last executing test programs: 8m5.666373302s ago: executing program 2 (id=61): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x4, 0x0) 8m2.467068803s ago: executing program 2 (id=65): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xa}}, 0x20) shutdown(r5, 0x1) 8m1.472651824s ago: executing program 2 (id=66): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 8m0.686879478s ago: executing program 2 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0x7}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 7m59.434605899s ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(0x0, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m58.395078514s ago: executing program 2 (id=74): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f0000000000)='1', 0x18, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14) 7m42.954217742s ago: executing program 32 (id=74): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f0000000000)='1', 0x18, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14) 7m4.860508716s ago: executing program 1 (id=210): socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044068}, 0x4c004) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) 7m3.466564529s ago: executing program 1 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x40}}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200300000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 7m0.446874046s ago: executing program 1 (id=222): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 6m59.080673357s ago: executing program 1 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) shutdown(r5, 0x1) 6m57.979927636s ago: executing program 1 (id=228): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x8, 0x40000) openat(r0, 0x0, 0x0, 0x1f2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, 0x0) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='system.syntem.posix_acl_access\x00']) rename(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x6, 0x2, 0x5, 0x40, {0x6, 0x180, 0xfffffffffffffff9, 0x9, 0xff, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) ftruncate(0xffffffffffffffff, 0x2007ffb) 6m54.021983079s ago: executing program 1 (id=232): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) 6m39.89133923s ago: executing program 3 (id=259): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x1, 0x10000004, 0x400, 0xcc7, 0xfff, 0x1, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x3, 0xfffffffd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000180)) 6m38.136371703s ago: executing program 33 (id=232): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) 6m38.110634365s ago: executing program 3 (id=264): r0 = semget$private(0x0, 0x207, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xa}, {0x0, 0xff78}], 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000240)=""/166) 6m36.95050042s ago: executing program 3 (id=268): socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044068}, 0x4c004) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r7, 0x0, 0x0) 6m34.529527837s ago: executing program 3 (id=274): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 6m33.496139771s ago: executing program 3 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x2020) 6m32.488069783s ago: executing program 3 (id=277): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 6m17.096615527s ago: executing program 34 (id=277): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 6.459103893s ago: executing program 5 (id=1294): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r2 = syz_io_uring_setup(0x6dbf, &(0x7f0000000300)={0x0, 0x1c2c, 0x10100, 0x1, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/12) 5.830031435s ago: executing program 4 (id=1301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000240)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) 5.616504962s ago: executing program 7 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r3}, 0x38) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.685043458s ago: executing program 7 (id=1303): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000000)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 4.676848099s ago: executing program 4 (id=1304): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) 4.634912102s ago: executing program 5 (id=1305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.438693038s ago: executing program 0 (id=1306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xa, 0x1, 0x3, 0x6, 0xf}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.382786443s ago: executing program 4 (id=1307): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001040)=0x40, 0x4) 4.343946356s ago: executing program 4 (id=1308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 4.29786393s ago: executing program 5 (id=1309): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 4.226537495s ago: executing program 0 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)}) 4.190305848s ago: executing program 6 (id=1311): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.189693548s ago: executing program 5 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) 3.611272485s ago: executing program 0 (id=1313): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.639302344s ago: executing program 7 (id=1314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000240)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r5) 2.554624362s ago: executing program 0 (id=1315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r2 = syz_io_uring_setup(0x6dbf, &(0x7f0000000300)={0x0, 0x1c2c, 0x10100, 0x1, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/12) 2.437143571s ago: executing program 5 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400)={0xf}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r7, 0x540a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 2.394008405s ago: executing program 6 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x142, 0x0) r1 = dup2(r0, r0) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x7ffd, 0x0}) 1.638333296s ago: executing program 7 (id=1318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 1.518573826s ago: executing program 7 (id=1319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x101, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x17}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 1.518242966s ago: executing program 6 (id=1320): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec000000000a01020000000000000000050000020900010073797a300000000008000240000000023c0006e808cf7384552f120183af56c4b2b79056586784bdcd8587885c60e5aa03d08d86c3f3fb99dac62aecd67dae229b4fb1f5e5cc1fdb5a5790010c000440000000000000000273"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x200000d4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x70d10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000080) 1.405305425s ago: executing program 6 (id=1321): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) 1.400661686s ago: executing program 7 (id=1322): unshare(0x62040200) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000001900)="900000001c001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2a724d6e7d8f2bb079fc14cfc33ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x8090, 0x0, 0x0) 1.395531376s ago: executing program 0 (id=1323): openat$kvm(0x0, 0x0, 0x2382, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.186606233s ago: executing program 6 (id=1324): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"87412fcf3b7656866352bfc3b2a97409f657f12f35013bff5243e9df7287106d02bcb0d638722ca4b8c03c00d8a7008f57b74d0fb9eda8c8d8a733262574a53c242d4bc2315f2a4330212629510faf60e06a809b44e3e956079f8e15309975eff5624b8e45b4290e4fd8619c8cda5e70e7fb7483bcb2d4dd171510932e4433505aa14c048b20f8bcea3979ac05e8a7f8c69335943f945df35be808e545a8701b5be1992667e07680101ae7c1052ba83cc3bd6351e484cc28c90390cc9a670f8e82994662194133d1416df6adf63f7d4dfa6bd4d6ed755b91231e5ad99cd82cde77441875b7f23566f34ec3ef4c58ca1243a22bdb0f3d0c3c0cf3567d3624b00e0822cc27b0c10cd3ebbfe5cee69113acf809ee9cb63e761d1b8b74c19cd23e3e4701f08d76318d0f11a28ad24f46105b6d53b071cc8e51e0b54609f2757158c24bb01751b963681616d9fe8948f2234a5f53ecb3af48f3896e53c92a4a0035c1a22c08dd13808f8d26772e52c418e2860f4d1c51b77ce73bf7ae4a0023218a4e3af6ac7fb00396b4d5d69996e39638c42c51384bca0d141bc64e27ad1cbccc3d45cec59fd5fc46e312696c47b8d1b029c7cbd0194c675d445e93f7abf8bf2d4765f03e57fde167382ece70993a0cfe964e1a6f75b88af69739f654043da63c32c4101f30de250b052f7eb6da1eecf5dd1d6d29b63620af24d62c31c6566c82763b7ab4293441dd14d369f08cf1189a58047952bf8f973c095ffbdfa9b91bbfa8c3c894d85f08fd311ab1eae103318761b47a93a6cae00204635a8cb57b3204c4b8fbb2dfef3c596f8d4dda918110abd6ebc5bf26311c438898a7f814ae9ff9ab8c8f23282906cf57dc2e167bd3be0a2b19945b3dde4e7fe2d01056a1d9d486e543bf2454c4e4219ffc33ae22a824b0e1058706656c59cc6e5c08fcbe0a88d35cf178136aabf450453dec7878bccc1daca7c6690983be524e83a17f9ce02ec0a58c125916cd7575ac1cc02f8485562f1542da73fa09d2be7f4d3e629fde6e5c58389a1ffb95b146e1d1b2a25aede59f02c5f9a55fc53b1867ee3863fb838e0750beb6939097aca0c03ebded37f2ffa945339fcc99ad006aa71863358bf300a71df24adc6b00c2687e7756a8d5e93668ba13989e824dbb992050748b87b9300ffea6ccf04a990046f5522749d80d45444866e3d7c21dfb786563e3ca11b5311eb3f8b7ed70e73ef02e477d76dea6c14bf1b47a2cda66a024eae350efb34d11fd512d0921d16e6c5e90845be2a5e8ea30f438f331f1e316c5d6e60526249300e6fc921dd8c0c8d470e2485b9145b12ed332b0de2bc3b29f7dbf980617c378f28ebfd8b0a37c89124c79c5b2f344b5c3b5d0f3a8641093b4b06d5a67c152a510a56a0bef5a24fea0869455e7d54535163289a970e6e908aacd0c30f85fbf16b923e5d18a997b5b0b1f2bd15a7f1ccc33b8cf1b8fd0e0f8f4f0ff533669e5f71f460f3672f6ca7a1539997689fd6f97f296f53761bf94f5f75aa274cb5ae67b25682cca33c87da759c0c99e064fa973af0d2d6ccf82266a48241d2284eda04590bc80c31b0c0b04fa104cce536fbb29508a222c4a777c072348502a27272ff9656a0fba49538be263d23e9bce31f3e5d573b1cbc0b0ecb27170c2eb10115dd8ecaee8f0ead3202d3c855223c196a7343fd6d2c152430add0c5d088a406f40e4aad95fc2d30655ca81f65aeeaf81eb82821da75334ed82cb09f41c891c53cd193ca8f99017fd28f5b454ada00989697756f2aaf11254c67dca0ee39d51a6dfcd09732401bdda91de59ef0af9a8711c8b3365caab3a941c3aae59a3cc51f7604b8dd945e174a69d556ea00dbf82baef3c263488eaa96c009c399486d7d828dbddf34acf90575c55463cd92b55162647cb1a282e2670928eb9c0c0af020202d2387bffcbe4006019d20b0963da0fbbdf9fefd6ef1f8fb5ba0c6ea129b004df63bcd06d7d6d09b6783e70a1bfa6d2fc1066621f7ea859cca0467c8322b32655eb23f5d3197ebc0a49ecf867c3e934e91ea31c3415ccc7adf01ca6a2e835eed34cd953f2cf89aec22a48cd3ba586001f15012f9c8edaeead6df6ee6cdaaadd62cffd7fd34bb175065cee2a9a79776cc13bb74930e1edc108e03eba8b3bb2c62d1d695d5284c8cad21d9bedad563e2e96570ea03b23032d818d305c188810116bea0e19f33e7a4eb71e2e86281f55c095ad24005dccee4685395206dbfb7480d55f00e191407844cd6ba022ceea6eac1e5ef1107df340764065ff13480924b4d63c00ee00f9b9bfebee99d9ec920a821fcf06f14a1b5bb4e0590dc30a5c9944f5b2ffe6ff0c62165930cf450718b2ad74775553c6a5de2d9eab709912158b00b87836cf8feab171d774fa0745222902d0c99b312240e900e2759211168947d6d52eaf5f9df731d9d2b1ea2cf2713ca5a9fc9c64761f19012bca4d901e65ccae30197b6c3f57d82d7990d0c82d07a9dcd147a470319f0c6261b8cd5eec858a88ca9a28663220ccc0e2361dc40daffd486e625c403013d70bd4b029f8f63797ae6e7b02e800fdf709824b0e27b6073792fcee6c2cc1477368d0832723a2b13ba98daee9cdf9ede4eb6e7aeea7b37c04fee94db6f28c8252cc0b4b36af066b3b148ceb6765357eb01a071fbeef1d41b296d1627066b9ab344ddb259df37cb9e301e26a5cdf362c8f015236c7aed0cadf533431d9336fe9b5cf17f66964ccdff0db89526b9f2256fc3b82e4e749c5672cb14884935efeb65a44ff9035bbb648242bd508449afd0740491ab5819b75f19802b6741d854fbd87e694df208c55a3751c0865cd09e1e328d079693aef4fc437c9bf977c9aeae7b0a4cebf0c54ebe02efec8f53c7889af5b16ab4eb13422d5ba73a76db75d7cffe779b0ffdcc0ad429dd09448b54f10bac299361d7d649e7d38b7c470ab9f77daeba576783a7b0161e59a61f96d407773bc79c4beadc19c1a1dfde445f819aee6afecccad3579e26542321b53ab0877544c25eaa638e405449ad26c9b8ca38838ab31a8387bd7772e521e80df7c63a534f9eb6c0aacc513d17a78ae076bbaac2472153aa43ca3aa454ab5b334126a74e72e833ab718384e3a8c0e3a7a62e89362cd3da082f83052e91c02ed49739357b77546329969214dc0ca44fbdbf98eb558bb20a328788cf80e358db5b55b1c91b1d3e116642527a40850e9935eb894afc010c67be9034d05dbc5ef41f5660c849c588718c8c6517715e3fec863265fb873b03e8c3d60c7bd69ac8fa156cc5455add9ba2b9b2bcf31eae846cd31ac2b6e29bbed6384ae9bc96a2b68d13fddeaf64f08653547416782ab3eb6e206699fe084d51e32911d994626a3e7970dac2b3a7aa79222ea714228dfaeb1947894db1c4e5f21d5149f2f1b9df2084e6e848da180422e7db75f32deaec04f0cec0c3dab199dca6f932e4f774e7a072798d465a79010e08f284bf01fae43340269269eecc7b43ace70661ea38a4f19faa2df9867437dd55c5e711672057fed655eb02c3e8b05516cd08ce5db30c2adae57bb30bb45590d566bd74956d86269bf8ee9ca064780ead780c8f10795e4d93bfefddaebacfb93ab6333c8b5318c0d73d55364c2dfe057184d837d9a9c41b9070cfe2366f9bdcbf30dd9d5b8566c6204bfdb1c11dd936d9a4b288172a706f0ac9b3b8e0e97fa35579e73fe600134eb004dd9c8d1a7f4d625419c2d48b1a906ac1f7ef34f3c9a816de3c53f6f019a4a554f6a282a21f45891ffaa1e85c5af43f949c8a495dfe7953f53793dac5455b679f90efb678d25b9a7b7326193c34922487a2d83b1689261891d55ca69954c5f4d1fb1824c577cdc8dc4a22d5662e15f87ad729df239ec9ee007556c633d5dbbb4874568d11375250dd836e944c523ffcde1c156613877715c1895a0b755a971b41a1167542d5a94b2930e818fa18d169ed1f95db235cabba2f0b8162c93a31e549ee7903cb8ea9b15a39486b1d1347957e768ab1c372513f0816fd03d64e03c95019bb47b221a60f36c9ad2e4eee321175fdc6dcde5bea9d1bf73cd8ac2919a4f652fea4e1f5e761f5aeb78d925f175e066595e642a2f0c9eeb9313432bb0726ad27e3767007a27bfcdaa83a91b903ca122a3c0d503dc1ff3bdcedb096d0c7c74a67536ce50cc4b1aedef43a8d7bd26f657e3044b6ff25b01e91eb50cd17a2b28b2190e088786c5f3a6b79cf10c7de46cf94aecfdf3e99fc7ff07ca0d051375d81c888eeb525ac2b38036700a5646ab2a3814e7e91441f3dc6c0a149804142fecd91f6d6fff02e6058a670cef325dd009897fb9f7650eeabcfd832e30d2d59080c56fe524666f992c090f5ba17cad9ec034374ed4b98d46fa87b9068b31bf99d80714a736218992e37d674a0100128f93503156f9d53070cbcbb6f1aa4758a2b0012ae3b44ed0952a9ab17a626e9ccd994c401a9749b209d95223a0aa6533654a34cb1b3d4581475a22692daf84e4b87e68f6e53124cb6e3598a363d9157e94fb7d3eb59d6871766a1c3e40820f5eb917b03483cec88524ea8deb4f44dcc2bd73d01fb5ab3f45179c9d176666b6d8264aa7a6694aa208f3a8b9e6269d8b57d233d721750ef14b7b9f711e8c90bd480dbfa0c01d6dd3e899162cbde3c55f0dc0a438347b740fcde9aa0ecd9dd8e1265da91a5dd0d502608c045a54d1a23b91aaf0bb0bcb1174429cae5f2bd99011325d3df263621f110550a181767299fe386125069d08614adf9a1f3070fdcbae318c7b995d75e0ae92e5ab781d1fa0aa71c6a9a5b886835469e204da4c4592375df674a95edc197f097386e2b1de0e068df16c80dd7cd281e5c7ac6ed8d472dfdf8a4cb3dfe753635872c9c9f2a7928fc079b9191c72074b84bfdbcf6a8851bd3796f3d8ea0c9a5b124336dde9c80314aaad1e479a83a32c3ea57fd606c4753551a323cc2e83dfdb4ce40330b05a92172842f9c9df0d69c5cac7c1533c8f422dc7f9f5d697f679ea103f386d4d27fa9d3abdb335d78e6e3a1f0287056f65bb82850317883d80eb676acfd2c9c3da6f530c4f10c32865575bc75432bbf646de1f20fea33ba709befa14099bb52938dea4870a79c6814fb47ad4b8d0d8f180c8dfaa629a39ee861da33dbb0729450802e0dd1e669a07cc74e395986f13850c51fe7b7b4f295fafec913e26df87087c1868c8debbe48f83428819357c953e525abba44d25a3ceb23660c8df4f667463063179b792605a1609dcf63bef3114f4a7a41e54caeb6f164737bb508a91c015cfa960e7971dbb9f5a6bf13cdde7584c37a0e143fa5e6132cd553518f7a277b02aa89a9cd7efe86cc86122a7066c5d60de76cfa6aaf0ae10323534ff6065b715a4c1c2c376338c355fea617b5b77aed0375856516de8b9a556f45f0a907255b4417e3ff9d3363ee9c0317f076cea2f2a90477957f6b72d73085f4f700d18e194d136f253d5c5b1b5fa0a76b37aba42baf527b247aa3ae4ef229d14eae58ebbb7dfd69f4f9bcfb56295ea8ce8cad5c71ee9293d8738c36bdccfd56f99f2c4e42848e3a86b365bf470242e2dec850b61988e4ac505d11e46ae9448d9bab6f208d751921dca54c3ac30fc16fae710bf64401238bef451efd53ac49cc2a1b40d50b59e196ac8fa8272f36ab11abf2ad7d7534c2da0d491f6fad41e63de771f8ec66752c4914dc3d7db34b3b21ce286d077e9900933e650b7d63bd021d3ec71f913efef9ff089c0c762b65bb6f50fcfcaed08d2db57b59b613f269072", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1.170227214s ago: executing program 4 (id=1325): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f00000026c0)) 1.120001238s ago: executing program 4 (id=1326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0xff, 0x81, '\x00', 0xffffffffffffff7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.058744993s