][ T4194] RBP: 0000000000000006 R08: ffff88802308436b R09: 1ffff1100461086d [ 151.117644][ T4194] R10: dffffc0000000000 R11: ffffed100461086e R12: ffff888055d5c000 [ 151.125611][ T4194] R13: dffffc0000000000 R14: ffff888055d5c020 R15: ffff888023084000 [ 151.133573][ T4194] FS: 0000555592d4b500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 151.142496][ T4194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.149101][ T4194] CR2: 00007ffca3bb0fe4 CR3: 00000000625d7000 CR4: 00000000003526e0 [ 151.157059][ T4194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.165013][ T4194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.172969][ T4194] Call Trace: [ 151.176230][ T4194] [ 151.179143][ T4194] ? jffs2_do_clear_inode+0x310/0x390 [ 151.184511][ T4194] jffs2_do_clear_inode+0x31b/0x390 [ 151.189699][ T4194] ? jffs2_statfs+0x370/0x370 [ 151.194356][ T4194] evict+0x4b6/0x8b0 [ 151.198326][ T4194] ? evict_inodes+0x577/0x6e0 [ 151.202982][ T4194] ? proc_nr_inodes+0x320/0x320 [ 151.207829][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 151.213010][ T4194] evict_inodes+0x650/0x6e0 [ 151.217515][ T4194] ? clear_inode+0x150/0x150 [ 151.222095][ T4194] ? jffs2_sync_fs+0x93/0xa0 [ 151.226771][ T4194] generic_shutdown_super+0x93/0x300 [ 151.232096][ T4194] kill_mtd_super+0x1f/0x60 [ 151.236627][ T4194] jffs2_kill_sb+0x92/0xb0 [ 151.241038][ T4194] deactivate_locked_super+0x93/0xf0 [ 151.246317][ T4194] cleanup_mnt+0x426/0x4d0 [ 151.250719][ T4194] task_work_run+0x125/0x1a0 [ 151.255296][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 151.260655][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 151.266205][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 151.271653][ T4194] do_syscall_64+0x58/0xa0 [ 151.276050][ T4194] ? clear_bhb_loop+0x30/0x80 [ 151.280713][ T4194] ? clear_bhb_loop+0x30/0x80 [ 151.285372][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.291336][ T4194] RIP: 0033:0x7f10ad2ca317 [ 151.295733][ T4194] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 151.315408][ T4194] RSP: 002b:00007ffca3bb1658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 151.323805][ T4194] RAX: 0000000000000000 RBX: 00007f10ad35f474 RCX: 00007f10ad2ca317 [ 151.331758][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca3bb1710 [ 151.339713][ T4194] RBP: 00007ffca3bb1710 R08: 00007ffca3bb2710 R09: 00000000ffffffff [ 151.347664][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca3bb27a0 [ 151.355616][ T4194] R13: 00007f10ad35f474 R14: 000000000002481d R15: 00007ffca3bb27e0 [ 151.363576][ T4194] [ 151.366590][ T4194] Modules linked in: [ 151.393062][ T4194] ---[ end trace d53e01c5964557a7 ]--- [ 151.440145][ T4194] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 151.543746][ T4194] Code: 19 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 07 19 ff e9 4d fe ff ff e8 c7 e4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 151.565810][ T4194] RSP: 0018:ffffc90002f0fb38 EFLAGS: 00010293 [ 151.572352][ T4194] RAX: ffffffff82a517e9 RBX: ffff888055d5c000 RCX: ffff888023705940 [ 151.584446][ T4194] RDX: 0000000000000000 RSI: ffff888055d5c000 RDI: ffff888023084000 [ 151.594532][ T4194] RBP: 0000000000000006 R08: ffff88802308436b R09: 1ffff1100461086d [ 151.605105][ T4194] R10: dffffc0000000000 R11: ffffed100461086e R12: ffff888055d5c000 [ 151.614860][ T4194] R13: dffffc0000000000 R14: ffff888055d5c020 R15: ffff888023084000 [ 151.626097][ T4194] FS: 0000555592d4b500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 151.636976][ T4194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.646786][ T4194] CR2: 000055555d6ce4e8 CR3: 00000000625d7000 CR4: 00000000003506e0 [ 151.656579][ T4194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.668219][ T4194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.679175][ T4194] Kernel panic - not syncing: Fatal exception [ 151.685586][ T4194] Kernel Offset: disabled [ 151.689901][ T4194] Rebooting in 86400 seconds..