last executing test programs: 5.981848373s ago: executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000580), 0x0) 5.860928202s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000300)="e9a8c6c37229fef72eb30bd66ecd37de639ff4faae8d1b2e7ba6ab9e978fe0143c758dfaad9911455f61ca", &(0x7f0000002500)}}, &(0x7f0000000200)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000000000000000000014000300"], 0x38}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 4.951564781s ago: executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x5, 0x2c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 4.951152851s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 4.417289673s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0xca0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_POLICE={0xc6c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cbe, 0x80000000, 0x10001, 0x4, 0x1, 0x10001, 0xb9, 0x5, 0x0, 0xb, 0x0, 0x5, 0x800, 0x3, 0xd0c8, 0x2, 0xfffffff8, 0x80000001, 0x6, 0x1, 0x9f72, 0xffffffff, 0x6e7c, 0x3, 0xfffffffc, 0x0, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x7, 0x9, 0x7, 0xe9d, 0x8, 0x0, 0x9, 0x0, 0x1, 0xffffffc5, 0x80, 0x40, 0x0, 0x10000, 0x3ff, 0x1ff, 0x6, 0x3, 0x0, 0x80, 0x0, 0x6, 0x22, 0x400, 0x5, 0x200, 0x4, 0x0, 0x2, 0x800, 0x14, 0x1, 0x1, 0x7fffffff, 0x0, 0x9, 0x8, 0xfdec, 0x0, 0x5, 0x200, 0x2, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0xd9, 0xfffffff8, 0x1f, 0x401, 0x3, 0x6a89, 0x4, 0x7fffffff, 0xffffff18, 0x0, 0x4, 0x200, 0x8, 0x1, 0x7, 0x2000, 0x9, 0x0, 0x5, 0x100, 0x9, 0x6, 0x1ff, 0x3, 0x2c, 0xffffff1c, 0x3, 0xfff, 0xffff, 0x0, 0x3, 0xddd2, 0x80000000, 0xff, 0x5, 0x9167, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x7, 0x8000, 0x7f, 0x1, 0x9, 0x6, 0xfffff001, 0x7, 0x7bc, 0x80, 0x1, 0x80, 0x8, 0x0, 0x0, 0x101, 0x7ff, 0x0, 0x0, 0xf59, 0x3, 0x7, 0x1, 0x7e30, 0x5a, 0xd55, 0x7fffffff, 0x3, 0x7, 0x6, 0x0, 0x80000000, 0x5c88, 0x1000, 0x2, 0x3, 0x20, 0x6, 0x178, 0x5, 0x1, 0x7, 0x100, 0xe4, 0x0, 0x3ff, 0x6, 0x6, 0xfffff7ac, 0x3, 0x7bf4d43, 0x22d4, 0x4c3, 0x7fffffff, 0x10001, 0x0, 0x800, 0x80, 0x7, 0x9d1, 0xdb, 0x9b0, 0x7, 0x0, 0xffffffff, 0x1, 0x5b7, 0x7, 0x7fff, 0x7f, 0x1, 0x8, 0x0, 0x7, 0x100, 0x7fff, 0x0, 0x0, 0xffffffff, 0xfffff0e3, 0x4, 0x40, 0x453, 0x80000001, 0x1, 0x1ff, 0x0, 0xa303, 0x3, 0x9, 0xd471, 0x0, 0xff, 0x8, 0x80000000, 0xdae9, 0x6d0, 0x7c000000, 0x2, 0x9, 0x3ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x7fffffff, 0x1dbc, 0x8, 0x5c07, 0x0, 0x6, 0x9, 0x8, 0x4, 0x3020, 0x6, 0x4, 0x2, 0x8, 0x0, 0x5, 0x3b50548b, 0x3, 0x8, 0x9, 0x0, 0x9, 0x5, 0x7, 0x3, 0xda6b, 0x4, 0x80000001, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4b, 0x0, 0x0, 0x0, 0xce32, 0x5, 0x3, 0x6, 0x4, 0x7, 0x3, 0x823, 0x7ff, 0x900, 0x5, 0x0, 0x9, 0x43cec422, 0x2, 0x2, 0x401, 0x100, 0x9, 0x0, 0x60000, 0x7, 0x4, 0x1ff, 0x1c1b, 0x77c, 0x6, 0x1, 0x0, 0x3, 0x13b0, 0x40, 0x9, 0xb2, 0x9, 0x5, 0x0, 0x8, 0x200, 0xffffff00, 0x1, 0xffff, 0x1, 0x6c0, 0x40, 0x0, 0x8, 0x101, 0x3, 0x2, 0x8, 0x8000, 0xffff0000, 0x8, 0x5, 0x0, 0x8, 0x8, 0x21, 0x1, 0x8, 0x1, 0x5, 0x0, 0xffffdac2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x4, 0x401, 0xffffffff, 0x7fffffff, 0x1f, 0xb2, 0x3, 0xefa1, 0xffffffc1, 0x40000000, 0x8000, 0xffff, 0xaa14, 0x9, 0x7, 0x865, 0x9, 0x5, 0xf1c, 0x3f, 0xffffffff, 0x800, 0x1ff, 0x7, 0x5, 0x0, 0x5a59, 0x7, 0x7fff, 0x71, 0x2, 0x2, 0x5, 0x101, 0x214c, 0x3f, 0x25, 0x1, 0x7d5, 0xff, 0x9, 0x7f, 0xfffffff8, 0xfffffffc, 0x80000000, 0x1, 0x74b, 0x80, 0x2b09, 0x70fb, 0x1f, 0x7, 0x1a836288, 0x8000, 0x0, 0x319cbc86, 0x3, 0x1, 0xd8, 0xfcf, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x80, 0x7f, 0x0, 0x8000, 0x4d, 0x4e, 0xb6c1, 0x1ff, 0xffff, 0xf47, 0x6fc5, 0x7fffffff, 0xbe, 0x4, 0x5, 0x3, 0xffff, 0x7fffffff, 0x80, 0x9, 0x400, 0x6, 0x10000, 0xffffffff, 0xffff, 0x401, 0x1, 0x400, 0xb41, 0x6, 0x4, 0x7, 0xfff, 0x5, 0x3, 0x1, 0x0, 0x0, 0x715, 0x9, 0x9, 0xf20d, 0x23, 0x400, 0xdd, 0x6, 0x10000, 0x1, 0x401, 0x345, 0x3, 0x1, 0x400, 0x7, 0x7ff, 0x2, 0xfffffeff, 0x2, 0x7, 0x65, 0x8, 0x7fffffff, 0x400, 0x0, 0x5, 0x1000, 0xffffff7f, 0x8, 0x9, 0xe07, 0x8001, 0x200, 0x1, 0xff, 0x5, 0x531bda26, 0x9, 0x0, 0x5, 0x0, 0x3f, 0x3471, 0x20, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x9, 0x57, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x4c00, 0x0, 0xfffffff7, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x0, 0xaf, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x6, 0x5, 0x0, 0xf2, 0x7ff, 0x6, 0x2, 0x8, 0x3, 0x3c5, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x80000001, 0xb87, 0x10000, 0x0, 0x0, 0xe2, 0x7, 0x4a7b827c, 0x1, 0x401, 0x7a6, 0x6, 0xffffffc1, 0x5, 0x0, 0x5, 0x7, 0x6, 0x0, 0x4, 0xffffffff, 0x7, 0x5, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x2, 0x5, 0x0, 0x9, 0x100, 0x0, 0x0, 0x1ff, 0x3, 0x6, 0x3, 0x6, 0x1, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x6, 0x3f, 0x10000, 0x9, 0xb16, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x9, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x8, 0x0, 0x0, 0x27b3, 0x0, 0x6, 0x0, 0x200, 0x10001, 0x0, 0x3ff, 0x101, 0x0, 0x1, 0x0, 0x4, 0xf957, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa2, 0x0, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x87d9, 0x2, 0x420, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x8, 0x3, 0x4, 0x69d, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x4, 0x0, 0x3, 0x3f, 0xf507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x8, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5695, 0x3, 0x2, {0x2, 0x1, 0xe8, 0xdb65, 0x40, 0x8}, {0x6, 0x0, 0x4, 0x1, 0x3, 0x9}, 0x195, 0x0, 0x20}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xca0}}, 0x0) 4.37289492s ago: executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x1}) stat(0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x8010, r2, 0x696c4000) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./control\x00', 0x110400, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0xfa, 0xc2d, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x90) rmdir(&(0x7f00000002c0)='./control\x00') r6 = socket$inet6(0xa, 0x802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) 4.279213074s ago: executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 4.23837984s ago: executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000580), 0x0) 4.214698854s ago: executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4.118465589s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f0000000380)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x5d0, &(0x7f0000000dc0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x248840, 0x11) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) renameat2(r3, &(0x7f0000000280)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r3, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 3.095317516s ago: executing program 2: syz_emit_ethernet(0x5a, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff00000000000003000000deff0000000200000000000000000000f5e1d1a4d290cad25b240e357e844d153e9e9304b27295c0e1293765d6ec52aa", 0x79}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 3.046569753s ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x5, 0x2c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 3.011096079s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 2.986800132s ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000831000/0x4000)=nil, 0x4000, 0x0) 2.876205649s ago: executing program 3: syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e04023c20"], 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.828526247s ago: executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2015}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x54d) semtimedop(r2, &(0x7f0000000240)=[{0x3, 0x40, 0x1800}, {0x0, 0x3, 0x1800}], 0x2, &(0x7f0000000280)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x48) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x51, 0x10, 0x0, 0xfffffc1a}, 0x15) 2.764751167s ago: executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0)=ANY=[], 0x4) write(r1, &(0x7f00000001c0)="94", 0x1) ppoll(&(0x7f0000000800)=[{r4}], 0x1, 0x0, 0x0, 0x0) tee(r0, r5, 0x81, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4) 2.74013489s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0xca0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_POLICE={0xc6c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cbe, 0x80000000, 0x10001, 0x4, 0x1, 0x10001, 0xb9, 0x5, 0x0, 0xb, 0x0, 0x5, 0x800, 0x3, 0xd0c8, 0x2, 0xfffffff8, 0x80000001, 0x6, 0x1, 0x9f72, 0xffffffff, 0x6e7c, 0x3, 0xfffffffc, 0x0, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x7, 0x9, 0x7, 0xe9d, 0x8, 0x0, 0x9, 0x0, 0x1, 0xffffffc5, 0x80, 0x40, 0x0, 0x10000, 0x3ff, 0x1ff, 0x6, 0x3, 0x0, 0x80, 0x0, 0x6, 0x22, 0x400, 0x5, 0x200, 0x4, 0x0, 0x2, 0x800, 0x14, 0x1, 0x1, 0x7fffffff, 0x0, 0x9, 0x8, 0xfdec, 0x0, 0x5, 0x200, 0x2, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0xd9, 0xfffffff8, 0x1f, 0x401, 0x3, 0x6a89, 0x4, 0x7fffffff, 0xffffff18, 0x0, 0x4, 0x200, 0x8, 0x1, 0x7, 0x2000, 0x9, 0x0, 0x5, 0x100, 0x9, 0x6, 0x1ff, 0x3, 0x2c, 0xffffff1c, 0x3, 0xfff, 0xffff, 0x0, 0x3, 0xddd2, 0x80000000, 0xff, 0x5, 0x9167, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x7, 0x8000, 0x7f, 0x1, 0x9, 0x6, 0xfffff001, 0x7, 0x7bc, 0x80, 0x1, 0x80, 0x8, 0x0, 0x0, 0x101, 0x7ff, 0x0, 0x0, 0xf59, 0x3, 0x7, 0x1, 0x7e30, 0x5a, 0xd55, 0x7fffffff, 0x3, 0x7, 0x6, 0x0, 0x80000000, 0x5c88, 0x1000, 0x2, 0x3, 0x20, 0x6, 0x178, 0x5, 0x1, 0x7, 0x100, 0xe4, 0x0, 0x3ff, 0x6, 0x6, 0xfffff7ac, 0x3, 0x7bf4d43, 0x22d4, 0x4c3, 0x7fffffff, 0x10001, 0x0, 0x800, 0x80, 0x7, 0x9d1, 0xdb, 0x9b0, 0x7, 0x0, 0xffffffff, 0x1, 0x5b7, 0x7, 0x7fff, 0x7f, 0x1, 0x8, 0x0, 0x7, 0x100, 0x7fff, 0x0, 0x0, 0xffffffff, 0xfffff0e3, 0x4, 0x40, 0x453, 0x80000001, 0x1, 0x1ff, 0x0, 0xa303, 0x3, 0x9, 0xd471, 0x0, 0xff, 0x8, 0x80000000, 0xdae9, 0x6d0, 0x7c000000, 0x2, 0x9, 0x3ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x7fffffff, 0x1dbc, 0x8, 0x5c07, 0x0, 0x6, 0x9, 0x8, 0x4, 0x3020, 0x6, 0x4, 0x2, 0x8, 0x0, 0x5, 0x3b50548b, 0x3, 0x8, 0x9, 0x0, 0x9, 0x5, 0x7, 0x3, 0xda6b, 0x4, 0x80000001, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4b, 0x0, 0x0, 0x0, 0xce32, 0x5, 0x3, 0x6, 0x4, 0x7, 0x3, 0x823, 0x7ff, 0x900, 0x5, 0x0, 0x9, 0x43cec422, 0x2, 0x2, 0x401, 0x100, 0x9, 0x0, 0x60000, 0x7, 0x4, 0x1ff, 0x1c1b, 0x77c, 0x6, 0x1, 0x0, 0x3, 0x13b0, 0x40, 0x9, 0xb2, 0x9, 0x5, 0x0, 0x8, 0x200, 0xffffff00, 0x1, 0xffff, 0x1, 0x6c0, 0x40, 0x0, 0x8, 0x101, 0x3, 0x2, 0x8, 0x8000, 0xffff0000, 0x8, 0x5, 0x0, 0x8, 0x8, 0x21, 0x1, 0x8, 0x1, 0x5, 0x0, 0xffffdac2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x4, 0x401, 0xffffffff, 0x7fffffff, 0x1f, 0xb2, 0x3, 0xefa1, 0xffffffc1, 0x40000000, 0x8000, 0xffff, 0xaa14, 0x9, 0x7, 0x865, 0x9, 0x5, 0xf1c, 0x3f, 0xffffffff, 0x800, 0x1ff, 0x7, 0x5, 0x0, 0x5a59, 0x7, 0x7fff, 0x71, 0x2, 0x2, 0x5, 0x101, 0x214c, 0x3f, 0x25, 0x1, 0x7d5, 0xff, 0x9, 0x7f, 0xfffffff8, 0xfffffffc, 0x80000000, 0x1, 0x74b, 0x80, 0x2b09, 0x70fb, 0x1f, 0x7, 0x1a836288, 0x8000, 0x0, 0x319cbc86, 0x3, 0x1, 0xd8, 0xfcf, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x80, 0x7f, 0x0, 0x8000, 0x4d, 0x4e, 0xb6c1, 0x1ff, 0xffff, 0xf47, 0x6fc5, 0x7fffffff, 0xbe, 0x4, 0x5, 0x3, 0xffff, 0x7fffffff, 0x80, 0x9, 0x400, 0x6, 0x10000, 0xffffffff, 0xffff, 0x401, 0x1, 0x400, 0xb41, 0x6, 0x4, 0x7, 0xfff, 0x5, 0x3, 0x1, 0x0, 0x0, 0x715, 0x9, 0x9, 0xf20d, 0x23, 0x400, 0xdd, 0x6, 0x10000, 0x1, 0x401, 0x345, 0x3, 0x1, 0x400, 0x7, 0x7ff, 0x2, 0xfffffeff, 0x2, 0x7, 0x65, 0x8, 0x7fffffff, 0x400, 0x0, 0x5, 0x1000, 0xffffff7f, 0x8, 0x9, 0xe07, 0x8001, 0x200, 0x1, 0xff, 0x5, 0x531bda26, 0x9, 0x0, 0x5, 0x0, 0x3f, 0x3471, 0x0, 0x7, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x9, 0x57, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x4c00, 0x0, 0xfffffff7, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x0, 0xaf, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x6, 0x5, 0x0, 0xf2, 0x7ff, 0x6, 0x2, 0x8, 0x3, 0x3c5, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x80000001, 0xb87, 0x10000, 0x0, 0x0, 0xe2, 0x7, 0x4a7b827c, 0x1, 0x401, 0x7a6, 0x6, 0xffffffc1, 0x5, 0x0, 0x5, 0x7, 0x6, 0x0, 0x4, 0xffffffff, 0x7, 0x5, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x2, 0x5, 0x0, 0x9, 0x100, 0x0, 0x0, 0x1ff, 0x3, 0x6, 0x3, 0x6, 0x1, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x6, 0x3f, 0x10000, 0x9, 0xb16, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x9, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x8, 0x0, 0x0, 0x27b3, 0x0, 0x6, 0x0, 0x200, 0x10001, 0x0, 0x3ff, 0x101, 0x0, 0x1, 0x0, 0x4, 0xf957, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa2, 0x0, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x87d9, 0x2, 0x420, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x8, 0x3, 0x4, 0x69d, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x4, 0x0, 0x3, 0x3f, 0xf507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x8, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5695, 0x3, 0x2, {0x2, 0x1, 0xe8, 0xdb65, 0x40, 0x8}, {0x6, 0x0, 0x4, 0x1, 0x3, 0x9}, 0x195, 0x0, 0x20}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xca0}}, 0x0) 2.181933366s ago: executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 2.180643026s ago: executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000580), 0x0) 2.09095685s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) 2.046709817s ago: executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x1}) stat(0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x8010, r2, 0x696c4000) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./control\x00', 0x110400, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0xfa, 0xc2d, &(0x7f0000000300)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUAGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4s6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdAFBGNnkrN7jHafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51j8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xB53yLlyJSeWKcj3hvm/OIR1MtivjLcvwvrqXJ6nrQva5c/lrjKzPXZ3vKdq8rH/H+cNeV4iHdH45syQfjgF+b6lFEq7rir6V7/80OAAAAAAAAAAAAAAAAAPfbkSjiM5Hilf/4k848z2pe+rGLg3848Ku9c8af/pD9lGWfj4ilYndzcg/niYEjaSSlhzyX+HFWjyL+NM//+9bDbgwAAAAAAAAAAAAAAAAAAMBjrYifRIoX3z2RlqN3TfH2zI3G1da16c6qsN21f7trpq+vr683UiebOcdzLuVczrmSczVnFLl+zmbO8ZxLOZdzruRczRmHcv2czZzjOZdyLudcybmaM2q5fs5mzvGcSzmXc67kXM0ZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N9ZSpIhoRoxHJ1f6H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNO9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM3famIH0eK/vrbdwY8j39f592d0yDe+ubGu8/WOnmo++HA+/1PHD92cXD4N57e6XXargEnL7dnbt1ujA0ND4/2bK7lb/9kz7aB/L3F/ek6EbHwxpuvt6anp+bv/UV5Cuyh+iP0ItUel556Ub2I2oFoxsPpO4+B8v7/XqT43Xf/s3vD79z/6/ErnXd37vDx8z/buP+/uHVHu7z/17bWy/f/8p6+3f3/yZ5tL+bfjfTVIuqLN+f6jkfUF95481T7ZuvG1I2pmfOnT395cPDL5073HY6oX29PT/W8ui+HCwAAAAAAAAAAAAAAAODBSUX8fqRo/XgtNSLidjVfa+Di4LOnnjkUh6r5Vpvmbb82evVS4+XZm3PzUwsLU5ONsZn2xOzk1G6/rl5N9xobGt6XznyoI/vc/iP1l2fn3phv3/jjxW0/P1q/dG1hcb41sf3HcSSKiGbvlpNVg8eGhqtGT7dbM1XVkW0n0390famI/4oUE+cb6fN5W57/v3WG/6b5/0tbd7RP8/8/0bOt/M6Uivh5pPidv3o6Pl+182jcdcxyub+LFCcvfC6Xi8NluW4bOs8V6MwMLMv+X6T4p19sLtudD/nkRtkzuz6wj4hy/I9Fiu//xXfjN/O2zc9/2H78j27d0T6N/1M9245uel7BnrtOHv9TkeKlJ9+O38rbPuj5H91nb5zIhe88n2Ofxv9TPdsG8vf+9v3pOgAAAAAAAAAAwCOtLxXx95Hih8O19ELetpu//ze5dUf79Pe/Pt2zbfL+rFf0oS/2fFABAAAA4IDoS0X8JFLcWHz7zhzqzfO/e+Z//t7G/M+htOXT6s/5fq16bsD9/PO/XgP5e8f33m0AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvp4NZ9/csf11FcixSv/81wul46X5brrwA9Uv9avzM6cujQ9PTvRWmxdm55qjM61JqbKuk9FirW//VyuW1Trq3fXm++s8b6xFvt8pBj+h27Zzlrs3bXJn9ooe6Ys+4lI8d//uLlsdx3rT22UPVuW/ZtI8fV/2b7s8Y2y58qy340UP/p6o1v2aFm2+3zUT2+UfX5ittiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b83l+/M5c/r//f1vK289c2e9f63uF2t8z9Qrf+/0+t7Wf+/eq7A0k7fCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxdWUsr/eX7jvrl9syt22NDw9tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP377TPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291sjoAjZuv35q8fn2hcfb5c5s+vj3wfv8TxwcuDj576plu2bGh4eHRnjK1vnv+9rukHbYfjiL+OlI8972fph/2RxSx92PxIefOfjtSdeJk1YmxoeGqI9Pt1sxi+eFI90AUEY2eSs3uMXoAY7EnzYilsvllg0+W3Ruda823rk1PNUZa84vtxfbszEjqtLbsTyOKuJAiliNitf/u3fVFEa9Hiu8cW0v/2h9xqHscvnhl9Kunz+7cjmIf+7gLZTsbfRHLxSMwZgdYfxTxz5HiZ++ciH/rj6hF5ye+EPFqmT+IeCs6453KE+N8xHvbnEc8mmpRxP+X439xLb3TX14PuteVy19rfGXm+mxP2e515ZG/PzxIB/zaVI8iflRd8dfSv/vvGgAAAAAAAAAAAAAAAOAAKeLXI8WL755I1fzgO3OK2zM3Gldb16Y70/q6c/+6c6bX19fXG6mTzZzjOZdyLudcybmaM4pcP2ezzPr6+nh+v5RzOedKztWccSjXz9nMOZ5zKedyzpWcqzmjluvnbOYcz7mUcznnSs7VnHFA5u4BAAAAAAAAAAAAAAAAAAAfL0X1T4pvf2Mtrfd31pcej06uWA/0Y++XAQAA//+jh/iG") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x90) rmdir(&(0x7f00000002c0)='./control\x00') r6 = socket$inet6(0xa, 0x802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) 1.970494838s ago: executing program 0: r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe1, 0x84, 0xd7, 0x20, 0x1f71, 0x3301, 0x33a8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9d, 0x0, 0x0, 0x5, 0xec, 0xbf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c000880040002400000000000000000f000014000000000000000000900030073797a32000000002800048008000240000000000800014000000000140003"], 0xd0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x0, 0x300) 1.266476346s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000300)="e9a8c6c37229fef72eb30bd66ecd37de639ff4faae8d1b2e7ba6ab9e978fe0143c758dfaad9911455f61ca", &(0x7f0000002500)}}, &(0x7f0000000200)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000000000000000000014000300"], 0x38}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) 956.423004ms ago: executing program 3: syz_emit_ethernet(0x5a, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff00000000000003000000deff0000000200000000000000000000f5e1d1a4d290cad25b240e357e844d153e9e9304b27295c0e1293765d6ec52aa", 0x79}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 853.320699ms ago: executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00006dbffc)=0x5, 0x2c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 110.617823ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 74.647129ms ago: executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 21.282667ms ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) 0s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0xca0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_POLICE={0xc6c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cbe, 0x80000000, 0x10001, 0x4, 0x1, 0x10001, 0xb9, 0x5, 0x0, 0xb, 0x0, 0x5, 0x800, 0x3, 0xd0c8, 0x2, 0xfffffff8, 0x80000001, 0x6, 0x1, 0x9f72, 0xffffffff, 0x6e7c, 0x3, 0xfffffffc, 0x0, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x7, 0x9, 0x7, 0xe9d, 0x8, 0x0, 0x9, 0x0, 0x1, 0xffffffc5, 0x80, 0x40, 0x0, 0x10000, 0x3ff, 0x1ff, 0x6, 0x3, 0x0, 0x80, 0x0, 0x6, 0x22, 0x400, 0x5, 0x200, 0x4, 0x0, 0x2, 0x800, 0x14, 0x1, 0x1, 0x7fffffff, 0x0, 0x9, 0x8, 0xfdec, 0x0, 0x5, 0x200, 0x2, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0xd9, 0xfffffff8, 0x1f, 0x401, 0x3, 0x6a89, 0x4, 0x7fffffff, 0xffffff18, 0x0, 0x4, 0x200, 0x8, 0x1, 0x7, 0x2000, 0x9, 0x0, 0x5, 0x100, 0x9, 0x6, 0x1ff, 0x3, 0x2c, 0xffffff1c, 0x3, 0xfff, 0xffff, 0x0, 0x3, 0xddd2, 0x80000000, 0xff, 0x5, 0x9167, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x7, 0x8000, 0x7f, 0x1, 0x9, 0x6, 0xfffff001, 0x7, 0x7bc, 0x80, 0x1, 0x80, 0x8, 0x0, 0x0, 0x101, 0x7ff, 0x0, 0x0, 0xf59, 0x3, 0x7, 0x1, 0x7e30, 0x5a, 0xd55, 0x7fffffff, 0x3, 0x7, 0x6, 0x0, 0x80000000, 0x5c88, 0x1000, 0x2, 0x3, 0x20, 0x6, 0x178, 0x5, 0x1, 0x7, 0x100, 0xe4, 0x0, 0x3ff, 0x6, 0x6, 0xfffff7ac, 0x3, 0x7bf4d43, 0x22d4, 0x4c3, 0x7fffffff, 0x10001, 0x0, 0x800, 0x80, 0x7, 0x9d1, 0xdb, 0x9b0, 0x7, 0x0, 0xffffffff, 0x1, 0x5b7, 0x7, 0x7fff, 0x7f, 0x1, 0x8, 0x0, 0x7, 0x100, 0x7fff, 0x0, 0x0, 0xffffffff, 0xfffff0e3, 0x4, 0x40, 0x453, 0x80000001, 0x1, 0x1ff, 0x0, 0xa303, 0x3, 0x9, 0xd471, 0x0, 0xff, 0x8, 0x80000000, 0xdae9, 0x6d0, 0x7c000000, 0x2, 0x9, 0x3ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x7fffffff, 0x1dbc, 0x8, 0x5c07, 0x0, 0x6, 0x9, 0x8, 0x4, 0x3020, 0x6, 0x4, 0x2, 0x8, 0x0, 0x5, 0x3b50548b, 0x3, 0x8, 0x9, 0x0, 0x9, 0x5, 0x7, 0x3, 0xda6b, 0x4, 0x80000001, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4b, 0x0, 0x0, 0x0, 0xce32, 0x5, 0x3, 0x6, 0x4, 0x7, 0x3, 0x823, 0x7ff, 0x900, 0x5, 0x0, 0x9, 0x43cec422, 0x2, 0x2, 0x401, 0x100, 0x9, 0x0, 0x60000, 0x7, 0x4, 0x1ff, 0x1c1b, 0x77c, 0x6, 0x1, 0x0, 0x3, 0x13b0, 0x40, 0x9, 0xb2, 0x9, 0x5, 0x0, 0x8, 0x200, 0xffffff00, 0x1, 0xffff, 0x1, 0x6c0, 0x40, 0x0, 0x8, 0x101, 0x3, 0x2, 0x8, 0x8000, 0xffff0000, 0x8, 0x5, 0x0, 0x8, 0x8, 0x21, 0x1, 0x8, 0x1, 0x5, 0x0, 0xffffdac2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x4, 0x401, 0xffffffff, 0x7fffffff, 0x1f, 0xb2, 0x3, 0xefa1, 0xffffffc1, 0x40000000, 0x8000, 0xffff, 0xaa14, 0x9, 0x7, 0x865, 0x9, 0x5, 0xf1c, 0x3f, 0xffffffff, 0x800, 0x1ff, 0x7, 0x5, 0x0, 0x5a59, 0x7, 0x7fff, 0x71, 0x2, 0x2, 0x5, 0x101, 0x214c, 0x3f, 0x25, 0x1, 0x7d5, 0xff, 0x9, 0x7f, 0xfffffff8, 0xfffffffc, 0x80000000, 0x1, 0x74b, 0x80, 0x2b09, 0x70fb, 0x1f, 0x7, 0x1a836288, 0x8000, 0x0, 0x319cbc86, 0x3, 0x1, 0xd8, 0xfcf, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0x9, 0x0, 0x80, 0x7f, 0x0, 0x8000, 0x4d, 0x4e, 0xb6c1, 0x1ff, 0xffff, 0xf47, 0x6fc5, 0x7fffffff, 0xbe, 0x4, 0x5, 0x3, 0xffff, 0x7fffffff, 0x80, 0x9, 0x400, 0x6, 0x10000, 0xffffffff, 0xffff, 0x401, 0x1, 0x400, 0xb41, 0x6, 0x4, 0x7, 0xfff, 0x5, 0x3, 0x1, 0x0, 0x0, 0x715, 0x9, 0x9, 0xf20d, 0x23, 0x400, 0xdd, 0x6, 0x10000, 0x1, 0x401, 0x345, 0x3, 0x1, 0x400, 0x7, 0x7ff, 0x2, 0xfffffeff, 0x2, 0x7, 0x65, 0x8, 0x7fffffff, 0x400, 0x0, 0x5, 0x1000, 0xffffff7f, 0x8, 0x9, 0xe07, 0x8001, 0x200, 0x1, 0xff, 0x5, 0x531bda26, 0x9, 0x0, 0x5, 0x0, 0x3f, 0x3471, 0x0, 0x7, 0x0, 0x400, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x9, 0x57, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0x4c00, 0x0, 0xfffffff7, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x0, 0xaf, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x6, 0x5, 0x0, 0xf2, 0x7ff, 0x6, 0x2, 0x8, 0x3, 0x3c5, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x80000001, 0xb87, 0x10000, 0x0, 0x0, 0xe2, 0x7, 0x4a7b827c, 0x1, 0x401, 0x7a6, 0x6, 0xffffffc1, 0x5, 0x0, 0x5, 0x7, 0x6, 0x0, 0x4, 0xffffffff, 0x7, 0x5, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x2, 0x5, 0x0, 0x9, 0x100, 0x0, 0x0, 0x1ff, 0x3, 0x6, 0x3, 0x6, 0x1, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x6, 0x3f, 0x10000, 0x9, 0xb16, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x9, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x8, 0x0, 0x0, 0x27b3, 0x0, 0x6, 0x0, 0x200, 0x10001, 0x0, 0x3ff, 0x101, 0x0, 0x1, 0x0, 0x4, 0xf957, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa2, 0x0, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x87d9, 0x2, 0x420, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x8, 0x3, 0x4, 0x69d, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x4, 0x0, 0x3, 0x3f, 0xf507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x8, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5695, 0x3, 0x2, {0x2, 0x1, 0xe8, 0xdb65, 0x40, 0x8}, {0x6, 0x0, 0x4, 0x1, 0x3, 0x9}, 0x195, 0x0, 0x20}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xca0}}, 0x0) kernel console output (not intermixed with test programs): ][ T5258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.100371][ T5258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.127460][ T5258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.234182][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.249520][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.299540][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.307584][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.313392][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.339251][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.792743][ T5538] loop0: detected capacity change from 0 to 4096 [ 143.908620][ T3562] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.168343][ T3562] usb 4-1: Using ep0 maxpacket: 32 [ 144.309621][ T3562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 144.381734][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.469453][ T3575] Bluetooth: hci3: command tx timeout [ 144.508511][ T3562] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 144.522935][ T3562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.531284][ T3562] usb 4-1: Product: syz [ 144.535586][ T3562] usb 4-1: Manufacturer: syz [ 144.551695][ T3562] usb 4-1: SerialNumber: syz [ 144.570095][ T3562] usb 4-1: config 0 descriptor?? [ 144.598610][ T5514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.620819][ T3562] hub 4-1:0.0: bad descriptor, ignoring hub [ 144.626936][ T3562] hub: probe of 4-1:0.0 failed with error -5 [ 144.645353][ T3562] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 144.830981][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.851245][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.881331][ T3617] usb 4-1: USB disconnect, device number 5 [ 144.888287][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 145.054460][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.480037][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.837501][ T5682] loop0: detected capacity change from 0 to 4096 [ 145.844980][ T5682] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 145.862344][ T5682] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 145.895150][ T4224] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 145.902894][ T4923] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 145.968453][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.208292][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 146.328463][ T14] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 146.336827][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 146.508608][ T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 146.520384][ T14] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 146.529177][ T14] usb 3-1: Product: syz [ 146.533358][ T14] usb 3-1: Manufacturer: syz [ 146.537957][ T14] usb 3-1: SerialNumber: syz [ 146.556738][ T14] usb 3-1: config 0 descriptor?? [ 146.609836][ T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 146.635234][ T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 146.816438][ T14] usb 3-1: USB disconnect, device number 5 [ 146.825786][ T14] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 146.879075][ T5707] loop0: detected capacity change from 0 to 1024 [ 146.995797][ T5711] loop4: detected capacity change from 0 to 4096 [ 147.004954][ T5711] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 147.044717][ T5711] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 147.129183][ T3902] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 147.148106][ T3568] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 148.134114][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.215320][ T5748] loop3: detected capacity change from 0 to 4096 [ 148.252113][ T5748] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 148.295312][ T5748] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 148.381618][ T3902] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 148.404699][ T3582] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 148.757619][ T5772] loop4: detected capacity change from 0 to 1024 [ 149.298269][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.668505][ T14] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.689659][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.725147][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.798671][ T14] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.817960][ T14] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 149.846399][ T14] usb 1-1: Manufacturer: syz [ 149.860041][ T14] usb 1-1: config 0 descriptor?? [ 149.947389][ T5787] loop2: detected capacity change from 0 to 4096 [ 149.973230][ T5787] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 150.027254][ T5787] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.060471][ T14] rc_core: IR keymap rc-hauppauge not found [ 150.066788][ T14] Registered IR keymap rc-empty [ 150.089603][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 150.132206][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 150.166976][ T46] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 150.181829][ T14] usb 1-1: USB disconnect, device number 2 [ 150.201012][ T5258] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 150.530908][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.746086][ T5823] loop0: detected capacity change from 0 to 4096 [ 150.756200][ T5823] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 150.785907][ T5823] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 150.856727][ T11] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 150.880937][ T4923] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 150.906485][ T5828] loop1: detected capacity change from 0 to 64 [ 150.957517][ T5828] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.245533][ T5838] loop1: detected capacity change from 0 to 256 [ 151.317058][ T5838] FAT-fs (loop1): Directory bread(block 64) failed [ 151.346850][ T5838] FAT-fs (loop1): Directory bread(block 65) failed [ 151.378768][ T5838] FAT-fs (loop1): Directory bread(block 66) failed [ 151.405036][ T5838] FAT-fs (loop1): Directory bread(block 67) failed [ 151.457650][ T5838] FAT-fs (loop1): Directory bread(block 68) failed [ 151.486945][ T5838] FAT-fs (loop1): Directory bread(block 69) failed [ 151.515393][ T5838] FAT-fs (loop1): Directory bread(block 70) failed [ 151.522662][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.530198][ T5838] FAT-fs (loop1): Directory bread(block 71) failed [ 151.550012][ T5838] FAT-fs (loop1): Directory bread(block 72) failed [ 151.556669][ T5838] FAT-fs (loop1): Directory bread(block 73) failed [ 151.582271][ T3573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.591459][ T3573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.600966][ T3573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.620147][ T3585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.631298][ T3585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.638684][ T3585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.702496][ T5851] loop2: detected capacity change from 0 to 4096 [ 151.710423][ T5851] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 151.739666][ T5851] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 151.746260][ T4224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.814218][ T3902] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 151.844407][ T5258] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 151.925723][ T4224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.104168][ T4224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.242604][ T4224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.497604][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 152.606762][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.883044][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.902533][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.935209][ T5847] device bridge_slave_0 entered promiscuous mode [ 152.972751][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.004119][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.019420][ T5847] device bridge_slave_1 entered promiscuous mode [ 153.147994][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.177665][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.320919][ T5847] team0: Port device team_slave_0 added [ 153.323551][ T5890] loop2: detected capacity change from 0 to 4096 [ 153.388380][ T5890] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 153.400130][ T5847] team0: Port device team_slave_1 added [ 153.449188][ T5890] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 153.500425][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.514864][ T3902] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 153.517777][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.595520][ T5258] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 153.607065][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.678664][ T3585] Bluetooth: hci2: command tx timeout [ 153.717297][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.724701][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.751874][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.807813][ T4224] device hsr_slave_0 left promiscuous