ago: executing program 0 (id=1327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x5, 'dN'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x8, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}]}}, 0x0}, 0x0) 104.058341ms ago: executing program 6 (id=1328): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1329): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x800, 0x7fff, 0xa77, 0x3, 0x2cba1e40, 0x6, 0x7f}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) kernel console output (not intermixed with test programs): =========== END STATUS ================== [ 83.058344][ T4477] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 83.067416][ T4469] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 83.073320][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop3 [ 83.232944][ T4478] cramfs: Error -3 while decompressing! [ 83.238984][ T4478] cramfs: ffffffff961e6042(26)->ffff88805adcb000(4096) [ 83.246065][ T4478] cramfs: Error -3 while decompressing! [ 83.251728][ T4478] cramfs: ffffffff961e605c(16)->ffff88805adcc000(4096) [ 83.258815][ T4478] cramfs: Error -3 while decompressing! [ 83.264560][ T4478] cramfs: ffffffff961e6042(26)->ffff88805adcb000(4096) [ 83.273657][ T26] audit: type=1800 audit(1754004180.240:3): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.50" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 83.531564][ T4477] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.589154][ T4476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.724182][ T4483] vivid-002: disconnect [ 84.157246][ T4477] syz.0.51 (4477) used greatest stack depth: 20416 bytes left [ 85.055710][ T4482] vivid-002: reconnect [ 85.272379][ T26] audit: type=1800 audit(1754004182.240:4): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.55" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 85.306045][ T4490] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 85.335030][ T4511] overlayfs: invalid origin (00000079004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 85.354791][ T4490] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 85.385741][ T4490] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 85.483739][ T4490] syz.0.55 (4490) used greatest stack depth: 18608 bytes left [ 86.830035][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.100656][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 87.380292][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 87.389354][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.468084][ T13] usb 3-1: Product: syz [ 87.490434][ T13] usb 3-1: Manufacturer: syz [ 87.515566][ T13] usb 3-1: SerialNumber: syz [ 87.807431][ T13] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.684230][ T4540] loop3: detected capacity change from 0 to 512 [ 89.751801][ T1325] usb 3-1: USB disconnect, device number 2 [ 89.790561][ T4540] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.806588][ T1325] usblp0: removed [ 89.836624][ T4540] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 90.779359][ T4540] loop3: detected capacity change from 0 to 8 [ 90.931647][ T4540] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 90.964473][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop3 [ 91.074153][ T4545] cramfs: Error -3 while decompressing! [ 91.079812][ T4545] cramfs: ffffffff961ea042(26)->ffff88807116d000(4096) [ 91.087600][ T4545] cramfs: Error -3 while decompressing! [ 91.093232][ T4545] cramfs: ffffffff961ea05c(16)->ffff88807116e000(4096) [ 91.100437][ T4545] cramfs: Error -3 while decompressing! [ 91.106020][ T4545] cramfs: ffffffff961ea042(26)->ffff88807116d000(4096) [ 91.114571][ T26] audit: type=1800 audit(1754004188.080:5): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.64" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 91.300356][ T4547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 91.373021][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop3 [ 93.101523][ T4559] syz.3.70 (4559) used greatest stack depth: 18592 bytes left [ 93.240578][ T4567] vivid-001: ================= START STATUS ================= [ 93.248300][ T4567] vivid-001: Generate PTS: true [ 93.254458][ T4567] vivid-001: Generate SCR: true [ 93.261253][ T4567] tpg source WxH: 640x360 (Y'CbCr) [ 93.266630][ T4567] tpg field: 1 [ 93.270226][ T4567] tpg crop: 640x360@0x0 [ 93.274619][ T4567] tpg compose: 640x360@0x0 [ 93.279161][ T4567] tpg colorspace: 8 [ 93.283483][ T4567] tpg transfer function: 0/0 [ 93.288136][ T4567] tpg Y'CbCr encoding: 0/0 [ 93.318296][ T4567] tpg quantization: 0/0 [ 93.322665][ T4567] tpg RGB range: 0/2 [ 93.327402][ T4567] vivid-001: ================== END STATUS ================== [ 94.801787][ T4578] loop1: detected capacity change from 0 to 512 [ 94.804929][ T4580] loop0: detected capacity change from 0 to 512 [ 94.898044][ T4580] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.947592][ T4580] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 94.972723][ T4578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 94.981556][ T4578] System zones: 1-3, 19-19, 35-38 [ 95.679899][ T4578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.691345][ T4578] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.889573][ T4588] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.898329][ T4607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 97.971263][ T4619] loop4: detected capacity change from 0 to 512 [ 98.015731][ T4619] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.050188][ T4619] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 98.113224][ T4619] loop4: detected capacity change from 0 to 8 [ 98.130532][ T4619] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 98.137365][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop4 [ 98.297123][ T4622] cramfs: Error -3 while decompressing! [ 98.303008][ T4622] cramfs: ffffffff961e6042(26)->ffff88805b39a000(4096) [ 98.310120][ T4622] cramfs: Error -3 while decompressing! [ 98.315737][ T4622] cramfs: ffffffff961e605c(16)->ffff88805b39b000(4096) [ 98.323525][ T4622] cramfs: Error -3 while decompressing! [ 98.329401][ T4622] cramfs: ffffffff961e6042(26)->ffff88805b39a000(4096) [ 98.337179][ T26] audit: type=1800 audit(1754004195.300:6): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 98.414205][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop4 [ 98.824091][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop4 [ 98.886052][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop4 [ 99.321105][ T4636] vivid-001: ================= START STATUS ================= [ 99.332841][ T4636] vivid-001: Generate PTS: true [ 99.357398][ T4636] vivid-001: Generate SCR: true [ 99.358210][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 99.374170][ T4636] tpg source WxH: 640x360 (Y'CbCr) [ 99.381214][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 99.391241][ T4636] tpg field: 1 [ 99.398173][ T4636] tpg crop: 640x360@0x0 [ 99.409438][ T4636] tpg compose: 640x360@0x0 [ 99.414159][ T4636] tpg colorspace: 8 [ 99.418069][ T4636] tpg transfer function: 0/0 [ 99.422959][ T4636] tpg Y'CbCr encoding: 0/0 [ 99.427761][ T4636] tpg quantization: 0/0 [ 99.432370][ T4636] tpg RGB range: 0/2 [ 99.436566][ T4636] vivid-001: ================== END STATUS ================== [ 99.910018][ T4632] loop4: detected capacity change from 0 to 32768 [ 99.969522][ T4642] mmap: syz.3.96 (4642) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 99.983062][ T4632] XFS: ikeep mount option is deprecated. [ 100.183498][ T4632] XFS (loop4): Mounting V5 Filesystem [ 100.365510][ T4632] XFS (loop4): Ending clean mount [ 100.372897][ T4632] XFS (loop4): Quotacheck needed: Please wait. [ 100.427153][ T4632] XFS (loop4): Quotacheck: Done. [ 100.672554][ T4182] XFS (loop4): Unmounting Filesystem [ 102.422465][ T4669] loop4: detected capacity change from 0 to 32768 [ 102.460618][ T4669] XFS: ikeep mount option is deprecated. [ 102.512645][ T4669] XFS (loop4): Mounting V5 Filesystem [ 102.592488][ T4669] XFS (loop4): Ending clean mount [ 102.599681][ T4669] XFS (loop4): Quotacheck needed: Please wait. [ 102.633622][ T4669] XFS (loop4): Quotacheck: Done. [ 102.791333][ T4182] XFS (loop4): Unmounting Filesystem [ 103.395468][ T4691] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.483745][ T4698] vivid-001: ================= START STATUS ================= [ 103.500421][ T4698] vivid-001: Generate PTS: true [ 103.515876][ T4698] vivid-001: Generate SCR: true [ 103.536489][ T4698] tpg source WxH: 640x360 (Y'CbCr) [ 103.649678][ T4698] tpg field: 1 [ 103.653706][ T4698] tpg crop: 640x360@0x0 [ 103.657999][ T4698] tpg compose: 640x360@0x0 [ 103.662798][ T4698] tpg colorspace: 8 [ 103.676449][ T4696] netlink: 'syz.0.108': attribute type 10 has an invalid length. [ 103.687021][ T4698] tpg transfer function: 0/0 [ 103.699607][ T4696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.108'. [ 103.727315][ T4698] tpg Y'CbCr encoding: 0/0 [ 103.888833][ T4698] tpg quantization: 0/0 [ 104.034625][ T4698] tpg RGB range: 0/2 [ 104.046758][ T4698] vivid-001: ================== END STATUS ================== [ 104.160148][ T4696] team0: Failed to send options change via netlink (err -105) [ 104.185970][ T4696] team0: Port device geneve0 added [ 104.326351][ T4691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.453448][ T4691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.557359][ T4691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.578333][ T4710] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 104.613265][ T4710] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.758957][ T4699] loop3: detected capacity change from 0 to 32768 [ 104.770957][ T4691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.790161][ T4691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.806868][ T4691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.827177][ T4699] XFS: ikeep mount option is deprecated. [ 104.840236][ T4691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.925945][ T4699] XFS (loop3): Mounting V5 Filesystem [ 104.959167][ T4724] loop0: detected capacity change from 0 to 512 [ 105.048848][ T4699] XFS (loop3): Ending clean mount [ 105.059297][ T4699] XFS (loop3): Quotacheck needed: Please wait. [ 105.123775][ T4732] loop4: detected capacity change from 0 to 1024 [ 105.163880][ T4732] EXT4-fs (loop4): filesystem is read-only [ 105.170793][ T4732] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 105.181630][ T4732] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 105.191621][ T4732] EXT4-fs error (device loop4): ext4_get_journal_inode:5158: comm syz.4.119: inode #1: comm syz.4.119: iget: illegal inode # [ 105.210274][ T4732] EXT4-fs (loop4): no journal found [ 105.216116][ T4732] EXT4-fs (loop4): can't get journal size [ 105.242270][ T4699] XFS (loop3): Quotacheck: Done. [ 105.247608][ T4732] EXT4-fs error (device loop4): ext4_fill_super:4839: inode #2: comm syz.4.119: iget: special inode unallocated [ 105.260045][ T4732] EXT4-fs (loop4): get root inode failed [ 105.265710][ T4732] EXT4-fs (loop4): mount failed [ 105.538487][ T4184] XFS (loop3): Unmounting Filesystem [ 107.878941][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 107.971177][ T4753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.196783][ T4764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.127'. [ 109.262951][ T4774] loop3: detected capacity change from 0 to 1024 [ 109.295329][ T4774] EXT4-fs (loop3): filesystem is read-only [ 109.301908][ T4774] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 109.313286][ T4774] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 109.323186][ T4774] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.132: inode #1: comm syz.3.132: iget: illegal inode # [ 109.369013][ T4774] EXT4-fs (loop3): no journal found [ 109.374328][ T4774] EXT4-fs (loop3): can't get journal size [ 109.540380][ T4774] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.132: iget: special inode unallocated [ 109.553411][ T4774] EXT4-fs (loop3): get root inode failed [ 109.559067][ T4774] EXT4-fs (loop3): mount failed [ 112.340154][ T4225] Bluetooth: hci5: command 0x0409 tx timeout [ 112.349665][ T4507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.673232][ T4507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.695681][ T4814] process 'syz.3.141' launched './file0' with NULL argv: empty string added [ 112.992187][ T4507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.066551][ T4507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.315049][ T4793] chnl_net:caif_netlink_parms(): no params data found [ 113.759472][ T4793] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.793957][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.844399][ T4793] device bridge_slave_0 entered promiscuous mode [ 113.925719][ T4507] tipc: Disabling bearer [ 113.963972][ T4793] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.980050][ T4507] tipc: Left network mode [ 114.013849][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.107718][ T4793] device bridge_slave_1 entered promiscuous mode [ 114.157387][ T4793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.206641][ T4838] MPTCP: kernel_bind error, err=-98 [ 114.319385][ T4793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.504170][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 115.562163][ T4793] team0: Port device team_slave_0 added [ 115.600100][ T4793] team0: Port device team_slave_1 added [ 116.292955][ T4865] tmpfs: Unknown parameter 'grpquota' [ 116.320510][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 116.884436][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 117.158041][ T4793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.170693][ T4793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.310098][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.337489][ T4793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.204691][ T4226] Bluetooth: hci5: command 0x0419 tx timeout [ 119.556134][ T4793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.573368][ T4793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.580333][ T1111] usb 2-1: config 0 has no interfaces? [ 119.724729][ T4793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.080177][ T1111] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.090254][ T1111] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.253463][ T4793] device hsr_slave_0 entered promiscuous mode [ 120.268876][ T1111] usb 2-1: config 0 descriptor?? [ 120.300116][ T1111] usb 2-1: can't set config #0, error -71 [ 120.307026][ T4793] device hsr_slave_1 entered promiscuous mode [ 120.356731][ T1111] usb 2-1: USB disconnect, device number 2 [ 120.726241][ T4884] loop1: detected capacity change from 0 to 512 [ 120.821159][ T4793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.828934][ T4793] Cannot create hsr debugfs directory [ 121.533953][ T4884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 121.542894][ T4884] System zones: 1-3, 19-19, 35-38 [ 122.671573][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.682738][ T4884] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.890395][ T4901] vhci_hcd vhci_hcd.0: failed to lookup sock [ 124.740405][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 125.021613][ T4793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.229188][ T4793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.253297][ T4793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.341396][ T4793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.402888][ T4507] device hsr_slave_0 left promiscuous mode [ 125.440765][ T4507] device hsr_slave_1 left promiscuous mode [ 125.454934][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.523727][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.664769][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.776024][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.896139][ T4507] device bridge_slave_1 left promiscuous mode [ 125.995498][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.300661][ T4507] device bridge_slave_0 left promiscuous mode [ 126.307167][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.417581][ T4507] device veth1_macvtap left promiscuous mode [ 126.431045][ T4507] device veth0_macvtap left promiscuous mode [ 126.437297][ T4507] device veth1_vlan left promiscuous mode [ 126.451510][ T4507] device veth0_vlan left promiscuous mode [ 127.343610][ T4507] team0 (unregistering): Port device team_slave_1 removed [ 127.368236][ T4507] team0 (unregistering): Port device team_slave_0 removed [ 127.548407][ T4507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.607853][ T4507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.393468][ T4507] bond0 (unregistering): Released all slaves [ 128.554218][ T4934] device macsec0 entered promiscuous mode [ 128.986579][ T4793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.126531][ T4793] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.150626][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.166175][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.205296][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.795630][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.812457][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.819573][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.079712][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.333163][ T4969] loop3: detected capacity change from 0 to 32768 [ 130.589356][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.610756][ T4969] XFS: ikeep mount option is deprecated. [ 130.627965][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.670919][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.678041][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.687575][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.698466][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.719083][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.743812][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.754195][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.764534][ T4969] XFS (loop3): Mounting V5 Filesystem [ 130.775031][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.784589][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.823318][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.852854][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.948637][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.993405][ T4793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.006943][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.014797][ T4969] XFS (loop3): Ending clean mount [ 131.024674][ T4969] XFS (loop3): Quotacheck needed: Please wait. [ 131.042115][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.099017][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.155931][ T4969] XFS (loop3): Quotacheck: Done. [ 131.200300][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 131.320215][ T4233] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.350369][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.373485][ T4184] XFS (loop3): Unmounting Filesystem [ 131.430096][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.458011][ T4233] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.486067][ T4233] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.544845][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.704071][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.735408][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.816450][ T4793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.860392][ T4233] usb 5-1: GET_CAPABILITIES returned 0 [ 131.865930][ T4233] usbtmc 5-1:16.0: can't read capabilities [ 132.132619][ T4293] usb 5-1: USB disconnect, device number 3 [ 132.586097][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.596538][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.696047][ T5015] sched: RT throttling activated [ 135.568568][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.596857][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.021739][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.059550][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.154410][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.215147][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.287698][ T4793] device veth0_vlan entered promiscuous mode [ 136.426358][ T4793] device veth1_vlan entered promiscuous mode [ 136.516882][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.529579][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.569774][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.645023][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.660883][ T4793] device veth0_macvtap entered promiscuous mode [ 136.761311][ T4793] device veth1_macvtap entered promiscuous mode [ 136.851876][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.877245][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.948227][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.007879][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.041563][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.080371][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.091247][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.102199][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.112580][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.123714][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.135695][ T4793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.877009][ T5035] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 137.911331][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.951523][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.959030][ T5035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 137.982882][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.000077][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.038437][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.043288][ T5035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.205345][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.275534][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.312329][ T5044] loop4: detected capacity change from 0 to 32768 [ 138.320898][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.331223][ T4793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.343414][ T4793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.368653][ T4793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.402873][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.430816][ T5044] XFS: ikeep mount option is deprecated. [ 138.455511][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.568311][ T4793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.592780][ T4793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.604108][ T5044] XFS (loop4): Mounting V5 Filesystem [ 138.660120][ T4793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.726853][ T4793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.780117][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.897479][ T5044] XFS (loop4): Ending clean mount [ 138.925201][ T5044] XFS (loop4): Quotacheck needed: Please wait. [ 139.220460][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 139.514722][ T5044] XFS (loop4): Quotacheck: Done. [ 139.636720][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.650624][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.670385][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.703401][ T1111] usb 2-1: config 0 descriptor?? [ 139.871611][ T5053] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.892445][ T1111] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 139.930861][ T4497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.960936][ T4497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.007210][ T4182] XFS (loop4): Unmounting Filesystem [ 140.023933][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.084469][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.113750][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.155577][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.510052][ T5065] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.462998][ T4255] usb 2-1: USB disconnect, device number 3 [ 142.560238][ T5065] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 142.592616][ T5065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.866722][ T5101] loop1: detected capacity change from 0 to 32768 [ 142.881675][ T5065] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.891183][ T5065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.903522][ T5065] usb 5-1: config 0 descriptor?? [ 142.930821][ T5101] XFS: ikeep mount option is deprecated. [ 142.951263][ T5065] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.052451][ T5101] XFS (loop1): Mounting V5 Filesystem [ 143.176665][ T5101] XFS (loop1): Ending clean mount [ 143.183764][ T5101] XFS (loop1): Quotacheck needed: Please wait. [ 143.310204][ T5101] XFS (loop1): Quotacheck: Done. [ 143.735500][ T5122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.194'. [ 143.761626][ T4181] XFS (loop1): Unmounting Filesystem [ 144.041123][ T5125] loop5: detected capacity change from 0 to 32768 [ 144.110666][ T5125] XFS: ikeep mount option is deprecated. [ 144.248403][ T4255] usb 5-1: USB disconnect, device number 4 [ 144.297551][ T5125] XFS (loop5): Mounting V5 Filesystem [ 144.546269][ T5152] kvm [5132]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 144.636455][ T5125] XFS (loop5): Ending clean mount [ 144.644785][ T5125] XFS (loop5): Quotacheck needed: Please wait. [ 144.670432][ T5152] kvm [5132]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 144.858166][ T5125] XFS (loop5): Quotacheck: Done. [ 145.936842][ T4793] XFS (loop5): Unmounting Filesystem [ 145.946432][ T5164] loop0: detected capacity change from 0 to 1024 [ 146.734674][ T5164] EXT4-fs (loop0): filesystem is read-only [ 146.754985][ T5164] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 146.790163][ T5164] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 146.870280][ T5164] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.201: inode #1: comm syz.0.201: iget: illegal inode # [ 147.116417][ T5180] loop3: detected capacity change from 0 to 32768 [ 147.149630][ T5164] EXT4-fs (loop0): no journal found [ 147.156550][ T5183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'. [ 147.179573][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 147.189211][ T5180] XFS: ikeep mount option is deprecated. [ 147.196262][ T5164] EXT4-fs (loop0): can't get journal size [ 147.284721][ T5164] EXT4-fs error (device loop0): ext4_fill_super:4839: inode #2: comm syz.0.201: iget: special inode unallocated [ 147.350554][ T5164] EXT4-fs (loop0): get root inode failed [ 147.356233][ T5164] EXT4-fs (loop0): mount failed [ 147.381403][ T5180] XFS (loop3): Mounting V5 Filesystem [ 148.988104][ T5180] XFS (loop3): Ending clean mount [ 149.010407][ T5180] XFS (loop3): Quotacheck needed: Please wait. [ 149.101017][ T5180] XFS (loop3): Quotacheck: Done. [ 149.257945][ T5220] loop4: detected capacity change from 0 to 32768 [ 149.311023][ T5220] XFS: ikeep mount option is deprecated. [ 149.398687][ T5225] overlayfs: missing 'lowerdir' [ 150.323033][ T5220] XFS (loop4): Mounting V5 Filesystem [ 150.342960][ T4184] XFS (loop3): Unmounting Filesystem [ 150.355276][ T5222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.362719][ T5222] IPv6: NLM_F_CREATE should be set when creating new route [ 150.445835][ T5222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.488495][ T5220] XFS (loop4): Ending clean mount [ 150.495349][ T5220] XFS (loop4): Quotacheck needed: Please wait. [ 150.527129][ T5220] XFS (loop4): Quotacheck: Done. [ 150.776210][ T4182] XFS (loop4): Unmounting Filesystem [ 153.100053][ T4293] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.419318][ T4293] usb 4-1: Using ep0 maxpacket: 8 [ 154.636184][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.680382][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 154.709703][ T4293] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.909554][ T5297] loop1: detected capacity change from 0 to 32768 [ 154.920225][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.960925][ T4293] usb 4-1: config 0 descriptor?? [ 154.970741][ T5297] XFS: ikeep mount option is deprecated. [ 155.100290][ T4293] usb 4-1: can't set config #0, error -71 [ 155.122786][ T4293] usb 4-1: USB disconnect, device number 2 [ 155.204130][ T5297] XFS (loop1): Mounting V5 Filesystem [ 155.368484][ T5290] device gre1 entered promiscuous mode [ 155.562606][ T5297] XFS (loop1): Ending clean mount [ 155.599952][ T5297] XFS (loop1): Quotacheck needed: Please wait. [ 155.867069][ T5297] XFS (loop1): Quotacheck: Done. [ 155.953840][ T5323] overlayfs: missing 'lowerdir' [ 158.237503][ T4181] XFS (loop1): Unmounting Filesystem [ 159.899437][ T26] audit: type=1326 audit(1754004256.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 160.755520][ T26] audit: type=1326 audit(1754004256.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.017862][ T26] audit: type=1326 audit(1754004256.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.041271][ T26] audit: type=1326 audit(1754004256.900:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.063827][ T26] audit: type=1326 audit(1754004256.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.086422][ T26] audit: type=1326 audit(1754004256.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.109195][ T26] audit: type=1326 audit(1754004256.