mode [ 153.835150][ T4224] device hsr_slave_1 left promiscuous mode [ 153.854770][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.877344][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.906496][ T3575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.918830][ T3575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.927360][ T3575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.936450][ T3575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.945373][ T3575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.952713][ T3575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.964698][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.004291][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.048594][ T4224] device bridge_slave_1 left promiscuous mode [ 154.070329][ T4224] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.104964][ T4224] device bridge_slave_0 left promiscuous mode [ 154.116879][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.146354][ T4224] device veth1_macvtap left promiscuous mode [ 154.166577][ T4224] device veth0_macvtap left promiscuous mode [ 154.173597][ T4224] device veth1_vlan left promiscuous mode [ 154.185780][ T4224] device veth0_vlan left promiscuous mode [ 154.586948][ T4224] team0 (unregistering): Port device team_slave_1 removed [ 154.609749][ T4224] team0 (unregistering): Port device team_slave_0 removed [ 154.631034][ T4224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.654015][ T4224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.780070][ T4224] bond0 (unregistering): Released all slaves [ 154.882832][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.978902][ T5847] device hsr_slave_0 entered promiscuous mode [ 155.010575][ T5847] device hsr_slave_1 entered promiscuous mode [ 155.028475][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.036075][ T5847] Cannot create hsr debugfs directory [ 155.491345][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 155.631162][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.748292][ T3585] Bluetooth: hci2: command tx timeout [ 155.829223][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.836366][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.877191][ T5906] device bridge_slave_0 entered promiscuous mode [ 155.891013][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.932624][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.950922][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.977134][ T5906] device bridge_slave_1 entered promiscuous mode [ 155.988519][ T3585] Bluetooth: hci1: command tx timeout [ 156.064764][ T5992] sctp: [Deprecated]: syz-executor.3 (pid 5992) Use of int in maxseg socket option. [ 156.064764][ T5992] Use struct sctp_assoc_value instead [ 156.167313][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.190449][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.268397][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.301177][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.334738][ T5906] team0: Port device team_slave_0 added [ 156.358444][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.372943][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.398155][ T5906] team0: Port device team_slave_1 added [ 156.409318][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.518434][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.530163][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.537144][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.574040][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.609635][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.622943][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.651971][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.788414][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 156.806923][ T5989] delete_channel: no stack [ 156.868982][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.886231][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 156.925192][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 156.952329][ T5906] device hsr_slave_0 entered promiscuous mode [ 156.975333][ T5906] device hsr_slave_1 entered promiscuous mode [ 156.991621][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.004674][ T5906] Cannot create hsr debugfs directory [ 157.024987][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.038068][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.046104][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.078400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.088087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.096608][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.103750][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.111822][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.121163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.122318][ T26] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 157.138985][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.146107][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.154661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.156218][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.186301][ T26] usb 5-1: Product: syz [ 157.193496][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.198237][ T26] usb 5-1: Manufacturer: syz [ 157.208931][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.212326][ T26] usb 5-1: SerialNumber: syz [ 157.217790][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.236872][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.240157][ T26] usb 5-1: config 0 descriptor?? [ 157.246305][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.259854][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.279011][ T5996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.298892][ T26] hub 5-1:0.0: bad descriptor, ignoring hub [ 157.304822][ T26] hub: probe of 5-1:0.0 failed with error -5 [ 157.307438][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.327699][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.330073][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 157.338329][ T5263] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.367597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.376857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.385742][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.394215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.402700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.449425][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.511436][ T3617] usb 5-1: USB disconnect, device number 4 [ 157.518230][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 157.613045][ T5906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.703767][ T5906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.738568][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.753927][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.764417][ T5263] usb 4-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 157.796108][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.817510][ T5263] usb 4-1: config 0 descriptor?? [ 157.832493][ T5906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.838290][ T3585] Bluetooth: hci2: command tx timeout [ 157.872337][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.881391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.889715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.927218][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.940165][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.949101][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.957232][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.986822][ T5906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.001660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.011461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.050837][ T5847] device veth0_vlan entered promiscuous mode [ 158.068687][ T3585] Bluetooth: hci1: command tx timeout [ 158.082937][ T5847] device veth1_vlan entered promiscuous mode [ 158.180953][ T5847] device veth0_macvtap entered promiscuous mode [ 158.211221][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.222390][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.245457][ T5847] device veth1_macvtap entered promiscuous mode [ 158.270903][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.290218][ T6026] loop2: detected capacity change from 0 to 1024 [ 158.291007][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.305450][ T5263] gyration 0003:0C16:0003.0007: unknown main item tag 0x0 [ 158.326340][ T5263] gyration 0003:0C16:0003.0007: unknown main item tag 0x0 [ 158.342501][ T5263] gyration 0003:0C16:0003.0007: unknown main item tag 0x0 [ 158.378342][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.393535][ T5263] gyration 0003:0C16:0003.0007: hidraw0: USB HID v0.00 Device [HID 0c16:0003] on usb-dummy_hcd.3-1/input0 [ 158.404896][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.404912][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.404928][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.436026][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.454360][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.464468][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.476415][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.491654][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.507648][ T5263] usb 4-1: USB disconnect, device number 6 [ 158.522892][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.532889][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.550677][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.580206][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.602813][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.612849][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.632213][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.646017][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.670030][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.681199][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.691849][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.706299][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.730806][ T5906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.748313][ T5906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.766678][ T5906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.775919][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.785793][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.809343][ T5906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.832164][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.854146][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.881433][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.908098][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.979238][ T6036] device xfrm0 entered promiscuous mode [ 158.990022][ T6036] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 159.168703][ T4224] device hsr_slave_0 left promiscuous mode [ 159.187125][ T4224] device hsr_slave_1 left promiscuous mode [ 159.207513][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.226676][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.257726][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.268406][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.289071][ T4224] device bridge_slave_1 left promiscuous mode [ 159.295552][ T4224] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.311673][ T4224] device bridge_slave_0 left promiscuous mode [ 159.325415][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.348546][ T4224] device veth1_macvtap left promiscuous mode [ 159.356549][ T4224] device veth0_macvtap left promiscuous mode [ 159.374430][ T4224] device veth1_vlan left promiscuous mode [ 159.380703][ T4224] device veth0_vlan left promiscuous mode [ 159.408288][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.658418][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 159.778625][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 159.888444][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.897524][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.908406][ T3585] Bluetooth: hci2: command tx timeout [ 159.938790][ T7] usb 5-1: SerialNumber: syz [ 159.964699][ T4224] team0 (unregistering): Port device team_slave_1 removed [ 159.986075][ T4224] team0 (unregistering): Port device team_slave_0 removed [ 159.999719][ T7] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 160.012889][ T7] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 160.021394][ T7] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 160.036031][ T4224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.058661][ T4224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.154635][ T4224] bond0 (unregistering): Released all slaves [ 160.163403][ T3585] Bluetooth: hci1: command tx timeout [ 160.171001][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.203658][ T5264] usb 5-1: USB disconnect, device number 5 [ 160.267745][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.291041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.306459][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.341272][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.354514][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.362867][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.370991][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.394422][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.403567][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.422018][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.438724][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.453420][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.460530][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.477307][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.485915][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.494159][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.503185][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.521010][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.528163][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.537223][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.576610][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.584734][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.599911][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.611890][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.632522][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.640716][ T26] usb 3-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 160.650415][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.668706][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.677987][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.686650][ T26] usb 3-1: config 0 descriptor?? [ 160.712526][ T6060] sp0: Synchronizing with TNC [ 160.721200][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.730254][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.745252][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.756861][ T5906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.771337][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.789807][ T6066] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.803941][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.816330][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.101827][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.118569][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.131031][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.138459][ T5263] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.172830][ T26] gyration 0003:0C16:0003.0008: unknown main item tag 0x0 [ 161.185021][ T26] gyration 0003:0C16:0003.0008: unknown main item tag 0x0 [ 161.192416][ T27] audit: type=1326 audit(1719134810.462:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2567d0a9 code=0x0 [ 161.203621][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.233595][ T26] gyration 0003:0C16:0003.0008: hidraw0: USB HID v0.00 Device [HID 0c16:0003] on usb-dummy_hcd.2-1/input0 [ 161.239527][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.304350][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.326237][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.354560][ T5906] device veth0_vlan entered promiscuous mode [ 161.366176][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.373288][ T26] usb 3-1: USB disconnect, device number 6 [ 161.376494][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.386671][ T5263] usb 5-1: Using ep0 maxpacket: 32 [ 161.410624][ T5906] device veth1_vlan entered promiscuous mode [ 161.457104][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.466234][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.474736][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.488560][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.500271][ T5906] device veth0_macvtap entered promiscuous mode [ 161.518374][ T5263] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.539835][ T5906] device veth1_macvtap entered promiscuous mode [ 161.599984][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.628252][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.639644][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.670901][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.688430][ T5263] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.691116][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.707786][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.724445][ T5263] usb 5-1: Product: syz [ 161.725884][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.733319][ T5263] usb 5-1: Manufacturer: syz [ 161.753864][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.765906][ T5263] usb 5-1: SerialNumber: syz [ 161.774526][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.789112][ T5263] usb 5-1: config 0 descriptor?? [ 161.797316][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.808567][ T6069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.817513][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.834342][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.851785][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.874847][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.903632][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.927923][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.938634][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.954409][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.966003][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.976099][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.986765][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.996943][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.007551][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.020126][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.039866][ T6097] sp0: Synchronizing with TNC [ 162.044727][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.057593][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.069353][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.091245][ T5906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.109635][ T5906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.123486][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.128250][ T5906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.159963][ T5906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.164647][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.183379][ T6104] loop0: detected capacity change from 0 to 7 [ 162.199306][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.228530][ T3585] Bluetooth: hci1: command tx timeout [ 162.342627][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.363186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.408858][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.437120][ T5262] usb 5-1: USB disconnect, device number 6 [ 162.452848][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.471096][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.498085][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.551809][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.754582][ T27] audit: type=1326 audit(1719134812.032:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2567d0a9 code=0x0 [ 162.864497][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.066912][ T6138] sp0: Synchronizing with TNC [ 163.633766][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.865916][ T6159] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.963269][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.996579][ T6159] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.717743][ T6197] loop1: detected capacity change from 0 to 1024 [ 165.822284][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.866461][ T6205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.878504][ T6205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.095482][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.975988][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.018470][ T6239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 168.045274][ T6239] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 168.265364][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.180380][ T6247] loop0: detected capacity change from 0 to 32768 [ 169.242144][ T6247] Dev loop0 SGI disklabel: csum bad, label corrupted [ 169.451108][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.440057][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.616238][ T3573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.626323][ T3573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.633059][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.647031][ T3575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.658081][ T3575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.665938][ T3575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.678397][ T3575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.698317][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.711284][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 170.823911][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.901868][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.951278][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 171.026629][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.068343][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 171.079924][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 171.142387][ T6280] chnl_net:caif_netlink_parms(): no params data found [ 171.258803][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 171.271387][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 171.283073][ T7] usb 3-1: Product: syz [ 171.287319][ T7] usb 3-1: Manufacturer: syz [ 171.292244][ T7] usb 3-1: SerialNumber: syz [ 171.298521][ T7] usb 3-1: config 0 descriptor?? [ 171.329741][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.336947][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.345584][ T7] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.356045][ T7] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.365636][ T6280] device bridge_slave_0 entered promiscuous mode [ 171.393981][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.401426][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.409540][ T6280] device bridge_slave_1 entered promiscuous mode [ 171.440764][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.458094][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.530026][ T6280] team0: Port device team_slave_0 added [ 171.551102][ T7] usb 3-1: USB disconnect, device number 7 [ 171.560655][ T6280] team0: Port device team_slave_1 added [ 171.566722][ T7] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 171.619332][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.634035][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.687525][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.714366][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.727007][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.776132][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.871921][ T6280] device hsr_slave_0 entered promiscuous mode [ 171.884707][ T6280] device hsr_slave_1 entered promiscuous mode [ 172.073333][ T3646] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.255268][ T11] device hsr_slave_0 left promiscuous mode [ 172.263355][ T6320] loop2: detected capacity change from 0 to 2048 [ 172.274638][ T11] device hsr_slave_1 left promiscuous mode [ 172.299508][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.307064][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.324189][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.335152][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.347991][ T11] device bridge_slave_1 left promiscuous mode [ 172.357505][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.381738][ T11] device bridge_slave_0 left promiscuous mode [ 172.388143][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.415709][ T6320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.437109][ T11] device veth1_macvtap left promiscuous mode [ 172.443297][ T11] device veth0_macvtap left promiscuous mode [ 172.450040][ T11] device veth1_vlan left promiscuous mode [ 172.453826][ T6320] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, [ 172.455840][ T11] device veth0_vlan left promiscuous mode [ 172.456013][ T6320] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.485452][ T6320] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 172.491221][ T3646] usb 4-1: Using ep0 maxpacket: 32 [ 172.501397][ T6320] EXT4-fs (loop2): This should not happen!! Data will be lost [ 172.501397][ T6320] [ 172.635611][ T6320] EXT4-fs (loop2): Total free blocks count 0 [ 172.680089][ T6320] EXT4-fs (loop2): Free/Dirty block details [ 172.688864][ T3646] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 172.719318][ T3646] usb 4-1: config 0 has no interface number 0 [ 172.749652][ T3575] Bluetooth: hci1: command tx timeout [ 172.761159][ T6320] EXT4-fs (loop2): free_blocks=2415919104 [ 172.788157][ T3646] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 172.826629][ T6320] EXT4-fs (loop2): dirty_blocks=16 [ 172.869085][ T6320] EXT4-fs (loop2): Block reservation details [ 172.879005][ T3646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.906798][ T6320] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 172.969887][ T3646] usb 4-1: config 0 descriptor?? [ 173.009411][ T6327] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 173.267380][ T11] team0 (unregistering): Port device team_slave_1 removed [ 173.317179][ T11] team0 (unregistering): Port device team_slave_0 removed [ 173.374785][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.393901][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.442113][ T6337] loop2: detected capacity change from 0 to 512 [ 173.602775][ T6337] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.802676][ T6337] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 173.944457][ T6337] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 173.949100][ T11] bond0 (unregistering): Released all slaves [ 173.988659][ T6337] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 174.027237][ T6337] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 174.046827][ T6337] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 174.217800][ T6337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.317106][ T6349] loop0: detected capacity change from 0 to 256 [ 174.658809][ T6349] exFAT-fs (loop0): failed to read boot sector [ 174.665194][ T6349] exFAT-fs (loop0): failed to recognize exfat type [ 174.854060][ T3575] Bluetooth: hci1: command tx timeout [ 174.865462][ T6331] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz-executor.2: Abort forced by user [ 174.906223][ T6331] EXT4-fs (loop2): Remounting filesystem read-only [ 175.124967][ T5263] usb 4-1: USB disconnect, device number 7 [ 175.160285][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 175.274240][ T3646] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.335713][ T6280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.376625][ T6280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.463885][ T6280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.602509][ T3646] usb 5-1: Using ep0 maxpacket: 32 [ 175.663824][ T6280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.753782][ T3646] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 175.764629][ T3646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 176.022946][ T3646] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 176.045332][ T3646] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 176.061115][ T3646] usb 5-1: Product: syz [ 176.072895][ T3646] usb 5-1: Manufacturer: syz [ 176.080355][ T3646] usb 5-1: SerialNumber: syz [ 176.111264][ T3646] usb 5-1: config 0 descriptor?? [ 176.171315][ T3646] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 176.240212][ T3646] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.433146][ T3646] usb 5-1: USB disconnect, device number 7 [ 176.451285][ T3646] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 176.649817][ T6361] loop2: detected capacity change from 0 to 2048 [ 176.659040][ T6280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.692571][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.701658][ T6361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.706187][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.725650][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.741945][ T6361] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.771700][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.783004][ T6361] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 176.788849][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.804305][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.811471][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.819501][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.828153][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.836680][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.843805][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.863680][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.871183][ T3575] Bluetooth: hci1: command tx timeout [ 176.879491][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.882941][ T6361] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.882941][ T6361] [ 176.897041][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.916063][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.934094][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.982484][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.000009][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.009840][ T6361] EXT4-fs (loop2): Total free blocks count 0 [ 177.018354][ T6361] EXT4-fs (loop2): Free/Dirty block details [ 177.029145][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.044725][ T6369] loop4: detected capacity change from 0 to 256 [ 177.047180][ T6361] EXT4-fs (loop2): free_blocks=2415919104 [ 177.057575][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.065480][ T6361] EXT4-fs (loop2): dirty_blocks=16 [ 177.073634][ T6369] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 177.078943][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.085865][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557fa000: rx timeout, send abort [ 177.093518][ T6361] EXT4-fs (loop2): Block reservation details [ 177.104501][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805569d000: rx timeout, send abort [ 177.119024][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557fa000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.129095][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.134565][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805569d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.148287][ T6361] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 177.176258][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.199981][ T6366] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 