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.133303][ T26] audit: type=1326 audit(1754004256.910:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.170289][ T26] audit: type=1326 audit(1754004256.910:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 161.288078][ T26] audit: type=1326 audit(1754004256.910:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fea34820b69 code=0x7ffc0000 [ 163.741005][ T5391] loop4: detected capacity change from 0 to 32768 [ 163.810621][ T5391] XFS: ikeep mount option is deprecated. [ 164.384960][ T5395] block device autoloading is deprecated and will be removed. [ 164.487705][ T5391] XFS (loop4): Mounting V5 Filesystem [ 164.955743][ T5391] XFS (loop4): Ending clean mount [ 164.964419][ T5391] XFS (loop4): Quotacheck needed: Please wait. [ 165.330592][ T5391] XFS (loop4): Quotacheck: Done. [ 166.605678][ T4182] XFS (loop4): Unmounting Filesystem [ 168.365135][ T5431] loop3: detected capacity change from 0 to 1024 [ 169.242444][ T5431] EXT4-fs (loop3): filesystem is read-only [ 169.272748][ T5431] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 170.113038][ T5431] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 170.190258][ T5431] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: comm syz.3.251: inode #1: comm syz.3.251: iget: illegal inode # [ 170.248621][ T5431] EXT4-fs (loop3): no journal found [ 170.264303][ T5431] EXT4-fs (loop3): can't get journal size [ 170.335259][ T5431] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.251: iget: special inode unallocated [ 170.955456][ T5431] EXT4-fs (loop3): get root inode failed [ 171.843363][ T5431] EXT4-fs (loop3): mount failed [ 172.392487][ T5475] tmpfs: Bad value for 'mpol' [ 174.028232][ T5486] loop0: detected capacity change from 0 to 512 [ 174.130483][ T5486] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.216991][ T5486] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 175.210298][ T5486] loop0: detected capacity change from 0 to 8 [ 175.430567][ T5486] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 177.224288][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop0 [ 177.534715][ T5521] loop5: detected capacity change from 0 to 32768 [ 177.580614][ T5521] XFS: ikeep mount option is deprecated. [ 177.644601][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 177.657433][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 177.676608][ T1325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.853627][ T5521] XFS (loop5): Mounting V5 Filesystem [ 178.070545][ T1325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.151662][ T1325] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.353891][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.722259][ T1325] usb 5-1: config 0 descriptor?? [ 178.778422][ T1325] pwc: Askey VC010 type 2 USB webcam detected. [ 178.922863][ T5521] XFS (loop5): Ending clean mount [ 178.932010][ T5521] XFS (loop5): Quotacheck needed: Please wait. [ 179.111315][ T5521] XFS (loop5): Quotacheck: Done. [ 179.220274][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 179.770203][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.832380][ T4793] XFS (loop5): Unmounting Filesystem [ 179.995612][ T5507] chnl_net:caif_netlink_parms(): no params data found [ 180.045732][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 180.080145][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.171177][ T7] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 180.186459][ T7] usb 1-1: config 0 has no interface number 0 [ 180.203176][ T7] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.256317][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.306512][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.370328][ T7] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 180.372678][ T5507] device bridge_slave_0 entered promiscuous mode [ 180.399710][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.421667][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.428261][ T7] usb 1-1: Product: syz [ 180.440127][ T7] usb 1-1: Manufacturer: syz [ 180.455883][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.459487][ T7] usb 1-1: SerialNumber: syz [ 180.468030][ T4233] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.479381][ T4233] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.487155][ T5507] device bridge_slave_1 entered promiscuous mode [ 180.498462][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.508634][ T7] usb 1-1: config 0 descriptor?? [ 180.523996][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 180.548968][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 180.563089][ T7] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 180.584115][ T7] em28xx 1-1:0.132: Video interface 132 found: [ 180.639069][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.663508][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.710317][ T4233] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.726329][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.749304][ T5507] team0: Port device team_slave_0 added [ 180.764924][ T4233] usb 4-1: Product: syz [ 180.779490][ T4233] usb 4-1: Manufacturer: syz [ 180.786303][ T5507] team0: Port device team_slave_1 added [ 180.832025][ T5586] loop5: detected capacity change from 0 to 512 [ 180.857444][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 180.863070][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 180.883938][ T4233] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 180.888372][ T5586] EXT4-fs (loop5): Test dummy encryption mode enabled [ 180.897645][ T4233] cdc_wdm 4-1:1.0: Unknown control protocol [ 180.899184][ T5586] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 180.944450][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.966109][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.000613][ T7] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 181.005695][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.019746][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.040245][ T5586] loop5: detected capacity change from 0 to 8 [ 181.047019][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.097772][ T4199] udevd[4199]: incorrect cramfs checksum on /dev/loop5 [ 181.099090][ T5586] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 181.114627][ T1325] pwc: recv_control_msg error -71 req 02 val 2b00 [ 181.140451][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.158141][ T1325] pwc: recv_control_msg error -71 req 02 val 2700 [ 181.210145][ T1325] pwc: recv_control_msg error -71 req 02 val 2c00 [ 181.230408][ T1325] pwc: recv_control_msg error -71 req 04 val 1000 [ 181.258006][ T5586] cramfs: Error -3 while decompressing! [ 181.263659][ T5586] cramfs: ffffffff961e6042(26)->ffff8880719e9000(4096) [ 181.270566][ T5586] cramfs: Error -3 while decompressing! [ 181.276113][ T5586] cramfs: ffffffff961e605c(16)->ffff88805ae9e000(4096) [ 181.283082][ T5586] cramfs: Error -3 while decompressing! [ 181.288623][ T5586] cramfs: ffffffff961e6042(26)->ffff8880719e9000(4096) [ 181.296149][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 181.296175][ T26] audit: type=1800 audit(1754004278.260:74): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.280" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 181.322349][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 181.403279][ T4199] udevd[4199]: incorrect cramfs checksum on /dev/loop5 [ 181.416504][ T1325] pwc: recv_control_msg error -71 req 04 val 1300 [ 181.439066][ T5507] device hsr_slave_0 entered promiscuous mode [ 181.457514][ T5507] device hsr_slave_1 entered promiscuous mode [ 181.509174][ T4199] udevd[4199]: incorrect cramfs checksum on /dev/loop5 [ 181.518658][ T1325] pwc: recv_control_msg error -71 req 04 val 1400 [ 181.580543][ T1325] pwc: recv_control_msg error -71 req 02 val 2000 [ 181.610332][ T1325] pwc: recv_control_msg error -71 req 02 val 2100 [ 181.666934][ T1325] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.712654][ T1325] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.720108][ T7] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 181.726892][ T7] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 181.789001][ T1325] pwc: recv_control_msg error -71 req 02 val 2400 [ 182.150194][ T7] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 182.559935][ T1325] pwc: recv_control_msg error -71 req 02 val 2600 [ 182.590141][ T1325] pwc: recv_control_msg error -71 req 02 val 2900 [ 182.620919][ T7] em28xx 1-1:0.132: analog set to bulk mode. [ 182.641214][ T1325] pwc: recv_control_msg error -71 req 02 val 2800 [ 182.669451][ T4241] em28xx 1-1:0.132: Registering V4L2 extension [ 182.687274][ T1325] pwc: recv_control_msg error -71 req 04 val 1100 [ 182.707321][ T7] usb 1-1: USB disconnect, device number 2 [ 182.740847][ T1325] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.750948][ T7] em28xx 1-1:0.132: Disconnecting em28xx [ 182.792557][ T5615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'. [ 182.803788][ T1325] pwc: Registered as video103. [ 182.836046][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 182.863627][ T1325] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 183.025181][ T1325] usb 5-1: USB disconnect, device number 5 [ 183.123399][ T5628] loop4: detected capacity change from 0 to 32768 [ 183.170749][ T5628] XFS: ikeep mount option is deprecated. [ 183.211777][ T4241] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 183.243283][ T4241] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 183.255046][ T5507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.274378][ T5507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.291838][ T5507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.296668][ T4241] em28xx 1-1:0.132: No AC97 audio processor [ 183.314091][ T5507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.366938][ T5628] XFS (loop4): Mounting V5 Filesystem [ 183.369285][ T4241] usb 1-1: Decoder not found [ 183.377687][ T4241] em28xx 1-1:0.132: failed to create media graph [ 183.380447][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 183.636529][ T4241] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 184.342403][ T4241] em28xx 1-1:0.132: Remote control support is not available for this card. [ 184.597653][ T5628] XFS (loop4): Ending clean mount [ 184.604636][ T5628] XFS (loop4): Quotacheck needed: Please wait. [ 184.700237][ T7] em28xx 1-1:0.132: Closing input extension [ 184.735278][ T7] em28xx 1-1:0.132: Freeing device [ 184.748793][ T5628] XFS (loop4): Quotacheck: Done. [ 185.460043][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 185.946082][ T4182] XFS (loop4): Unmounting Filesystem [ 186.047773][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.099673][ T5507] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.106676][ T4241] Bluetooth: hci0: command 0x0406 tx timeout [ 186.130955][ T4241] Bluetooth: hci3: command 0x0406 tx timeout [ 186.149882][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.150383][ T4241] Bluetooth: hci4: command 0x0406 tx timeout [ 186.160514][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.212707][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.268378][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.322046][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.329162][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.387106][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.439006][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.501576][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.508677][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.889391][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.920526][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.106743][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.141445][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.165456][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.178087][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.192526][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.206870][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.226957][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.240238][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.294612][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.555209][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.724163][ T5507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.698490][ T5735] hub 6-0:1.0: USB hub found [ 188.706882][ T5735] hub 6-0:1.0: 1 port detected [ 189.373860][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 189.691667][ T5742] team0: No ports can be present during mode change [ 189.701653][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 189.775090][ T5742] team0 (unregistering): Port device team_slave_0 removed [ 189.830032][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 189.852673][ T5742] team0 (unregistering): Port device team_slave_1 removed [ 190.092249][ T5746] loop5: detected capacity change from 0 to 32768 [ 190.130517][ T5746] XFS: ikeep mount option is deprecated. [ 190.137486][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.152637][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.180422][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.200229][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.224523][ T5754] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.261306][ T5746] XFS (loop5): Mounting V5 Filesystem [ 190.387963][ T5746] XFS (loop5): Ending clean mount [ 190.421870][ T7] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 190.444269][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.466617][ T7] usb 1-1: Product: syz [ 190.471387][ T7] usb 1-1: Manufacturer: syz [ 190.476008][ T7] usb 1-1: SerialNumber: syz [ 190.498575][ T5746] XFS (loop5): Quotacheck needed: Please wait. [ 190.573370][ T7] omninet 1-1:1.0: required endpoints missing [ 190.609788][ T5746] XFS (loop5): Quotacheck: Done. [ 191.854595][ T5065] usb 1-1: USB disconnect, device number 3 [ 192.090020][ T5782] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 192.097021][ T5782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.109987][ T5782] vhci_hcd vhci_hcd.0: Device attached [ 192.258809][ T5784] vhci_hcd: connection closed [ 192.265262][ T4793] XFS (loop5): Unmounting Filesystem [ 192.275499][ T4504] vhci_hcd: stop threads [ 192.283311][ T4504] vhci_hcd: release socket [ 192.287810][ T4504] vhci_hcd: disconnect device [ 192.298291][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.307747][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.356898][ T5507] device veth0_vlan entered promiscuous mode [ 192.365877][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.376777][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.403223][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.412003][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.467918][ T5507] device veth1_vlan entered promiscuous mode [ 192.506057][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.515299][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.539773][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.555801][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.572154][ T5507] device veth0_macvtap entered promiscuous mode [ 192.592219][ T5507] device veth1_macvtap entered promiscuous mode [ 192.650031][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.669459][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.687483][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.699030][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.715374][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.746083][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.762743][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.774048][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.784157][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.794928][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.806497][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.903971][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.920162][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.928528][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.945311][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.972290][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.991713][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.029665][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.169232][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.294938][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.407206][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.463074][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.553899][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.674248][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.755550][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.807228][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.816445][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.860674][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.926404][ T5507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.948674][ T5507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.972109][ T5507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.988303][ T5507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.027070][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.033448][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423990][ T4501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.467459][ T4501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.814939][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.815103][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.873333][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.951265][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.956582][ T5836] loop6: detected capacity change from 0 to 32768 [ 196.460675][ T5836] XFS: ikeep mount option is deprecated. [ 196.494177][ T5839] loop4: detected capacity change from 0 to 512 [ 196.555558][ T5836] XFS (loop6): Mounting V5 Filesystem [ 197.497974][ T5839] EXT4-fs (loop4): Test dummy encryption mode enabled [ 197.579215][ T5839] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 197.592727][ T5836] XFS (loop6): Ending clean mount [ 197.599588][ T5836] XFS (loop6): Quotacheck needed: Please wait. [ 197.683195][ T5836] XFS (loop6): Quotacheck: Done. [ 197.750107][ T5836] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 197.759142][ T5836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 197.791141][ T5854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.328'. [ 197.818617][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 197.956299][ T5507] XFS (loop6): Unmounting Filesystem [ 198.990606][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 199.132233][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 199.593284][ T4294] Bluetooth: hci1: command 0x0409 tx timeout [ 200.571700][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.609343][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.619266][ T5851] device bridge_slave_0 entered promiscuous mode [ 200.628847][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.636248][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.644515][ T5851] device bridge_slave_1 entered promiscuous mode [ 200.668532][ T5892] loop0: detected capacity change from 0 to 512 [ 200.728647][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.740845][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.774216][ T5851] team0: Port device team_slave_0 added [ 200.783210][ T5851] team0: Port device team_slave_1 added [ 200.906588][ T5892] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.918597][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.925652][ T5892] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 201.023113][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.104027][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.133656][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.144327][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.170238][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.254129][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.373291][ T5898] loop0: detected capacity change from 0 to 32768 [ 201.426772][ T5898] XFS: ikeep mount option is deprecated. [ 201.472900][ T5851] device hsr_slave_0 entered promiscuous mode [ 201.502428][ T5898] XFS (loop0): Mounting V5 Filesystem [ 201.521898][ T5851] device hsr_slave_1 entered promiscuous mode [ 201.634641][ T4293] Bluetooth: hci1: command 0x041b tx timeout [ 201.691251][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.730369][ T5851] Cannot create hsr debugfs directory [ 201.748179][ T5898] XFS (loop0): Ending clean mount [ 201.755338][ T5898] XFS (loop0): Quotacheck needed: Please wait. [ 201.841738][ T5898] XFS (loop0): Quotacheck: Done. [ 201.916856][ T5918] overlayfs: missing 'lowerdir' [ 202.170317][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.341'. [ 202.298674][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.341'. [ 202.376683][ T4194] XFS (loop0): Unmounting Filesystem [ 202.434095][ T4241] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 202.690124][ T4241] usb 7-1: Using ep0 maxpacket: 32 [ 202.739620][ T5851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.762335][ T5851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.782614][ T5851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.810228][ T4241] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 202.832149][ T4241] usb 7-1: config 0 has no interface number 0 [ 202.840737][ T5851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.867857][ T4241] usb 7-1: config 0 interface 180 has no altsetting 0 [ 203.156237][ T4241] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 203.180468][ T4241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.195186][ T4241] usb 7-1: Product: syz [ 203.205747][ T4241] usb 7-1: Manufacturer: syz [ 203.218855][ T4241] usb 7-1: SerialNumber: syz [ 203.228169][ T4241] usb 7-1: config 0 descriptor?? [ 203.385626][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.438598][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.448924][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.470935][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.636769][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.648674][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.709763][ T5935] xt_HMARK: proto mask must be zero with L3 mode [ 203.839631][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 204.401460][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.408581][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.521474][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.566628][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.612153][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.619393][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.707280][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.745217][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.786929][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.856543][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.945560][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.084631][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.162149][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.212298][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.287809][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.347562][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.390923][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.480682][ T4241] kvaser_usb 7-1:0.180: Cannot get usb endpoint(s) [ 205.493565][ T4241] usb 7-1: USB disconnect, device number 2 [ 205.501095][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.556270][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.636135][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.830325][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 207.316910][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.415870][ T5961] loop6: detected capacity change from 0 to 512 [ 207.436316][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.445127][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 207.467285][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.535940][ T5961] EXT4-fs (loop6): Test dummy encryption mode enabled [ 207.548462][ T5961] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. [ 208.869233][ T5972] loop4: detected capacity change from 0 to 32768 [ 208.908496][ T5980] tipc: Started in network mode [ 208.910956][ T5972] XFS: ikeep mount option is deprecated. [ 208.913609][ T5980] tipc: Node identity 92f4ca16fbe5, cluster identity 4711 [ 208.946160][ T5980] tipc: Enabled bearer , priority 0 [ 209.261660][ T5972] XFS (loop4): Mounting V5 Filesystem [ 209.282318][ T5980] device syzkaller0 entered promiscuous mode [ 209.727631][ T5980] tipc: Resetting bearer [ 209.768040][ T5972] XFS (loop4): Ending clean mount [ 209.783660][ T5972] XFS (loop4): Quotacheck needed: Please wait. [ 210.130048][ T4225] tipc: Node number set to 1762773526 [ 210.135920][ T5972] XFS (loop4): Quotacheck: Done. [ 210.245290][ T5997] overlayfs: missing 'lowerdir' [ 210.441977][ T5976] tipc: Resetting bearer [ 210.485859][ T5976] tipc: Disabling bearer [ 210.603472][ T4182] XFS (loop4): Unmounting Filesystem [ 210.698817][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.721669][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.902633][ T6010] netlink: 60 bytes leftover after parsing attributes in process `syz.6.359'. [ 210.913237][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.359'. [ 210.940666][ T5851] device veth0_vlan entered promiscuous mode [ 210.966914][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.998327][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.043040][ T5851] device veth1_vlan entered promiscuous mode [ 211.211788][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.220014][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.228554][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.289725][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.355476][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.444236][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.456255][ T5851] device veth0_macvtap entered promiscuous mode [ 211.493821][ T5851] device veth1_macvtap entered promiscuous mode [ 211.681167][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.717439][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.762687][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 211.916776][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.927851][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.927932][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.933670][ T6025] loop4: detected capacity change from 0 to 512 [ 212.945987][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.986108][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.020111][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.065642][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.102058][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.144637][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.166887][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.209423][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.284460][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.327130][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.359872][ T6025] EXT4-fs (loop4): Test dummy encryption mode enabled [ 213.366826][ T6025] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 213.414223][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.451470][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.513106][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.540847][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.580017][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.623322][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.699691][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.726093][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.755191][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.778296][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.833977][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.869078][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.904957][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.945895][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.038034][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.076188][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.250937][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.266793][ T5851] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.277045][ T5851] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.290395][ T5851] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.309975][ T5851] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.835147][ T6037] loop6: detected capacity change from 0 to 32768 [ 214.920441][ T6037] XFS: ikeep mount option is deprecated. [ 216.597089][ T6037] XFS (loop6): Mounting V5 Filesystem [ 217.006502][ T6037] XFS (loop6): Ending clean mount [ 217.015961][ T6037] XFS (loop6): Quotacheck needed: Please wait. [ 217.212069][ T6037] XFS (loop6): Quotacheck: Done. [ 217.683616][ T6048] overlayfs: missing 'lowerdir' [ 217.984498][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.034024][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.062586][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.086733][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.236696][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.257576][ T5507] XFS (loop6): Unmounting Filesystem [ 218.430478][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.673346][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.372'. [ 219.920333][ T6081] loop6: detected capacity change from 0 to 512 [ 219.970343][ T6081] EXT4-fs (loop6): Test dummy encryption mode enabled [ 219.977163][ T6081] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. [ 219.999257][ T6084] netlink: 60 bytes leftover after parsing attributes in process `syz.4.374'. [ 220.028400][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 225.134178][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 225.360166][ T6112] sp0: Synchronizing with TNC [ 225.401052][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.383'. [ 226.268112][ T6127] loop7: detected capacity change from 0 to 512 [ 226.301065][ T6127] EXT4-fs (loop7): Test dummy encryption mode enabled [ 226.320166][ T6127] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 228.548052][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 228.687259][ T6158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.412753][ T6183] loop7: detected capacity change from 0 to 512 [ 231.470791][ T6183] EXT4-fs (loop7): Test dummy encryption mode enabled [ 231.494141][ T6183] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 234.840955][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.409'. [ 235.148052][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 235.371612][ T6223] loop6: detected capacity change from 0 to 32768 [ 235.473123][ T6223] XFS: ikeep mount option is deprecated. [ 236.371860][ T6223] XFS (loop6): Mounting V5 Filesystem [ 236.678592][ T6223] XFS (loop6): Ending clean mount [ 236.698760][ T6223] XFS (loop6): Quotacheck needed: Please wait. [ 237.110749][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 237.217038][ T6223] XFS (loop6): Quotacheck: Done. [ 238.971899][ T5507] XFS (loop6): Unmounting Filesystem [ 243.147053][ T6311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.400189][ T6310] loop5: detected capacity change from 0 to 32768 [ 243.440543][ T6310] XFS: ikeep mount option is deprecated. [ 243.470052][ T6314] vivid-001: disconnect [ 243.653471][ T6310] XFS (loop5): Mounting V5 Filesystem [ 243.672889][ T6316] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.758257][ T6321] netlink: 'syz.6.433': attribute type 10 has an invalid length. [ 243.772429][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.433'. [ 243.801633][ T6310] XFS (loop5): Ending clean mount [ 243.808811][ T6310] XFS (loop5): Quotacheck needed: Please wait. [ 243.840607][ T6310] XFS (loop5): Quotacheck: Done. [ 244.204146][ T6321] team0: Failed to send options change via netlink (err -105) [ 244.247078][ T6321] team0: Port device geneve0 added [ 244.356220][ T6316] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.453596][ T4793] XFS (loop5): Unmounting Filesystem [ 244.524589][ T6316] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.746751][ T6316] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.944187][ T6338] loop4: detected capacity change from 0 to 512 [ 244.965922][ T6316] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.051449][ T6316] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.103996][ T6338] EXT4-fs (loop4): Test dummy encryption mode enabled [ 245.147674][ T6338] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 245.149083][ T6316] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.221939][ T6338] loop4: detected capacity change from 0 to 8 [ 246.273566][ T6313] vivid-001: reconnect [ 246.282671][ T6338] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 246.312486][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop4 [ 246.326615][ T6338] cramfs: Error -3 while decompressing! [ 246.332547][ T6338] cramfs: ffffffff961ea042(26)->ffff8880719e8000(4096) [ 246.339431][ T6338] cramfs: Error -3 while decompressing! [ 246.345085][ T6338] cramfs: ffffffff961ea05c(16)->ffff8880719e9000(4096) [ 246.352025][ T6338] cramfs: Error -3 while decompressing! [ 246.357581][ T6338] cramfs: ffffffff961ea042(26)->ffff8880719e8000(4096) [ 246.366443][ T26] audit: type=1800 audit(1754004343.330:75): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.436" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 246.403066][ T6316] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.541457][ T6316] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.796177][ T6316] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.658622][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 