177.208269][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.249720][ T6369] exFAT-fs (loop4): hint_cluster is invalid (17) [ 177.453230][ T6380] loop2: detected capacity change from 0 to 512 [ 177.544470][ T6380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.567463][ T6380] ext4 filesystem being mounted at /root/syzkaller-testdir1748296392/syzkaller.oDX5yd/68/file0 supports timestamps until 2038 (0x7fffffff) [ 177.720286][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 178.230382][ T6393] loop4: detected capacity change from 0 to 512 [ 178.279778][ T6393] EXT4-fs: Mount option(s) incompatible with ext3 [ 178.297327][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.304044][ T6394] loop2: detected capacity change from 0 to 512 [ 178.318488][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.329534][ T6280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.531759][ T6394] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 178.542617][ T6394] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 178.558059][ T6394] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 1 [ 178.569083][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.574751][ T6394] EXT4-fs (loop2): 1 truncate cleaned up [ 178.579306][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.585150][ T6394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.600728][ T6394] ext4 filesystem being mounted at /root/syzkaller-testdir1748296392/syzkaller.oDX5yd/69/file0 supports timestamps until 2038 (0x7fffffff) [ 178.665796][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.711199][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 178.744155][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.784491][ T6280] device veth0_vlan entered promiscuous mode [ 178.819867][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.838909][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.893448][ T6280] device veth1_vlan entered promiscuous mode [ 178.948858][ T3580] Bluetooth: hci1: command tx timeout [ 178.986354][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.995411][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.010588][ T6280] device veth0_macvtap entered promiscuous mode [ 179.027225][ T6280] device veth1_macvtap entered promiscuous mode [ 179.056548][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.091982][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.113469][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.151437][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.192476][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.244853][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.292534][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.332440][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.429635][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.453208][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.507635][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.531567][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.587532][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.639970][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.654195][ T3573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.664537][ T3573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.672979][ T3573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.682100][ T3573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.691031][ T3573] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.698285][ T3573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.705406][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.715393][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.726694][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.736581][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.747102][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.756959][ T6280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.767406][ T6280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.808785][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.816548][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.829780][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.855275][ T6280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.948085][ T6280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.985745][ T6280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.016742][ T6280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.237757][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.256627][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.315727][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.381844][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.403119][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.468857][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.628565][ T3573] Bluetooth: hci4: command 0x0406 tx timeout [ 180.636852][ T6439] loop2: detected capacity change from 0 to 512 [ 180.639874][ T3575] Bluetooth: hci0: command 0x0406 tx timeout [ 180.654218][ T6439] EXT4-fs: Mount option(s) incompatible with ext3 [ 181.140938][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 181.461554][ T6451] Driver unsupported XDP return value 0 on prog (id 106) dev N/A, expect packet loss! [ 181.568441][ T6457] ptrace attach of "/root/syz-executor.0 exec"[5847] was attempted by "/root/syz-executor.0 exec"[6457] [ 181.591380][ T6425] ptrace attach of "/root/syz-executor.0 exec"[5847] was attempted by "/root/syz-executor.0 exec"[6425] [ 181.670963][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.729792][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.736972][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.748510][ T3575] Bluetooth: hci5: command tx timeout [ 181.764109][ T6422] device bridge_slave_0 entered promiscuous mode [ 181.795293][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.820310][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.827632][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.853848][ T6422] device bridge_slave_1 entered promiscuous mode [ 181.884958][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.952024][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.982774][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.007477][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.077081][ T6422] team0: Port device team_slave_0 added [ 182.103258][ T6422] team0: Port device team_slave_1 added [ 182.193367][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.206037][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.253071][ T6476] loop2: detected capacity change from 0 to 2048 [ 182.260633][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.295940][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.316494][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.356383][ T6476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.367416][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.392882][ T6476] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.393573][ T11] tipc: Left network mode [ 182.412521][ T6476] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 182.440926][ T6422] device hsr_slave_0 entered promiscuous mode [ 182.449089][ T6422] device hsr_slave_1 entered promiscuous mode [ 182.455924][ T6422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.464652][ T6476] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.464652][ T6476] [ 182.464716][ T6422] Cannot create hsr debugfs directory [ 182.509015][ T6476] EXT4-fs (loop2): Total free blocks count 0 [ 182.515787][ T6476] EXT4-fs (loop2): Free/Dirty block details [ 182.522535][ T6476] EXT4-fs (loop2): free_blocks=2415919104 [ 182.528655][ T6476] EXT4-fs (loop2): dirty_blocks=16 [ 182.534026][ T6476] EXT4-fs (loop2): Block reservation details [ 182.540833][ T6476] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 182.550472][ T6482] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 183.206793][ T11] bond0: (slave vlan0): Releasing backup interface [ 183.478975][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.497188][ T6493] loop2: detected capacity change from 0 to 512 [ 183.531481][ T6493] EXT4-fs: Mount option(s) incompatible with ext3 [ 183.818420][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 183.828467][ T3575] Bluetooth: hci5: command tx timeout [ 183.938424][ T7] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 183.968287][ T7] usb 4-1: config 0 has no interface number 0 [ 183.987548][ T7] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 184.015501][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.067441][ T7] usb 4-1: config 0 descriptor?? [ 184.180568][ T11] device hsr_slave_0 left promiscuous mode [ 184.194079][ T11] device hsr_slave_1 left promiscuous mode [ 184.206713][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.220819][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.247103][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.262886][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.273928][ T11] device bridge_slave_1 left promiscuous mode [ 184.281840][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.291705][ T11] device bridge_slave_0 left promiscuous mode [ 184.297923][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.312141][ T11] device veth1_macvtap left promiscuous mode [ 184.318264][ T11] device veth0_macvtap left promiscuous mode [ 184.328392][ T11] device veth1_vlan left promiscuous mode [ 184.336574][ T11] device veth0_vlan left promiscuous mode [ 184.634268][ T11] team0 (unregistering): Port device team_slave_1 removed [ 184.655298][ T11] team0 (unregistering): Port device team_slave_0 removed [ 184.675504][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.724565][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.911810][ T11] bond0 (unregistering): Released all slaves [ 185.006528][ T6422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.018105][ T6422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.036637][ T6422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.056216][ T6422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.320222][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.342924][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.378902][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.394720][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.433498][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.445255][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.457733][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.464866][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.504052][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.520575][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.548906][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.557323][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.564446][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.620189][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.653893][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.705282][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.720755][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.752195][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.771799][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.793781][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.820623][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.852284][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.899580][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.908313][ T3575] Bluetooth: hci5: command tx timeout [ 185.996395][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.022011][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.066067][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.281014][ T3619] usb 4-1: USB disconnect, device number 8 [ 186.585793][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.598969][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.630250][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.804471][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.820930][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.928282][ T6422] device veth0_vlan entered promiscuous mode [ 187.955847][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.983783][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.995960][ T3575] Bluetooth: hci5: command tx timeout [ 188.009914][ T6422] device veth1_vlan entered promiscuous mode [ 188.020203][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.028009][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.038590][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.225309][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.253209][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.316063][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.351085][ T6422] device veth0_macvtap entered promiscuous mode [ 188.379268][ T6422] device veth1_macvtap entered promiscuous mode [ 188.444235][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.498215][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.529311][ T3573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.538267][ T3573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.548577][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.559532][ T3573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.588483][ T3573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.596266][ T3573] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.603776][ T3573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.621563][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.631418][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.641932][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.656092][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.666687][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.678135][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.687827][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.716343][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.724578][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.733594][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.749695][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.790125][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.818214][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.838214][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.868409][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.888204][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.909362][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.928215][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.949638][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.957451][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.976631][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.007567][ T6422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.026480][ T6422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.038859][ T6422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.058210][ T6422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.255162][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.263647][ T3619] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.278402][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.299934][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.346114][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.387417][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.424448][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.439707][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 189.508829][ T3619] usb 3-1: Using ep0 maxpacket: 32 [ 189.542238][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.630841][ T3619] usb 3-1: config 0 has an invalid interface number: 157 but max is 0 [ 189.662162][ T3619] usb 3-1: config 0 has no interface number 0 [ 189.674735][ T3619] usb 3-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 189.694251][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.706546][ T3619] usb 3-1: config 0 descriptor?? [ 