249.116618][ T6388] md2: error: failed to get bitmap file [ 252.494840][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.7.454'. [ 252.504174][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.454'. [ 254.214902][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 255.462869][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.469323][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.993106][ T6460] loop0: detected capacity change from 0 to 32768 [ 258.048784][ T6460] XFS: ikeep mount option is deprecated. [ 258.975070][ T6460] XFS (loop0): Mounting V5 Filesystem [ 259.199022][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.474'. [ 259.257222][ T6460] XFS (loop0): Ending clean mount [ 259.286734][ T6460] XFS (loop0): Quotacheck needed: Please wait. [ 259.413424][ T6460] XFS (loop0): Quotacheck: Done. [ 260.839504][ T4194] XFS (loop0): Unmounting Filesystem [ 264.800218][ T6534] loop0: detected capacity change from 0 to 32768 [ 264.880661][ T6534] XFS: ikeep mount option is deprecated. [ 265.034023][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.667263][ T6534] XFS (loop0): Mounting V5 Filesystem [ 265.720008][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 265.935919][ T6534] XFS (loop0): Ending clean mount [ 265.940266][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 266.033269][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58759, setting to 1024 [ 266.256471][ T6534] XFS (loop0): Quotacheck needed: Please wait. [ 266.411974][ T6547] capability: warning: `syz.6.493' uses 32-bit capabilities (legacy support in use) [ 266.460138][ T1108] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 266.474326][ T6534] XFS (loop0): Quotacheck: Done. [ 267.220752][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.170441][ T1108] usb 5-1: Product: syz [ 268.256367][ T1108] usb 5-1: Manufacturer: syz [ 268.476257][ T1108] usb 5-1: config 0 descriptor?? [ 268.999738][ T1108] usb 5-1: can't set config #0, error -71 [ 269.430859][ T1108] usb 5-1: USB disconnect, device number 6 [ 270.518061][ T4194] XFS (loop0): Unmounting Filesystem [ 272.670555][ T6586] vivid-004: disconnect [ 272.841068][ T6585] vivid-004: reconnect [ 273.522918][ T23] usb 4-1: USB disconnect, device number 3 [ 275.281867][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.510'. [ 281.681338][ T6652] loop4: detected capacity change from 0 to 32768 [ 281.711900][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'. [ 281.740809][ T6652] XFS: ikeep mount option is deprecated. [ 287.633152][ T6700] MPTCP: kernel_bind error, err=-99 [ 288.025239][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.538'. [ 293.965820][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.550'. [ 294.157476][ T6770] loop4: detected capacity change from 0 to 32768 [ 294.281631][ T6770] XFS: ikeep mount option is deprecated. [ 295.963197][ T6770] XFS (loop4): Mounting V5 Filesystem [ 296.084952][ T6770] XFS (loop4): Ending clean mount [ 296.128969][ T6770] XFS (loop4): Quotacheck needed: Please wait. [ 296.365906][ T6770] XFS (loop4): Quotacheck: Done. [ 297.370217][ T4225] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 297.630332][ T4225] usb 1-1: Using ep0 maxpacket: 32 [ 297.790345][ T4225] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 297.809953][ T4225] usb 1-1: config 0 has no interface number 0 [ 297.816081][ T4225] usb 1-1: config 0 interface 180 has no altsetting 0 [ 297.838464][ T4182] XFS (loop4): Unmounting Filesystem [ 298.040074][ T4225] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f [ 298.826382][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.837132][ T4225] usb 1-1: Product: syz [ 298.841765][ T4225] usb 1-1: Manufacturer: syz [ 298.846450][ T4225] usb 1-1: SerialNumber: syz [ 298.864509][ T4225] usb 1-1: config 0 descriptor?? [ 300.009358][ T6816] xt_HMARK: proto mask must be zero with L3 mode [ 300.023442][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.565'. [ 301.077561][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'. [ 301.680678][ T4225] kvaser_usb 1-1:0.180: Cannot get usb endpoint(s) [ 301.738030][ T4225] usb 1-1: USB disconnect, device number 4 [ 302.576094][ T6838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.570'. [ 302.621016][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 304.194061][ T4225] Bluetooth: hci2: command 0x0406 tx timeout [ 304.258431][ T6845] block device autoloading is deprecated and will be removed. [ 305.893806][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.576'. [ 307.979383][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.578'. [ 313.789596][ T4293] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.327506][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 314.740134][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.590100][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.606587][ T4293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.650078][ T4293] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.691732][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 315.710965][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.740661][ T4293] usb 1-1: config 0 descriptor?? [ 316.249382][ T4293] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 316.905068][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.911444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.216772][ T6942] netlink: 60 bytes leftover after parsing attributes in process `syz.7.596'. [ 317.703153][ T4293] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 317.809432][ T4293] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 317.813055][ T6946] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 317.917439][ T4293] usb 1-1: USB disconnect, device number 5 [ 319.254297][ T6953] fido_id[6953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 320.574929][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 320.650032][ T4293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 320.702036][ T6979] device gre1 entered promiscuous mode [ 320.930109][ T4293] usb 1-1: Using ep0 maxpacket: 16 [ 321.070200][ T4293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.115822][ T4293] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.280638][ T4293] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.320968][ T4293] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.401349][ T4293] usb 1-1: Manufacturer: syz [ 321.436502][ T4293] usb 1-1: config 0 descriptor?? [ 321.524654][ T6986] hub 6-0:1.0: USB hub found [ 321.531242][ T6986] hub 6-0:1.0: 1 port detected [ 322.022461][ T6991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.610'. [ 324.123862][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 324.630048][ T1108] usb 1-1: USB disconnect, device number 6 [ 324.938442][ T7028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.623'. [ 325.431615][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.624'. [ 325.465011][ T7027] device gre1 entered promiscuous mode [ 327.419039][ T7055] ODEBUG: Out of memory. ODEBUG disabled [ 329.226515][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.640'. [ 329.938410][ T7078] device gre1 entered promiscuous mode [ 330.886034][ T7100] loop5: detected capacity change from 0 to 32768 [ 331.120411][ T7100] XFS: ikeep mount option is deprecated. [ 331.279005][ T7100] XFS (loop5): Mounting V5 Filesystem [ 331.857603][ T7120] hub 6-0:1.0: USB hub found [ 331.863059][ T7120] hub 6-0:1.0: 1 port detected [ 332.871074][ T7100] XFS (loop5): Ending clean mount [ 332.878015][ T7100] XFS (loop5): Quotacheck needed: Please wait. [ 332.945147][ T7100] XFS (loop5): Quotacheck: Done. [ 333.423164][ T26] audit: type=1800 audit(1754004430.390:76): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.645" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 333.442738][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.613860][ T4793] XFS (loop5): Unmounting Filesystem [ 338.566160][ T7167] hub 6-0:1.0: USB hub found [ 338.571141][ T7167] hub 6-0:1.0: 1 port detected [ 338.627736][ T7172] loop4: detected capacity change from 0 to 32768 [ 338.670582][ T7172] XFS: ikeep mount option is deprecated. [ 338.852817][ T7178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.664'. [ 339.729089][ T7172] XFS (loop4): Mounting V5 Filesystem [ 340.139153][ T7172] XFS (loop4): Ending clean mount [ 340.146673][ T7172] XFS (loop4): Quotacheck needed: Please wait. [ 340.746650][ T7172] XFS (loop4): Quotacheck: Done. [ 341.989782][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.670'. [ 342.045204][ T4182] XFS (loop4): Unmounting Filesystem [ 344.989297][ T7229] hub 6-0:1.0: USB hub found [ 345.000088][ T7229] hub 6-0:1.0: 1 port detected [ 345.618982][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 346.680847][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 346.792997][ T7247] netlink: 108 bytes leftover after parsing attributes in process `syz.7.684'. [ 346.823582][ T4193] Bluetooth: unknown link type 130 [ 348.977069][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 350.798134][ T7292] hub 6-0:1.0: USB hub found [ 350.803685][ T7292] hub 6-0:1.0: 1 port detected [ 351.580294][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 353.452913][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 353.664123][ T7330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.704'. [ 353.723287][ T4193] Bluetooth: unknown link type 130 [ 354.771118][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.707'. [ 355.780180][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 356.363781][ T7359] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 357.589255][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.718'. [ 359.505634][ T7402] loop5: detected capacity change from 0 to 1024 [ 359.568026][ T7402] EXT4-fs (loop5): filesystem is read-only [ 359.581023][ T7402] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 359.592066][ T7402] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 359.602368][ T7402] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: comm syz.5.724: inode #1: comm syz.5.724: iget: illegal inode # [ 359.618804][ T7402] EXT4-fs (loop5): no journal found [ 359.624448][ T7402] EXT4-fs (loop5): can't get journal size [ 359.650531][ T7402] EXT4-fs error (device loop5): ext4_fill_super:4839: inode #2: comm syz.5.724: iget: special inode unallocated [ 359.664416][ T7402] EXT4-fs (loop5): get root inode failed [ 359.670215][ T7402] EXT4-fs (loop5): mount failed [ 363.660220][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 365.248601][ T7459] loop6: detected capacity change from 0 to 1024 [ 366.423189][ T7459] EXT4-fs (loop6): filesystem is read-only [ 366.435048][ T7459] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 366.446519][ T7459] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 366.457248][ T7459] EXT4-fs error (device loop6): ext4_get_journal_inode:5158: comm syz.6.737: inode #1: comm syz.6.737: iget: illegal inode # [ 366.480061][ T7459] EXT4-fs (loop6): no journal found [ 366.485380][ T7459] EXT4-fs (loop6): can't get journal size [ 367.223146][ T7459] EXT4-fs error (device loop6): ext4_fill_super:4839: inode #2: comm syz.6.737: iget: special inode unallocated [ 367.242146][ T7459] EXT4-fs (loop6): get root inode failed [ 367.247897][ T7459] EXT4-fs (loop6): mount failed [ 368.743851][ T7475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.974732][ T7475] team0: No ports can be present during mode change [ 368.999489][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 369.480214][ T7475] team0 (unregistering): Port device team_slave_0 removed [ 369.581716][ T7475] team0 (unregistering): Port device team_slave_1 removed [ 369.747101][ T7475] team0 (unregistering): Port device geneve0 removed [ 371.941098][ T7500] loop5: detected capacity change from 0 to 1024 [ 373.170003][ T7500] EXT4-fs (loop5): filesystem is read-only [ 373.186651][ T7500] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 373.198009][ T7500] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 373.208168][ T7500] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: comm syz.5.751: inode #1: comm syz.5.751: iget: illegal inode # [ 373.230458][ T7500] EXT4-fs (loop5): no journal found [ 373.236589][ T7500] EXT4-fs (loop5): can't get journal size [ 373.256019][ T7500] EXT4-fs error (device loop5): ext4_fill_super:4839: inode #2: comm syz.5.751: iget: special inode unallocated [ 373.268836][ T7500] EXT4-fs (loop5): get root inode failed [ 373.274740][ T7500] EXT4-fs (loop5): mount failed [ 373.299895][ T7461] Bluetooth: hci2: command 0x2016 tx timeout [ 376.857610][ T7528] bridge0: port 3(team0) entered blocking state [ 376.863966][ T7528] bridge0: port 3(team0) entered disabled state [ 376.871628][ T7528] device team0 entered promiscuous mode [ 376.877207][ T7528] device team_slave_0 entered promiscuous mode [ 376.884226][ T7528] device team_slave_1 entered promiscuous mode [ 376.891096][ T7528] bridge0: port 3(team0) entered blocking state [ 376.897629][ T7528] bridge0: port 3(team0) entered forwarding state [ 377.880219][ T4225] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 378.320060][ T4225] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 378.329341][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.353961][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.380031][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.392506][ T7561] loop5: detected capacity change from 0 to 1024 [ 379.010421][ T7561] EXT4-fs (loop5): filesystem is read-only [ 379.028005][ T7561] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 379.039504][ T7561] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 379.049620][ T7561] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: comm syz.5.768: inode #1: comm syz.5.768: iget: illegal inode # [ 379.081994][ T7561] EXT4-fs (loop5): no journal found [ 379.087345][ T7561] EXT4-fs (loop5): can't get journal size [ 379.505345][ T7561] EXT4-fs error (device loop5): ext4_fill_super:4839: inode #2: comm syz.5.768: iget: special inode unallocated [ 379.518354][ T7561] EXT4-fs (loop5): get root inode failed [ 379.524160][ T7561] EXT4-fs (loop5): mount failed [ 379.546137][ T4233] Bluetooth: hci1: command 0x0405 tx timeout [ 380.008541][ T7565] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 381.151670][ T4225] usb 1-1: config 0 descriptor?? [ 381.169991][ T4225] usb 1-1: can't set config #0, error -71 [ 381.329951][ T4225] usb 1-1: USB disconnect, device number 7 [ 383.445875][ T7598] hub 6-0:1.0: USB hub found [ 383.460854][ T7598] hub 6-0:1.0: 1 port detected [ 385.404008][ T7613] wg1 speed is unknown, defaulting to 1000 [ 385.961773][ T7613] wg1 speed is unknown, defaulting to 1000 [ 386.052753][ T7613] wg1 speed is unknown, defaulting to 1000 [ 387.808960][ T7613] infiniband syz0: set active [ 387.826376][ T4226] wg1 speed is unknown, defaulting to 1000 [ 387.837885][ T7613] infiniband syz0: added wg1 [ 387.852392][ T7630] netlink: 108 bytes leftover after parsing attributes in process `syz.0.786'. [ 388.054637][ T7613] RDS/IB: syz0: added [ 388.098023][ T7613] smc: adding ib device syz0 with port count 1 [ 388.140168][ T7613] smc: ib device syz0 port 1 has pnetid [ 388.149211][ T5065] wg1 speed is unknown, defaulting to 1000 [ 388.174785][ T7613] wg1 speed is unknown, defaulting to 1000 [ 389.882987][ T7613] wg1 speed is unknown, defaulting to 1000 [ 390.249600][ T7613] wg1 speed is unknown, defaulting to 1000 [ 390.585499][ T7613] wg1 speed is unknown, defaulting to 1000 [ 391.799500][ T7613] wg1 speed is unknown, defaulting to 1000 [ 393.220003][ T7669] tmpfs: Unknown parameter 'grpquota' [ 393.749988][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 394.140689][ T7613] wg1 speed is unknown, defaulting to 1000 [ 396.007662][ T7613] wg1 speed is unknown, defaulting to 1000 [ 396.692223][ T7690] ksmbd: Unknown IPC event: 6, ignore. [ 398.894471][ T7613] wg1 speed is unknown, defaulting to 1000 [ 401.001262][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 401.083715][ T7717] device gre1 entered promiscuous mode [ 401.153029][ T7723] program syz.6.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.527003][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 409.855666][ T7801] netlink: 84 bytes leftover after parsing attributes in process `syz.6.836'. [ 411.678254][ T7821] MPTCP: kernel_bind error, err=-98 [ 412.377186][ T7829] hub 6-0:1.0: USB hub found [ 412.387425][ T7829] hub 6-0:1.0: 1 port detected [ 413.448142][ T7842] fuse: Unknown parameter 'fd0x0000000000000003' [ 413.456939][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.847'. [ 416.056024][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.854'. [ 420.477525][ T7916] fuse: Unknown parameter 'fd0x0000000000000003' [ 420.485786][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 421.539337][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.870'. [ 422.059492][ T7933] tipc: Started in network mode [ 422.070308][ T7933] tipc: Node identity 62e5822c4a9f, cluster identity 4711 [ 422.103679][ T7933] tipc: Enabled bearer , priority 0 [ 422.113771][ T7935] MPTCP: kernel_bind error, err=-98 [ 422.149110][ T7936] device syzkaller0 entered promiscuous mode [ 422.210443][ T7933] tipc: Resetting bearer [ 422.250441][ T7932] tipc: Resetting bearer [ 422.300656][ T7932] tipc: Disabling bearer [ 426.428112][ T7956] tmpfs: Unknown parameter 'grpquota' [ 426.436354][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.880'. [ 428.335003][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 430.259086][ T8001] netlink: 88 bytes leftover after parsing attributes in process `syz.5.891'. [ 435.370947][ T8045] loop5: detected capacity change from 0 to 1024 [ 436.669896][ T8045] EXT4-fs (loop5): filesystem is read-only [ 436.676450][ T8045] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 436.688066][ T8045] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 436.698362][ T8045] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: comm syz.5.902: inode #1: comm syz.5.902: iget: illegal inode # [ 436.718789][ T8045] EXT4-fs (loop5): no journal found [ 436.724147][ T8045] EXT4-fs (loop5): can't get journal size [ 436.770306][ T8045] EXT4-fs error (device loop5): ext4_fill_super:4839: inode #2: comm syz.5.902: iget: special inode unallocated [ 436.783793][ T8045] EXT4-fs (loop5): get root inode failed [ 436.790243][ T8045] EXT4-fs (loop5): mount failed [ 437.885916][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 437.904277][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'. [ 439.792849][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.985617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.760821][ T4241] Bluetooth: hci1: command 0x0405 tx timeout [ 442.223839][ T8106] hub 6-0:1.0: USB hub found [ 442.229367][ T8106] hub 6-0:1.0: 1 port detected [ 443.678247][ T8113] tipc: Started in network mode [ 443.700107][ T8113] tipc: Node identity 36a22cfad711, cluster identity 4711 [ 443.725018][ T8113] tipc: Enabled bearer , priority 0 [ 443.754711][ T8114] device syzkaller0 entered promiscuous mode [ 443.868552][ T8113] tipc: Resetting bearer [ 443.945324][ T8112] tipc: Resetting bearer [ 444.918712][ T1325] tipc: Node number set to 3786616058 [ 444.927965][ T8112] tipc: Disabling bearer [ 452.096892][ T8185] tipc: Enabled bearer , priority 0 [ 452.131845][ T8185] device syzkaller0 entered promiscuous mode [ 452.186759][ T8185] tipc: Resetting bearer [ 452.274284][ T8181] tipc: Resetting bearer [ 452.339051][ T8181] tipc: Disabling bearer [ 455.094557][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.947'. [ 455.898290][ T8204] vivid-000: disconnect [ 457.752102][ T8202] vivid-000: reconnect [ 461.268886][ T8252] tipc: Started in network mode [ 461.301023][ T8252] tipc: Node identity eee427a845a6, cluster identity 4711 [ 461.308287][ T8252] tipc: Enabled bearer , priority 0 [ 461.347546][ T8253] device syzkaller0 entered promiscuous mode [ 461.379528][ T8252] tipc: Resetting bearer [ 461.442694][ T8251] tipc: Resetting bearer [ 461.507887][ T8251] tipc: Disabling bearer [ 461.813389][ T8257] bridge0: port 3(team0) entered blocking state [ 461.819986][ T8257] bridge0: port 3(team0) entered disabled state [ 461.827690][ T8257] device team0 entered promiscuous mode [ 461.833350][ T8257] device team_slave_0 entered promiscuous mode [ 461.839627][ T8257] device team_slave_1 entered promiscuous mode [ 461.846287][ T8257] bridge0: port 3(team0) entered blocking state [ 461.852622][ T8257] bridge0: port 3(team0) entered forwarding state [ 464.116988][ T8270] vivid-003: disconnect [ 465.306863][ T8269] vivid-003: reconnect [ 465.472738][ T8286] MPTCP: addr_signal error, add_addr=1, echo=0 [ 468.371897][ T8325] blktrace: Concurrent blktraces are not allowed on sg0 [ 468.511401][ T8329] Device name cannot be null; rc = [-22] [ 470.573291][ T8343] MPTCP: kernel_bind error, err=-98 [ 471.747452][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 471.802612][ T8361] blktrace: Concurrent blktraces are not allowed on sg0 [ 476.127757][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.135382][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.149243][ T8397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.903128][ T8421] usb usb8: usbfs: process 8421 (syz.0.1013) did not claim interface 0 before use [ 483.669860][ T4293] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 483.919850][ T4293] usb 1-1: Using ep0 maxpacket: 8 [ 484.039915][ T4293] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 484.199979][ T4293] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 484.211358][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.224820][ T4293] usb 1-1: Product: syz [ 484.229009][ T4293] usb 1-1: Manufacturer: syz [ 484.239953][ T4293] usb 1-1: SerialNumber: syz [ 484.247215][ T4293] usb 1-1: config 0 descriptor?? [ 484.292634][ T4293] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 484.303106][ T4293] usb 1-1: setting power ON [ 484.309213][ T4293] dvb-usb: bulk message failed: -22 (2/0) [ 484.327177][ T4293] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.387979][ T4293] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 484.407248][ T4293] usb 1-1: media controller created [ 484.496025][ T8476] dvb-usb: bulk message failed: -22 (3/0) [ 484.505693][ T4293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.650066][ T8476] cxusb: i2c wr: len=79 is too big! [ 484.650066][ T8476] [ 485.083094][ T4293] usb 1-1: selecting invalid altsetting 6 [ 485.089660][ T4293] usb 1-1: digital interface selection failed (-22) [ 485.097829][ T4293] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 485.460362][ T4293] usb 1-1: setting power OFF [ 485.460560][ T4293] dvb-usb: bulk message failed: -22 (2/0) [ 485.460634][ T4293] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 485.460667][ T4293] (NULL device *): no alternate interface [ 485.514953][ T4293] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 485.519484][ T4293] usb 1-1: USB disconnect, device number 8 [ 490.513030][ T8544] tipc: Enabled bearer , priority 0 [ 490.545339][ T8544] device syzkaller0 entered promiscuous mode [ 490.757781][ T8544] tipc: Resetting bearer [ 490.779623][ T8550] tmpfs: Unknown parameter 'grpquota' [ 490.787280][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 491.747157][ T4293] tipc: Node number set to 2873239464 [ 491.824326][ T8543] tipc: Resetting bearer [ 491.879305][ T8543] tipc: Disabling bearer [ 496.529462][ T26] audit: type=1326 audit(1754004593.490:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.1065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea34820b69 code=0x0 [ 496.906929][ T8621] hub 6-0:1.0: USB hub found [ 496.919918][ T8621] hub 6-0:1.0: 1 port detected [ 500.165442][ T8647] loop6: detected capacity change from 0 to 1024 [ 500.474266][ T8647] EXT4-fs (loop6): filesystem is read-only [ 500.481981][ T8647] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 500.493013][ T8647] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 500.503272][ T8647] EXT4-fs error (device loop6): ext4_get_journal_inode:5158: comm syz.6.1075: inode #1: comm syz.6.1075: iget: illegal inode # [ 500.521192][ T8647] EXT4-fs (loop6): no journal found [ 500.526528][ T8647] EXT4-fs (loop6): can't get journal size [ 501.222815][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.229462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.435243][ T8647] EXT4-fs error (device loop6): ext4_fill_super:4839: inode #2: comm syz.6.1075: iget: special inode unallocated [ 501.449563][ T8647] EXT4-fs (loop6): get root inode failed [ 501.455346][ T8647] EXT4-fs (loop6): mount failed [ 503.316152][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1079'. [ 504.133932][ T8670] netlink: 165 bytes leftover after parsing attributes in process `syz.7.1082'. [ 505.283191][ T26] audit: type=1326 audit(1754004602.250:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.5.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4399b69 code=0x0 [ 505.346068][ T8683] input: syz1 as /devices/virtual/input/input16 [ 506.125907][ T8705] loop0: detected capacity change from 0 to 1024 [ 506.163877][ T8705] EXT4-fs (loop0): filesystem is read-only [ 506.170592][ T8705] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 506.181480][ T8705] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 506.191160][ T8705] EXT4-fs error (device loop0): ext4_get_journal_inode:5158: comm syz.0.1093: inode #1: comm syz.0.1093: iget: illegal inode # [ 506.208156][ T8705] EXT4-fs (loop0): no journal found [ 506.214178][ T8705] EXT4-fs (loop0): can't get journal size [ 506.235293][ T8705] EXT4-fs error (device loop0): ext4_fill_super:4839: inode #2: comm syz.0.1093: iget: special inode unallocated [ 506.247815][ T8705] EXT4-fs (loop0): get root inode failed [ 506.253504][ T8705] EXT4-fs (loop0): mount failed [ 508.655184][ T26] audit: type=1326 audit(1754004605.300:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8723 comm="syz.6.1100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec6741fb69 code=0x0 [ 510.111835][ T8759] loop6: detected capacity change from 0 to 1024 [ 510.144033][ T8759] EXT4-fs (loop6): filesystem is read-only [ 510.158592][ T8759] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 510.169556][ T8759] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 510.179239][ T8759] EXT4-fs error (device loop6): ext4_get_journal_inode:5158: comm syz.6.1109: inode #1: comm syz.6.1109: iget: illegal inode # [ 510.195761][ T8759] EXT4-fs (loop6): no journal found [ 510.201056][ T8759] EXT4-fs (loop6): can't get journal size [ 510.209078][ T8759] EXT4-fs error (device loop6): ext4_fill_super:4839: inode #2: comm syz.6.1109: iget: special inode unallocated [ 510.231324][ T8759] EXT4-fs (loop6): get root inode failed [ 510.237013][ T8759] EXT4-fs (loop6): mount failed [ 511.342034][ T8780] rdma_rxe: already configured on wg1 [ 513.349845][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 513.990385][ T4294] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.013078][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.045044][ T4294] usb 6-1: Product: syz [ 514.062119][ T4294] usb 6-1: Manufacturer: syz [ 514.088238][ T4294] usb 6-1: SerialNumber: syz [ 515.700060][ T4294] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 516.228307][ T4294] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 516.303497][ T8831] rdma_rxe: rxe_register_device failed with error -23 [ 516.328292][ T8831] rdma_rxe: failed to add wg1 [ 516.795064][ T4294] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 516.820071][ T4294] usb 6-1: USB disconnect, device number 2 [ 516.828415][ T4294] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 518.013670][ T8847] vivid-000: disconnect [ 518.397021][ T8860] hub 6-0:1.0: USB hub found [ 518.410426][ T8860] hub 6-0:1.0: 1 port detected [ 519.378895][ T8862] MPTCP: kernel_bind error, err=-98 [ 519.491899][ T8846] vivid-000: reconnect [ 519.889852][ T8504] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 520.504291][ T8882] tipc: Started in network mode [ 520.509350][ T8882] tipc: Node identity e6bb35ffad4b, cluster identity 4711 [ 520.521188][ T8882] tipc: Enabled bearer , priority 0 [ 520.528684][ T8882] device syzkaller0 entered promiscuous mode [ 520.553977][ T8882] tipc: Resetting bearer [ 520.570042][ T8881] tipc: Resetting bearer [ 520.706731][ T8881] tipc: Disabling bearer [ 520.750742][ T8504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.779877][ T8504] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.810131][ T8891] rdma_rxe: rxe_register_device failed with error -23 [ 520.849620][ T8891] rdma_rxe: failed to add wg1 [ 520.870342][ T8504] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.882388][ T8504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.890930][ T8504] usb 1-1: SerialNumber: syz [ 520.950060][ T5738] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 521.199944][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 521.252697][ T8504] usb 1-1: 0:2 : does not exist [ 521.277188][ T8504] usb 1-1: USB disconnect, device number 9 [ 521.320006][ T5738] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.350273][ T5738] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.493843][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.527964][ T8901] netlink: 296 bytes leftover after parsing attributes in process `syz.6.1151'. [ 521.530125][ T5738] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.680038][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.688571][ T5738] usb 6-1: Product: syz [ 521.692882][ T5738] usb 6-1: Manufacturer: syz [ 521.697566][ T5738] usb 6-1: SerialNumber: syz [ 523.881650][ T8917] vivid-001: disconnect [ 523.959464][ T5738] usb 6-1: cannot find UAC_HEADER [ 524.508329][ T5738] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 524.542956][ T5738] usb 6-1: USB disconnect, device number 3 [ 524.673652][ T8928] tipc: Enabled bearer , priority 0 [ 524.686211][ T8928] device syzkaller0 entered promiscuous mode [ 524.706969][ T8915] vivid-001: reconnect [ 524.719455][ T8928] tipc: Resetting bearer [ 524.740537][ T8924] tipc: Resetting bearer [ 524.812758][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.018398][ T8924] tipc: Disabling bearer [ 526.709926][ T8954] rdma_rxe: rxe_register_device failed with error -23 [ 526.720031][ T8954] rdma_rxe: failed to add wg1 [ 528.085777][ T8974] hub 6-0:1.0: USB hub found [ 528.087946][ T8974] hub 6-0:1.0: 1 port detected [ 528.142770][ T8975] MPTCP: kernel_bind error, err=-98 [ 528.812040][ T8977] fuse: Unknown parameter '00000000000000000000' [ 529.704393][ T8982] tipc: Enabled bearer , priority 0 [ 529.740743][ T8982] device syzkaller0 entered promiscuous mode [ 530.175991][ T8979] tipc: Resetting bearer [ 530.607814][ T8979] tipc: Disabling bearer [ 532.515409][ T9018] loop7: detected capacity change from 0 to 1024 [ 532.521934][ T4294] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 532.540080][ T9018] EXT4-fs (loop7): filesystem is read-only [ 532.546589][ T9018] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 532.557498][ T9018] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 532.567559][ T9018] EXT4-fs error (device loop7): ext4_get_journal_inode:5158: comm syz.7.1187: inode #1: comm syz.7.1187: iget: illegal inode # [ 532.583636][ T9018] EXT4-fs (loop7): no journal found [ 532.588963][ T9018] EXT4-fs (loop7): can't get journal size [ 533.699604][ T9018] EXT4-fs error (device loop7): ext4_fill_super:4839: inode #2: comm syz.7.1187: iget: special inode unallocated [ 533.714266][ T9018] EXT4-fs (loop7): get root inode failed [ 533.720281][ T9018] EXT4-fs (loop7): mount failed [ 533.969894][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 534.190257][ T4294] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 534.864277][ T4294] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 