189.726717][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.770201][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.777335][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.825745][ T6608] device bridge_slave_0 entered promiscuous mode [ 189.851440][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.874152][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.896734][ T6608] device bridge_slave_1 entered promiscuous mode [ 189.950639][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.025229][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.050689][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.068162][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.146437][ T6608] team0: Port device team_slave_0 added [ 190.174528][ T6608] team0: Port device team_slave_1 added [ 190.246945][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.264182][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.298426][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.349964][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.357095][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.403637][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.533011][ T6608] device hsr_slave_0 entered promiscuous mode [ 190.542297][ T6608] device hsr_slave_1 entered promiscuous mode [ 190.555265][ T6608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.563225][ T6608] Cannot create hsr debugfs directory [ 190.638507][ T3573] Bluetooth: hci0: command tx timeout [ 191.938584][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.057231][ T11] device hsr_slave_0 left promiscuous mode [ 192.064635][ T5264] usb 3-1: USB disconnect, device number 8 [ 192.092533][ T11] device hsr_slave_1 left promiscuous mode [ 192.108911][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.130140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.148721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.156146][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.180273][ T11] device bridge_slave_1 left promiscuous mode [ 192.186482][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.211413][ T11] device bridge_slave_0 left promiscuous mode [ 192.212474][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 192.223604][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.258812][ T11] device veth1_macvtap left promiscuous mode [ 192.268620][ T11] device veth0_macvtap left promiscuous mode [ 192.282939][ T11] device veth1_vlan left promiscuous mode [ 192.295579][ T11] device veth0_vlan left promiscuous mode [ 192.710000][ T3573] Bluetooth: hci0: command tx timeout [ 192.880919][ T5264] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.506168][ T11] team0 (unregistering): Port device team_slave_1 removed [ 193.553800][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.602304][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.628829][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.678249][ T5264] usb 4-1: Using ep0 maxpacket: 32 [ 193.798391][ T5264] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 193.815409][ T5264] usb 4-1: config 0 has no interface number 0 [ 193.820099][ T11] bond0 (unregistering): Released all slaves [ 193.851376][ T5264] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 193.874013][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.889228][ T5264] usb 4-1: config 0 descriptor?? [ 193.902630][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.913146][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.920226][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.224403][ T6608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.254568][ T6608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.286062][ T6608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.331029][ T6608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.581080][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.644399][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.654659][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.712057][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.766576][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.782399][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.791283][ T3573] Bluetooth: hci0: command tx timeout [ 194.809889][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.817249][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.839513][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.847397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.858134][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.866795][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.873964][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.902485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.928327][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.966075][ T6608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.048455][ T6608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.096153][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.133928][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.177003][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.215016][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.252920][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.275337][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.297954][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.336584][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.361684][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.383217][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.426159][ T6761] loop0: detected capacity change from 0 to 8192 [ 195.626293][ T3617] usb 4-1: USB disconnect, device number 9 [ 195.754804][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.794497][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.807718][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.845601][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.868384][ T3573] Bluetooth: hci0: command tx timeout [ 196.912822][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.936858][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.958389][ T5264] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.987801][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.045359][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.060548][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.082273][ T6792] loop3: detected capacity change from 0 to 1024 [ 197.096463][ T6608] device veth0_vlan entered promiscuous mode [ 197.106313][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.118867][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.139347][ T6608] device veth1_vlan entered promiscuous mode [ 197.208261][ T5264] usb 1-1: Using ep0 maxpacket: 32 [ 197.214595][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.225211][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.255843][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.284125][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.314846][ T6608] device veth0_macvtap entered promiscuous mode [ 197.328800][ T5264] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.355347][ T5264] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.377170][ T6608] device veth1_macvtap entered promiscuous mode [ 197.443857][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.474570][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.498434][ T5264] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.519765][ T5264] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 197.522068][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.581013][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.589423][ T5264] usb 1-1: Product: syz [ 197.595004][ T5264] usb 1-1: Manufacturer: syz [ 197.631016][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.678942][ T5264] hub 1-1:4.0: USB hub found [ 197.692528][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.733770][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.764836][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.792416][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.813345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.833474][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.850148][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.865974][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.879102][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.906370][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.918396][ T5264] hub 1-1:4.0: 2 ports detected [ 197.977703][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.000170][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.172158][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.259417][ T6800] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.069046][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.105415][ T6800] loop2: detected capacity change from 0 to 40427 [ 199.118996][ T6800] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 199.127688][ T6800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 199.144466][ T6800] F2FS-fs (loop2): invalid crc value [ 199.198206][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.198506][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.226538][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.245908][ T6800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.298231][ T6800] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.305523][ T6800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 199.344476][ T6799] syz-executor.2: attempt to access beyond end of device [ 199.344476][ T6799] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 199.359360][ T6799] syz-executor.2: attempt to access beyond end of device [ 199.359360][ T6799] loop2: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 199.392627][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.413369][ T6799] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 199.413394][ T6799] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 199.458343][ T5264] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 199.473421][ T5264] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 199.477637][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.528955][ T5264] usb 1-1: USB disconnect, device number 3 [ 199.596428][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.608347][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.619521][ T6608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.686789][ T6608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.708220][ T6608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.717263][ T6608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.967671][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.991516][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.093395][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.119750][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.144126][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.212988][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.521098][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.729718][ T3646] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.288948][ T6820] syz-executor.3 (pid 6820) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 201.422498][ T27] audit: type=1804 audit(1719134850.702:10922): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1028717331/syzkaller.Cp4lrX/2/bus" dev="sda1" ino=1955 res=1 errno=0 [ 201.538226][ T3646] usb 3-1: Using ep0 maxpacket: 8 [ 201.668482][ T3646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.813361][ T3646] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 201.822831][ T3646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 201.840578][ T3646] usb 3-1: SerialNumber: syz [ 201.853824][ T3646] usb 3-1: config 0 descriptor?? [ 201.890875][ T6847] loop3: detected capacity change from 0 to 1024 [ 202.018245][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.038309][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.179485][ T3646] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 202.190530][ T3646] usb 3-1: No valid video chain found. [ 202.207550][ T3646] usb 3-1: USB disconnect, device number 9 [ 202.298237][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 202.408424][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.419523][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.429487][ T14] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 202.438828][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.448285][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.455158][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.468921][ T14] usb 2-1: config 0 descriptor?? [ 202.598507][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.614057][ T26] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 202.622714][ T26] usb 5-1: Product: syz [ 202.627005][ T26] usb 5-1: Manufacturer: syz [ 202.699854][ T26] hub 5-1:4.0: USB hub found [ 202.897513][ T6851] sp0: Synchronizing with TNC [ 202.911992][ T26] hub 5-1:4.0: 2 ports detected [ 203.166948][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.880449][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.910272][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.948278][ T26] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 203.958306][ T26] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 204.008959][ T26] usb 5-1: USB disconnect, device number 8 [ 205.037105][ T14] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input17 [ 205.130464][ T14] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input18 [ 205.173320][ T14] uclogic 0003:256C:006D.0009: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 205.208135][ T14] usb 2-1: USB disconnect, device number 6 [ 205.219451][ T6867] loop2: detected capacity change from 0 to 40427 [ 205.263036][ T6867] F2FS-fs (loop2): invalid crc value [ 205.333750][ T6867] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.390103][ T5263] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.495945][ T6867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.560696][ T6867] syz-executor.2: attempt to access beyond end of device [ 205.560696][ T6867] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 205.631315][ T6876] loop0: detected capacity change from 0 to 40427 [ 205.638335][ T5263] usb 4-1: Using ep0 maxpacket: 8 [ 205.658130][ T6876] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 205.665939][ T6876] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.695123][ T6876] F2FS-fs (loop0): invalid crc value [ 205.736030][ T6876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.763160][ T5263] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.802731][ T6876] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 205.809900][ T6876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.858629][ T5263] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 205.875246][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 205.908943][ T5263] usb 4-1: SerialNumber: syz [ 205.933546][ T5263] usb 4-1: config 0 descriptor?? [ 206.105370][ T6876] syz-executor.0: attempt to access beyond end of device [ 206.105370][ T6876] loop0: rw=2049, sector=77824, nr_sectors = 2144 limit=40427 [ 206.212171][ T6876] syz-executor.0: attempt to access beyond end of device [ 206.212171][ T6876] loop0: rw=2049, sector=79968, nr_sectors = 1952 limit=40427 [ 206.268485][ T5263] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 206.275443][ T5263] usb 4-1: No valid video chain found. [ 206.275504][ T6876] syz-executor.0: attempt to access beyond end of device [ 206.275504][ T6876] loop0: rw=2049, sector=49152, nr_sectors = 2056 limit=40427 [ 206.308608][ T5263] usb 4-1: USB disconnect, device number 10 [ 206.346281][ T6876] syz-executor.0: attempt to access beyond end of device [ 206.346281][ T6876] loop0: rw=2049, sector=51208, nr_sectors = 840 limit=40427 [ 206.386181][ T6897] loop2: detected capacity change from 0 to 1024 [ 206.468259][ T5847] syz-executor.0: attempt to access beyond end of device [ 206.468259][ T5847] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 206.513740][ T3678] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 