534.884445][ T4294] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 534.893677][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.903658][ T4294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.928200][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 534.969505][ T4294] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 535.035411][ T9034] tipc: Enabled bearer , priority 0 [ 535.043347][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.073170][ T9034] device syzkaller0 entered promiscuous mode [ 535.130871][ T9033] tipc: Resetting bearer [ 535.147402][ T4294] usb 1-1: config 0 descriptor?? [ 535.194742][ T9033] tipc: Disabling bearer [ 535.256820][ T9040] vivid-004: disconnect [ 535.270897][ T4294] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 535.420920][ T4294] usb 1-1: USB disconnect, device number 10 [ 535.450410][ T4294] usblp0: removed [ 536.245288][ T9039] vivid-004: reconnect [ 536.504073][ T9055] binder: 9054:9055 ioctl c00c6211 2000000000c0 returned -22 [ 536.804486][ T9056] rdma_rxe: rxe_register_device failed with error -23 [ 536.819985][ T9056] rdma_rxe: failed to add wg1 [ 537.270571][ T9064] loop4: detected capacity change from 0 to 1024 [ 538.850199][ T9064] EXT4-fs (loop4): filesystem is read-only [ 538.856786][ T9064] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 538.868024][ T9064] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 538.879363][ T9064] EXT4-fs error (device loop4): ext4_get_journal_inode:5158: comm syz.4.1201: inode #1: comm syz.4.1201: iget: illegal inode # [ 538.894561][ T9064] EXT4-fs (loop4): no journal found [ 538.900129][ T9064] EXT4-fs (loop4): can't get journal size [ 538.934598][ T9064] EXT4-fs error (device loop4): ext4_fill_super:4839: inode #2: comm syz.4.1201: iget: special inode unallocated [ 538.947597][ T9064] EXT4-fs (loop4): get root inode failed [ 538.953387][ T9064] EXT4-fs (loop4): mount failed [ 540.729690][ T9090] vivid-004: disconnect [ 540.736236][ T9087] tipc: Enabled bearer , priority 0 [ 540.795331][ T9087] device syzkaller0 entered promiscuous mode [ 540.887368][ T9082] tipc: Resetting bearer [ 541.041966][ T9082] tipc: Disabling bearer [ 542.597975][ T9089] vivid-004: reconnect [ 543.752144][ T9114] blktrace: Concurrent blktraces are not allowed on sg0 [ 544.049819][ T9115] loop7: detected capacity change from 0 to 1024 [ 545.298613][ T9115] EXT4-fs (loop7): filesystem is read-only [ 545.307685][ T9115] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 545.318735][ T9115] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 545.329349][ T9115] EXT4-fs error (device loop7): ext4_get_journal_inode:5158: comm syz.7.1218: inode #1: comm syz.7.1218: iget: illegal inode # [ 545.351365][ T9115] EXT4-fs (loop7): no journal found [ 545.356670][ T9115] EXT4-fs (loop7): can't get journal size [ 545.408120][ T9115] EXT4-fs error (device loop7): ext4_fill_super:4839: inode #2: comm syz.7.1218: iget: special inode unallocated [ 545.421650][ T9115] EXT4-fs (loop7): get root inode failed [ 545.427429][ T9115] EXT4-fs (loop7): mount failed [ 546.858134][ T9126] MPTCP: kernel_bind error, err=-98 [ 547.102880][ T9134] tipc: Enabled bearer , priority 0 [ 547.152919][ T9134] device syzkaller0 entered promiscuous mode [ 548.395741][ T9133] tipc: Resetting bearer [ 548.485191][ T9133] tipc: Disabling bearer [ 548.835817][ T9156] MPTCP: kernel_bind error, err=-98 [ 549.822805][ T9169] rdma_rxe: rxe_register_device failed with error -23 [ 549.844918][ T9169] rdma_rxe: failed to add wg1 [ 550.370408][ T9170] loop4: detected capacity change from 0 to 1024 [ 550.418621][ T9170] EXT4-fs (loop4): filesystem is read-only [ 550.425977][ T9170] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 550.437069][ T9170] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 550.447207][ T9170] EXT4-fs error (device loop4): ext4_get_journal_inode:5158: comm syz.4.1236: inode #1: comm syz.4.1236: iget: illegal inode # [ 550.464186][ T9170] EXT4-fs (loop4): no journal found [ 550.469479][ T9170] EXT4-fs (loop4): can't get journal size [ 550.969278][ T9170] EXT4-fs error (device loop4): ext4_fill_super:4839: inode #2: comm syz.4.1236: iget: special inode unallocated [ 550.983538][ T9170] EXT4-fs (loop4): get root inode failed [ 550.989273][ T9170] EXT4-fs (loop4): mount failed [ 552.797574][ T9182] tipc: Enabled bearer , priority 0 [ 552.805474][ T9182] device syzkaller0 entered promiscuous mode [ 552.862803][ T9181] tipc: Resetting bearer [ 552.896666][ T9181] tipc: Disabling bearer [ 554.335767][ T9213] loop0: detected capacity change from 0 to 1024 [ 558.127299][ T9237] tipc: Enabled bearer , priority 0 [ 558.151887][ T9237] device syzkaller0 entered promiscuous mode [ 558.241854][ T9236] tipc: Resetting bearer [ 558.336800][ T9236] tipc: Disabling bearer [ 559.489873][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 560.339823][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 560.460026][ T7] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 560.468278][ T7] usb 5-1: config 0 has no interface number 0 [ 560.478863][ T9269] cgroup: noprefix used incorrectly [ 560.501479][ T7] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 560.577899][ T7] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 561.260423][ T7] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 561.280059][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.288261][ T7] usb 5-1: Product: syz [ 561.292944][ T7] usb 5-1: Manufacturer: syz [ 561.297554][ T7] usb 5-1: SerialNumber: syz [ 561.307919][ T7] usb 5-1: config 0 descriptor?? [ 561.330116][ T9249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 561.346385][ T9249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 561.713564][ T7] asix: probe of 5-1:0.251 failed with error -71 [ 562.661542][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.668031][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.177815][ T7] usb 5-1: USB disconnect, device number 7 [ 563.977064][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 564.249929][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 564.370188][ T7] usb 5-1: config 13 has an invalid interface number: 249 but max is 1 [ 564.415926][ T7] usb 5-1: config 13 has an invalid interface number: 37 but max is 1 [ 564.587906][ T7] usb 5-1: config 13 has no interface number 0 [ 564.663739][ T7] usb 5-1: config 13 has no interface number 1 [ 564.679933][ T7] usb 5-1: config 13 interface 37 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 564.691853][ T7] usb 5-1: config 13 interface 249 has no altsetting 0 [ 564.698851][ T7] usb 5-1: config 13 interface 37 has no altsetting 0 [ 564.863228][ T7] usb 5-1: New USB device found, idVendor=0403, idProduct=e88f, bcdDevice=6c.94 [ 564.873309][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.882728][ T7] usb 5-1: Product: syz [ 565.205396][ T7] usb 5-1: Manufacturer: syz [ 565.210429][ T7] usb 5-1: SerialNumber: syz [ 565.569714][ T9326] tipc: Enabled bearer , priority 0 [ 565.591852][ T9326] tipc: Resetting bearer [ 565.605269][ T9325] tipc: Disabling bearer [ 565.663337][ T9329] input: syz1 as /devices/virtual/input/input19 [ 565.762880][ T9334] 9p: Unknown Cache mode f [ 565.770150][ T9335] blktrace: Concurrent blktraces are not allowed on sg0 [ 565.821815][ T7] ftdi_sio 5-1:13.249: FTDI USB Serial Device converter detected [ 565.842202][ T7] usb 5-1: Detected FT2232C [ 565.879976][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 565.920265][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 565.945566][ T7] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 566.011038][ T7] ftdi_sio 5-1:13.37: FTDI USB Serial Device converter detected [ 566.024661][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 566.035198][ T7] usb 5-1: Detected FT2232C [ 566.048017][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 566.061067][ T7] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 566.090363][ T7] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 566.104049][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 566.118619][ T7] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 566.164059][ T7] usb 5-1: USB disconnect, device number 8 [ 566.183981][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0x1 [ 566.232151][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 566.244018][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x1 [ 566.267220][ T7] ftdi_sio 5-1:13.249: device disconnected [ 566.294337][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x1 [ 566.312818][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x1 [ 566.316487][ T7] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 566.329304][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x1 [ 566.352744][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 566.365318][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0x1 [ 566.374441][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x1 [ 566.390545][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x1 [ 566.401657][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x1 [ 566.410750][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x1 [ 566.430570][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 566.537479][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x1 [ 566.573989][ T7] ftdi_sio 5-1:13.37: device disconnected [ 567.675070][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 567.706085][ T9363] device syzkaller0 entered promiscuous mode [ 567.718035][ T9344] kvm [9343]: vcpu1, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x1 [ 570.957871][ T9410] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1322'. [ 571.046396][ T9406] wg1 speed is unknown, defaulting to 1000 [ 571.286997][ T9420] bridge0: port 3(team0) entered blocking state [ 571.293366][ T9420] bridge0: port 3(team0) entered disabled state [ 571.301053][ T9420] device team0 entered promiscuous mode [ 571.306675][ T9420] device team_slave_0 entered promiscuous mode [ 571.313015][ T9420] device team_slave_1 entered promiscuous mode [ 571.319320][ T9420] device geneve0 entered promiscuous mode [ 571.325630][ T9420] bridge0: port 3(team0) entered blocking state [ 571.331932][ T9420] bridge0: port 3(team0) entered forwarding state [ 572.174199][ T9419] ------------[ cut here ]------------ [ 572.189883][ T9419] WARNING: CPU: 0 PID: 9419 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.206347][ T9419] Modules linked in: [ 572.210385][ T9419] CPU: 0 PID: 9419 Comm: syz.4.1326 Not tainted 5.15.189-syzkaller #0 [ 572.218546][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.229163][ T9419] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.249493][ T9419] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 572.283631][ T9419] RSP: 0018:ffffc90003a1fc30 EFLAGS: 00010283 [ 572.290263][ T9419] RAX: ffffffff810eefd4 RBX: ffff888071414000 RCX: 0000000000080000 [ 572.300071][ T9419] RDX: ffffc90005769000 RSI: 00000000000003f7 RDI: 00000000000003f8 [ 572.309620][ T9419] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 572.317940][ T9419] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff88805a1d2001 [ 572.326208][ T9419] R13: 1ffff1100e28281e R14: ffff8880714140f0 R15: ffff88805a1d2000 [ 572.340482][ T9419] FS: 00007fea326886c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 572.349887][ T9419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.359967][ T6044] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 572.365006][ T9419] CR2: 000000110c3f616c CR3: 0000000058b1b000 CR4: 00000000003526f0 [ 572.392940][ T9419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.407308][ T9419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.425747][ T9419] Call Trace: [ 572.429181][ T9419] [ 572.435699][ T9419] ? __lock_acquire+0x7c60/0x7c60 [ 572.446136][ T9419] kvm_vcpu_ioctl+0x887/0xb80 [ 572.454665][ T9419] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 572.464045][ T9419] ? bpf_lsm_file_ioctl+0x5/0x10 [ 572.470232][ T9419] ? security_file_ioctl+0x7c/0xa0 [ 572.475538][ T9419] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 572.481567][ T9419] __se_sys_ioctl+0xfa/0x170 [ 572.486333][ T9419] do_syscall_64+0x4c/0xa0 [ 572.493704][ T9419] ? clear_bhb_loop+0x30/0x80 [ 572.498615][ T9419] ? clear_bhb_loop+0x30/0x80 [ 572.507126][ T9419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.523213][ T9419] RIP: 0033:0x7fea34820b69 [ 572.527815][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.548031][ T9419] RSP: 002b:00007fea32688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.557993][ T9419] RAX: ffffffffffffffda RBX: 00007fea34a47fa0 RCX: 00007fea34820b69 [ 572.568999][ T9419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 572.577398][ T9419] RBP: 00007fea348a3df1 R08: 0000000000000000 R09: 0000000000000000 [ 572.585730][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.593859][ T9419] R13: 0000000000000000 R14: 00007fea34a47fa0 R15: 00007ffcde3ca188 [ 572.602507][ T9419] [ 572.605616][ T9419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 572.612895][ T9419] CPU: 0 PID: 9419 Comm: syz.4.1326 Not tainted 5.15.189-syzkaller #0 [ 572.621046][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.631085][ T9419] Call Trace: [ 572.634362][ T9419] [ 572.637279][ T9419] dump_stack_lvl+0x168/0x230 [ 572.641954][ T9419] ? show_regs_print_info+0x20/0x20 [ 572.647171][ T9419] ? load_image+0x3b0/0x3b0 [ 572.651678][ T9419] panic+0x2c9/0x7f0 [ 572.655570][ T9419] ? bpf_jit_dump+0xd0/0xd0 [ 572.660062][ T6044] usb 1-1: Using ep0 maxpacket: 16 [ 572.660074][ T9419] ? __warn+0x230/0x2b0 [ 572.669336][ T9419] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.675259][ T9419] __warn+0x248/0x2b0 [ 572.679282][ T9419] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.685085][ T9419] report_bug+0x1b7/0x2e0 [ 572.689494][ T9419] handle_bug+0x3a/0x70 [ 572.693636][ T9419] exc_invalid_op+0x16/0x40 [ 572.698129][ T9419] asm_exc_invalid_op+0x16/0x20 [ 572.702970][ T9419] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.709377][ T9419] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 572.728970][ T9419] RSP: 0018:ffffc90003a1fc30 EFLAGS: 00010283 [ 572.735041][ T9419] RAX: ffffffff810eefd4 RBX: ffff888071414000 RCX: 0000000000080000 [ 572.743007][ T9419] RDX: ffffc90005769000 RSI: 00000000000003f7 RDI: 00000000000003f8 [ 572.750968][ T9419] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 572.758926][ T9419] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff88805a1d2001 [ 572.766890][ T9419] R13: 1ffff1100e28281e R14: ffff8880714140f0 R15: ffff88805a1d2000 [ 572.774868][ T9419] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 572.780675][ T9419] ? __lock_acquire+0x7c60/0x7c60 [ 572.785703][ T9419] kvm_vcpu_ioctl+0x887/0xb80 [ 572.790376][ T9419] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 572.796030][ T9419] ? bpf_lsm_file_ioctl+0x5/0x10 [ 572.800983][ T9419] ? security_file_ioctl+0x7c/0xa0 [ 572.806084][ T9419] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 572.811719][ T9419] __se_sys_ioctl+0xfa/0x170 [ 572.816335][ T9419] do_syscall_64+0x4c/0xa0 [ 572.820763][ T9419] ? clear_bhb_loop+0x30/0x80 [ 572.825430][ T9419] ? clear_bhb_loop+0x30/0x80 [ 572.830096][ T9419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.835993][ T9419] RIP: 0033:0x7fea34820b69 [ 572.840423][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.860046][ T9419] RSP: 002b:00007fea32688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.868471][ T9419] RAX: ffffffffffffffda RBX: 00007fea34a47fa0 RCX: 00007fea34820b69 [ 572.876451][ T9419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 572.884414][ T9419] RBP: 00007fea348a3df1 R08: 0000000000000000 R09: 0000000000000000 [ 572.892390][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.900354][ T9419] R13: 0000000000000000 R14: 00007fea34a47fa0 R15: 00007ffcde3ca188 [ 572.908331][ T9419] [ 572.911578][ T9419] Kernel Offset: disabled [ 572.916150][ T9419] Rebooting in 86400 seconds..