206.551861][ T3678] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 207.095950][ T6900] sp0: Synchronizing with TNC [ 207.373601][ T6879] loop4: detected capacity change from 0 to 131072 [ 207.795842][ T6913] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.551508][ T6879] fscrypt: Error allocating hmac(sha512): -2 [ 208.602819][ T6913] loop3: detected capacity change from 0 to 40427 [ 208.629263][ T6913] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 208.636950][ T6913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.646974][ T6913] F2FS-fs (loop3): invalid crc value [ 208.669220][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.790441][ T6913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.824879][ T6913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 208.832118][ T6913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 208.848333][ T6879] F2FS-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 208.863066][ T6912] syz-executor.3: attempt to access beyond end of device [ 208.863066][ T6912] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 208.877487][ T6912] syz-executor.3: attempt to access beyond end of device [ 208.877487][ T6912] loop3: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 208.907643][ T6912] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 208.907667][ T6912] F2FS-fs (loop3): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 210.420284][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.444006][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.518177][ C0] sched: RT throttling activated [ 212.748395][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 212.873381][ T7] usb 2-1: config 0 has an invalid interface number: 157 but max is 0 [ 212.891860][ T7] usb 2-1: config 0 has no interface number 0 [ 212.897999][ T7] usb 2-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 212.939857][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.971914][ T7] usb 2-1: config 0 descriptor?? [ 213.184861][ T7] usb 2-1: USB disconnect, device number 7 [ 213.301222][ T6964] loop3: detected capacity change from 0 to 1024 [ 215.011354][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.136759][ T6994] loop4: detected capacity change from 0 to 1024 [ 216.196750][ T6994] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 216.209201][ T6994] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.238274][ T6994] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 216.265188][ T6994] journal_init_common: Cannot get buffer for journal superblock [ 216.293286][ T6994] EXT4-fs (loop4): Could not load journal inode [ 216.450863][ T3646] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.605690][ T7012] loop2: detected capacity change from 0 to 256 [ 216.613734][ T7014] loop0: detected capacity change from 0 to 1024 [ 216.635093][ T7014] EXT4-fs: Ignoring removed i_version option [ 216.644778][ T7014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.666859][ T7015] loop4: detected capacity change from 0 to 2048 [ 216.695774][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.718349][ T3646] usb 2-1: Using ep0 maxpacket: 32 [ 216.743243][ T7015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.848483][ T3646] usb 2-1: config 0 has an invalid interface number: 157 but max is 0 [ 216.856854][ T3646] usb 2-1: config 0 has no interface number 0 [ 216.875937][ T3646] usb 2-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 216.892262][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.904285][ T3646] usb 2-1: config 0 descriptor?? [ 216.957949][ T5847] EXT4-fs (loop0): unmounting filesystem. [ 217.043077][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.288237][ T3646] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.690982][ T3646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.728255][ T3646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.763099][ T3646] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.798339][ T3646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.821402][ T3646] usb 3-1: config 0 descriptor?? [ 218.849804][ T7045] loop4: detected capacity change from 0 to 2048 [ 218.898069][ T7045] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 218.941360][ T7045] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 218.998613][ T7045] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 219.006282][ T7045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.146733][ T7045] fscrypt (loop4, inode 18): v1 policies can't be used on casefolded directories [ 219.186945][ T152] usb 2-1: USB disconnect, device number 8 [ 219.212742][ T6422] EXT4-fs (loop4): unmounting filesystem. [ 219.326585][ T7051] loop4: detected capacity change from 0 to 256 [ 219.672834][ T7049] loop1: detected capacity change from 0 to 32768 [ 219.721247][ T7049] XFS (loop1): Mounting V5 Filesystem [ 219.786395][ T152] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.809510][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.618634][ T3646] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 220.653991][ T7049] XFS (loop1): Ending clean mount [ 220.661006][ T7049] XFS (loop1): Quotacheck needed: Please wait. [ 220.698816][ T7049] XFS (loop1): Quotacheck: Done. [ 220.749079][ T6608] XFS (loop1): Unmounting Filesystem [ 220.821064][ T3646] usb 3-1: USB disconnect, device number 10 [ 220.828305][ T152] usb 5-1: Using ep0 maxpacket: 32 [ 220.920408][ T7086] loop3: detected capacity change from 0 to 256 [ 220.958501][ T152] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.978201][ T152] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.070351][ T27] audit: type=1326 audit(1719134870.352:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 221.103541][ T27] audit: type=1326 audit(1719134870.352:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 221.170432][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.173295][ T27] audit: type=1326 audit(1719134870.352:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 221.440257][ T5263] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.449044][ T152] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 221.449072][ T152] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 221.449092][ T152] usb 5-1: Product: syz [ 221.449106][ T152] usb 5-1: Manufacturer: syz [ 221.781736][ T5263] usb 2-1: Using ep0 maxpacket: 32 [ 226.664407][ T152] usb 5-1: can't set config #4, error -110 [ 226.677300][ T152] usb 5-1: USB disconnect, device number 9 [ 226.747418][ T27] audit: type=1326 audit(1719134870.352:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 226.778347][ T5263] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 226.794442][ T5263] usb 2-1: can't read configurations, error -71 [ 226.831247][ T27] audit: type=1326 audit(1719134870.352:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 226.927003][ T27] audit: type=1326 audit(1719134870.372:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20227d0a9 code=0x7ffc0000 [ 227.414044][ T27] audit: type=1804 audit(1719134876.692:10929): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1721323834/syzkaller.A4QyQ7/261/bus/bus" dev="overlay" ino=1950 res=1 errno=0 [ 227.497443][ T7132] loop0: detected capacity change from 0 to 128 [ 227.948282][ T5263] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.198343][ T5263] usb 2-1: Using ep0 maxpacket: 16 [ 228.248408][ T152] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 228.318469][ T5263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 228.335142][ T5263] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 228.346076][ T5263] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 229.195106][ T5263] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 229.205285][ T5263] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 229.248742][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 229.277730][ T5263] usb 2-1: config 1 interface 0 has no altsetting 0 [ 229.301679][ T5263] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 229.346444][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.378433][ T152] usb 3-1: config 0 has an invalid interface number: 157 but max is 0 [ 229.396300][ T152] usb 3-1: config 0 has no interface number 0 [ 229.408919][ T5263] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 229.426044][ T152] usb 3-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 229.465292][ T7159] loop3: detected capacity change from 0 to 1024 [ 229.486644][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.487682][ T7159] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.522221][ T7159] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.539123][ T152] usb 3-1: config 0 descriptor?? [ 229.554630][ T7159] EXT4-fs error (device loop3): ext4_get_journal_inode:5733: inode #5: comm syz-executor.3: unexpected bad inode w/o EXT4_IGET_BAD [ 229.586653][ T7159] EXT4-fs (loop3): no journal found [ 229.600163][ T7159] EXT4-fs (loop3): can't get journal size [ 229.740908][ T5263] scsi host1: usb-storage 2-1:1.0 [ 229.760894][ T7159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.857241][ T5263] usb 2-1: USB disconnect, device number 10 [ 230.182908][ T3582] EXT4-fs (loop3): unmounting filesystem. [ 232.068562][ T7] usb 3-1: USB disconnect, device number 11 [ 232.155128][ T7193] loop2: detected capacity change from 0 to 2048 [ 232.245651][ T7193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 233.138916][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 233.325170][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.333222][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.862700][ T7222] loop2: detected capacity change from 0 to 2048 [ 233.966853][ T7217] syz-executor.4[7217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.966951][ T7217] syz-executor.4[7217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.982368][ T7217] overlayfs: failed to resolve './file1': -2 [ 234.003027][ T7222] Alternate GPT is invalid, using primary GPT. [ 234.027558][ T7222] loop2: p1 p2 p3 [ 234.102442][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.127006][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.140014][ T7236] device batadv_slave_0 entered promiscuous mode [ 235.219469][ T7235] device batadv_slave_0 left promiscuous mode [ 235.498280][ T3616] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.675320][ T7249] loop2: detected capacity change from 0 to 1024 [ 235.829845][ T7240] loop4: detected capacity change from 0 to 32768 [ 235.843911][ T7240] [ 235.843911][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.843911][ T7240] [ 235.939436][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.954326][ T7240] [ 235.954326][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.954326][ T7240] [ 235.956466][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.975219][ T7240] [ 235.975219][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.975219][ T7240] [ 235.980221][ T3616] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 235.996500][ T7240] [ 235.996500][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.996500][ T7240] [ 236.001744][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.016960][ T7240] [ 236.016960][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.016960][ T7240] [ 236.032398][ T7240] [ 236.032398][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.032398][ T7240] [ 236.043763][ T7240] [ 236.043763][ T7240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.043763][ T7240] [ 236.048543][ T3616] usb 1-1: config 0 descriptor?? [ 236.100890][ T133] [ 236.100890][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.100890][ T133] [ 236.132751][ T6422] [ 236.132751][ T6422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.132751][ T6422] [ 236.154647][ T6422] [ 236.154647][ T6422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.154647][ T6422] [ 236.474887][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.497034][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.590751][ T3616] hid-rmi 0003:06CB:81A7.000B: item fetching failed at offset 3/5 [ 236.606928][ T3616] hid-rmi 0003:06CB:81A7.000B: parse failed [ 236.647208][ T3616] hid-rmi: probe of 0003:06CB:81A7.000B failed with error -22 [ 236.684070][ T7263] loop4: detected capacity change from 0 to 512 [ 236.792211][ T152] usb 1-1: USB disconnect, device number 4 [ 236.964243][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.937973][ T7287] loop3: detected capacity change from 0 to 128 [ 239.181863][ T7293] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 239.199340][ T7293] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.023743][ T7307] loop1: detected capacity change from 0 to 128 [ 240.121419][ T7289] loop2: detected capacity change from 0 to 32768 [ 240.137064][ T7289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7289) [ 240.223855][ T7289] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.245269][ T7289] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 240.256871][ T7289] BTRFS info (device loop2): setting nodatasum [ 240.266685][ T7289] BTRFS info (device loop2): max_inline at 0 [ 240.278678][ T7289] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.310595][ T7289] BTRFS info (device loop2): force zstd compression, level 3 [ 240.318106][ T7289] BTRFS info (device loop2): using free space tree [ 240.956573][ T7289] BTRFS info (device loop2): enabling ssd optimizations [ 240.994202][ T7289] BTRFS info (device loop2): checking UUID tree [ 241.408347][ T5258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.933345][ T7354] loop4: detected capacity change from 0 to 64 [ 241.967420][ T27] audit: type=1804 audit(2000000012.434:10930): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2240779141/syzkaller.bHKBzN/45/file0" dev="sda1" ino=1958 res=1 errno=0 [ 244.745204][ T7400] loop3: detected capacity change from 0 to 64 [ 245.156912][ T27] audit: type=1804 audit(2000000015.184:10931): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1721323834/syzkaller.A4QyQ7/280/file0" dev="sda1" ino=1950 res=1 errno=0 [ 245.230491][ T7379] loop4: detected capacity change from 0 to 32768 [ 245.246724][ T7379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7379) [ 245.374304][ T7379] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.393607][ T7379] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 245.407564][ T7379] BTRFS info (device loop4): setting nodatasum [ 245.414812][ T7379] BTRFS info (device loop4): max_inline at 0 [ 245.421145][ T7379] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 245.431786][ T7379] BTRFS info (device loop4): force zstd compression, level 3 [ 245.439891][ T7379] BTRFS info (device loop4): using free space tree [ 245.472394][ T7379] BTRFS info (device loop4): enabling ssd optimizations [ 245.480483][ T7379] BTRFS info (device loop4): checking UUID tree [ 245.718604][ T6422] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.442404][ T7451] loop3: detected capacity change from 0 to 64 [ 248.451949][ T27] audit: type=1804 audit(2000000018.544:10932): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1721323834/syzkaller.A4QyQ7/282/file0" dev="sda1" ino=1960 res=1 errno=0 [ 248.518055][ T27] audit: type=1804 audit(2000000018.544:10933): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1721323834/syzkaller.A4QyQ7/282/file0" dev="sda1" ino=1960 res=1 errno=0 [ 248.543428][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.257223][ T7486] loop2: detected capacity change from 0 to 64 [ 249.266486][ T27] audit: type=1804 audit(2000000019.844:10934): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1748296392/syzkaller.oDX5yd/140/file0" dev="sda1" ino=1957 res=1 errno=0 [ 249.291875][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.088359][ T27] audit: type=1326 audit(2000000021.674:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.088406][ T27] audit: type=1326 audit(2000000021.674:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.167176][ T27] audit: type=1326 audit(2000000021.744:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.167213][ T27] audit: type=1326 audit(2000000021.744:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.167241][ T27] audit: type=1326 audit(2000000021.744:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.174494][ T27] audit: type=1326 audit(2000000021.774:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.174873][ T27] audit: type=1326 audit(2000000021.774:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f2a7d0a9 code=0x7ffc0000 [ 251.241204][ T7517] loop2: detected capacity change from 0 to 1024 [ 251.289840][ T7517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.765044][ T7530] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 252.214351][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 252.733163][ T5270] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 252.810314][ T7545] loop2: detected capacity change from 0 to 64 [ 253.008277][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 253.128621][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 253.288353][ T5270] usb 5-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=cc.96 [ 253.288415][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.288464][ T5270] usb 5-1: Product: syz [ 253.288512][ T5270] usb 5-1: Manufacturer: syz [ 253.288527][ T5270] usb 5-1: SerialNumber: syz [ 254.103423][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 254.103439][ T27] audit: type=1804 audit(2000000023.394:10954): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1748296392/syzkaller.oDX5yd/143/file0" dev="sda1" ino=1964 res=1 errno=0 [ 254.103476][ T27] audit: type=1804 audit(2000000023.404:10955): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1748296392/syzkaller.oDX5yd/143/file0" dev="sda1" ino=1964 res=1 errno=0 [ 254.105676][ T5270] usb 5-1: config 0 descriptor?? [ 255.528673][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.535078][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.757345][ T5270] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 255.766269][ T7586] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.789307][ T5270] usb 5-1: USB disconnect, device number 10 [ 255.821188][ T27] audit: type=1326 audit(2000000026.424:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2567d0a9 code=0x0 [ 256.265272][ T7604] loop4: detected capacity change from 0 to 512 [ 256.273036][ T7604] ext3: Unknown parameter 'seclabel' [ 259.806580][ T7612] hub 9-0:1.0: USB hub found [ 259.826404][ T7612] hub 9-0:1.0: 8 ports detected [ 260.055660][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.073546][ T7638] loop2: detected capacity change from 0 to 1024 [ 260.093844][ T27] audit: type=1804 audit(2000000030.694:10957): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138140236/syzkaller.C4dcQT/115/file0" dev="sda1" ino=1965 res=1 errno=0 [ 260.124145][ T7644] loop4: detected capacity change from 0 to 256 [ 260.573993][ T7638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.795695][ T7645] loop1: detected capacity change from 0 to 1024 [ 261.028278][ T27] audit: type=1326 audit(2000000031.554:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f126407d0a9 code=0x0 [ 261.072452][ T7663] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.357097][ T3562] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 261.440350][ T5258] EXT4-fs (loop2): unmounting filesystem. [ 261.596441][ T7665] binder: 7664:7665 ioctl c018620c 20000040 returned -1 [ 261.603640][ T3562] usb 1-1: Using ep0 maxpacket: 32 [ 261.630294][ T7665] loop4: detected capacity change from 0 to 1024 [ 261.728479][ T3562] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 261.754875][ T3562] usb 1-1: config 0 has no interface number 0 [ 261.782183][ T3562] usb 1-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 261.921050][ T3562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.930715][ T3562] usb 1-1: config 0 descriptor?? [ 262.456681][ T7671] hfsplus: xattr search failed [ 262.548259][ T3575] Bluetooth: hci3: command 0x0406 tx timeout [ 263.896463][ T3575] Bluetooth: hci4: unexpected event for opcode 0x203c [ 264.074600][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.388761][ T27] audit: type=1804 audit(2000000034.994:10959): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1748296392/syzkaller.oDX5yd/154/file0" dev="sda1" ino=1945 res=1 errno=0 [ 264.922910][ T5262] usb 1-1: USB disconnect, device number 5 [ 264.999725][ T7707] binder: 7706:7707 ioctl c018620c 20000040 returned -1 [ 265.831057][ T7707] loop3: detected capacity change from 0 to 1024 [ 265.895390][ T3575] Bluetooth: hci3: unexpected event for opcode 0x203c [ 266.062517][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.756441][ T7732] loop0: detected capacity change from 0 to 128 [ 266.842187][ T27] audit: type=1800 audit(2000000037.444:10960): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048673 res=0 errno=0 [ 266.955881][ T7733] loop2: detected capacity change from 0 to 1024 [ 267.358300][ T152] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 267.803245][ T152] usb 4-1: Using ep0 maxpacket: 32 [ 268.292218][ T27] audit: type=1804 audit(2000000038.894:10961): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir138140236/syzkaller.C4dcQT/122/file0" dev="sda1" ino=1940 res=1 errno=0 [ 268.378853][ T152] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 268.403013][ T152] usb 4-1: config 0 has no interface number 0 [ 268.448352][ T152] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=33.a8 [ 268.463254][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.482195][ T152] usb 4-1: config 0 descriptor?? [ 268.887784][ T7764] binder: 7763:7764 ioctl c018620c 20000040 returned -1 [ 268.898793][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.942627][ T7764] loop2: detected capacity change from 0 to 1024 [ 269.986146][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.165328][ T3619] usb 4-1: USB disconnect, device number 11 [ 270.233997][ T7788] loop4: detected capacity change from 0 to 1024 [ 270.412801][ T3575] Bluetooth: hci4: unexpected event for opcode 0x203c [ 270.495036][ T27] audit: type=1804 audit(2000000041.094:10962): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1028717331/syzkaller.Cp4lrX/63/file0" dev="sda1" ino=1960 res=1 errno=0 [ 270.986394][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.262993][ T7818] binder: 7817:7818 ioctl c018620c 20000040 returned -1 [ 271.294808][ T7818] loop1: detected capacity change from 0 to 1024 [ 271.578219][ T3616] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 272.459310][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.510077][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 273.250251][ T3616] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 273.276475][ T3616] usb 1-1: config 0 has no interface number 0 [ 273.279688][ T7836] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 273.279688][ T7836] mac=(168,0) net=(168,20) trans=188 [ 273.279688][ T7836] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 273.279688][ T7836] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 273.279688][ T7836] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 273.315409][ T7836] dev name=veth0 feat=0x000061164fdd19e9 [ 273.321059][ T7836] skb linear: 00000000: 45 02 29 89 8d c9 00 00 0f 2f 54 4b ac 14 14 18 [ 273.329627][ T7836] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 273.338112][ T7836] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 273.346619][ T7836] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 273.355133][ T7836] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 273.363636][ T7836] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 273.372140][ T7836] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.380641][ T7836] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.389140][ T7836] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.397619][ T7836] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.406117][ T7836] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.414620][ T7836] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.423120][ T7836] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.431619][ T7836] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.440203][ T7836] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.448699][ T7836] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.457188][ T7836] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.465728][ T7836] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.474243][ T7836] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.482750][ T7836] ------------[ cut here ]------------ [ 273.488230][ T7836] offset (10633) >= skb_headlen() (10633) [ 273.494462][ T7836] WARNING: CPU: 0 PID: 7836 at net/core/dev.c:3305 skb_checksum_help+0x626/0x740 [ 273.503686][ T7836] Modules linked in: [ 273.507606][ T7836] CPU: 0 PID: 7836 Comm: syz-executor.3 Not tainted 6.1.94-syzkaller #0 [ 273.515934][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 273.525997][ T7836] RIP: 0010:skb_checksum_help+0x626/0x740 [ 273.531731][ T7836] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1a e1 8b 44 89 fe 89 da e8 ea f1 d1 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 99 f4 09 f9 c6 05 dd f3 de [ 273.551351][ T7836] RSP: 0018:ffffc9000351eee8 EFLAGS: 00010246 [ 273.557412][ T7836] RAX: 053b85b317896900 RBX: 0000000000002989 RCX: 0000000000040000 [ 273.565388][ T7836] RDX: ffffc9000ae71000 RSI: 000000000003ffff RDI: 0000000000040000 [ 273.573392][ T7836] RBP: 0000000000002989 R08: ffffffff8152931e R09: fffff520006a3d3d [ 273.581384][ T7836] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 273.589359][ T7836] R13: ffff88805f9bd430 R14: ffff88805f9bd3c0 R15: 0000000000002989 [ 273.597328][ T7836] FS: 00007fb202fff6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 273.606282][ T7836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.612872][ T7836] CR2: 000000002000e000 CR3: 0000000028669000 CR4: 00000000003506f0 [ 273.620851][ T7836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.628835][ T7836] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.636807][ T7836] Call Trace: [ 273.640089][ T7836] [ 273.643051][ T7836] ? __warn+0x15a/0x520 [ 273.647200][ T7836] ? skb_checksum_help+0x626/0x740 [ 273.652329][ T7836] ? report_bug+0x2af/0x500 [ 273.656833][ T7836] ? skb_checksum_help+0x626/0x740 [ 273.661975][ T7836] ? handle_bug+0x3d/0x70 [ 273.666302][ T7836] ? exc_invalid_op+0x16/0x40 [ 273.670988][ T7836] ? asm_exc_invalid_op+0x16/0x20 [ 273.676036][ T7836] ? __warn_printk+0x28e/0x350 [ 273.680815][ T7836] ? skb_checksum_help+0x626/0x740 [ 273.685920][ T7836] ? skb_checksum_help+0x626/0x740 [ 273.691046][ T7836] ip_do_fragment+0x209/0x1b20 [ 273.695814][ T7836] ? print_irqtrace_events+0x210/0x210 [ 273.701289][ T7836] ? ip_fragment+0x220/0x220 [ 273.705889][ T7836] ? ip_frag_next+0xb10/0xb10 [ 273.710587][ T7836] ? kmem_cache_free+0x292/0x510 [ 273.715525][ T7836] ? ip_fragment+0x9a/0x220 [ 273.720058][ T7836] __ip_finish_output+0x2bd/0x4b0 [ 273.725081][ T7836] iptunnel_xmit+0x513/0x920 [ 273.729695][ T7836] ip_tunnel_xmit+0x22e4/0x2cc0 [ 273.734573][ T7836] ? tnl_update_pmtu+0x10b0/0x10b0 [ 273.739697][ T7836] ? skb_mac_gso_segment+0x4eb/0x710 [ 273.744977][ T7836] ? validate_xmit_xfrm+0xb4/0x10b0 [ 273.750193][ T7836] ? gre_build_header+0x25b/0x9a0 [ 273.755242][ T7836] ipgre_xmit+0x866/0xc40 [ 273.759596][ T7836] dev_hard_start_xmit+0x261/0x8c0 [ 273.764715][ T7836] __dev_queue_xmit+0x1bb1/0x3cf0 [ 273.769758][ T7836] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 273.774866][ T7836] ? netdev_core_pick_tx+0x320/0x320 [ 273.780181][ T7836] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 273.785733][ T7836] packet_sendmsg+0x4775/0x61a0 [ 273.790622][ T7836] ? aa_sk_perm+0xa60/0xa60 [ 273.795136][ T7836] ? aa_sk_perm+0x92d/0xa60 [ 273.799643][ T7836] ? tomoyo_socket_bind_permission+0x330/0x330 [ 273.805786][ T7836] ? packet_getsockopt+0xed0/0xed0 [ 273.810911][ T7836] ? __import_iovec+0x316/0x4c0 [ 273.815757][ T7836] ? aa_sock_msg_perm+0x91/0x150 [ 273.820705][ T7836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 273.825982][ T7836] ? security_socket_sendmsg+0x7d/0xa0 [ 273.831444][ T7836] ? packet_getsockopt+0xed0/0xed0 [ 273.836554][ T7836] ____sys_sendmsg+0x5a5/0x8f0 [ 273.841343][ T7836] ? __sys_sendmsg_sock+0x30/0x30 [ 273.846377][ T7836] __sys_sendmsg+0x2a9/0x390 [ 273.850977][ T7836] ? ____sys_sendmsg+0x8f0/0x8f0 [ 273.855912][ T7836] ? rcu_is_watching+0x11/0xb0 [ 273.860691][ T7836] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 273.866683][ T7836] ? syscall_enter_from_user_mode+0x2e/0x230 [ 273.872693][ T7836] ? lockdep_hardirqs_on+0x94/0x130 [ 273.877885][ T7836] ? syscall_enter_from_user_mode+0x2e/0x230 [ 273.883883][ T7836] do_syscall_64+0x3b/0xb0 [ 273.888315][ T7836] ? clear_bhb_loop+0x45/0xa0 [ 273.892988][ T7836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.898898][ T7836] RIP: 0033:0x7fb20227d0a9 [ 273.903328][ T7836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 273.923055][ T7836] RSP: 002b:00007fb202fff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.931482][ T7836] RAX: ffffffffffffffda RBX: 00007fb2023b3f80 RCX: 00007fb20227d0a9 [ 273.939460][ T7836] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 273.947419][ T7836] RBP: 00007fb2022ec074 R08: 0000000000000000 R09: 0000000000000000 [ 273.955397][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.963385][ T7836] R13: 000000000000000b R14: 00007fb2023b3f80 R15: 00007ffed1e09cf8 [ 273.971394][ T7836] [ 273.974403][ T7836] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.981672][ T7836] CPU: 0 PID: 7836 Comm: syz-executor.3 Not tainted 6.1.94-syzkaller #0 [ 273.989987][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.000027][ T7836] Call Trace: [ 274.003293][ T7836] [ 274.006222][ T7836] dump_stack_lvl+0x1e3/0x2cb [ 274.010899][ T7836] ? nf_tcp_handle_invalid+0x642/0x642 [ 274.016352][ T7836] ? panic+0x764/0x764 [ 274.020409][ T7836] ? 0xffffffffa0000958 [ 274.024552][ T7836] ? vscnprintf+0x59/0x80 [ 274.028870][ T7836] panic+0x318/0x764 [ 274.032765][ T7836] ? __warn+0x169/0x520 [ 274.036915][ T7836] ? memcpy_page_flushcache+0xfc/0xfc [ 274.042306][ T7836] __warn+0x348/0x520 [ 274.046297][ T7836] ? skb_checksum_help+0x626/0x740 [ 274.051400][ T7836] report_bug+0x2af/0x500 [ 274.055725][ T7836] ? skb_checksum_help+0x626/0x740 [ 274.060829][ T7836] handle_bug+0x3d/0x70 [ 274.064988][ T7836] exc_invalid_op+0x16/0x40 [ 274.069487][ T7836] asm_exc_invalid_op+0x16/0x20 [ 274.074331][ T7836] RIP: 0010:skb_checksum_help+0x626/0x740 [ 274.080061][ T7836] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1a e1 8b 44 89 fe 89 da e8 ea f1 d1 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 99 f4 09 f9 c6 05 dd f3 de [ 274.099658][ T7836] RSP: 0018:ffffc9000351eee8 EFLAGS: 00010246 [ 274.105714][ T7836] RAX: 053b85b317896900 RBX: 0000000000002989 RCX: 0000000000040000 [ 274.113670][ T7836] RDX: ffffc9000ae71000 RSI: 000000000003ffff RDI: 0000000000040000 [ 274.121646][ T7836] RBP: 0000000000002989 R08: ffffffff8152931e R09: fffff520006a3d3d [ 274.129622][ T7836] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 274.137582][ T7836] R13: ffff88805f9bd430 R14: ffff88805f9bd3c0 R15: 0000000000002989 [ 274.145557][ T7836] ? __warn_printk+0x28e/0x350 [ 274.150345][ T7836] ? skb_checksum_help+0x626/0x740 [ 274.155453][ T7836] ip_do_fragment+0x209/0x1b20 [ 274.160220][ T7836] ? print_irqtrace_events+0x210/0x210 [ 274.165673][ T7836] ? ip_fragment+0x220/0x220 [ 274.170280][ T7836] ? ip_frag_next+0xb10/0xb10 [ 274.174955][ T7836] ? kmem_cache_free+0x292/0x510 [ 274.179883][ T7836] ? ip_fragment+0x9a/0x220 [ 274.184386][ T7836] __ip_finish_output+0x2bd/0x4b0 [ 274.189407][ T7836] iptunnel_xmit+0x513/0x920 [ 274.194001][ T7836] ip_tunnel_xmit+0x22e4/0x2cc0 [ 274.198871][ T7836] ? tnl_update_pmtu+0x10b0/0x10b0 [ 274.203971][ T7836] ? skb_mac_gso_segment+0x4eb/0x710 [ 274.209264][ T7836] ? validate_xmit_xfrm+0xb4/0x10b0 [ 274.214468][ T7836] ? gre_build_header+0x25b/0x9a0 [ 274.219486][ T7836] ipgre_xmit+0x866/0xc40 [ 274.223814][ T7836] dev_hard_start_xmit+0x261/0x8c0 [ 274.228937][ T7836] __dev_queue_xmit+0x1bb1/0x3cf0 [ 274.233961][ T7836] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 274.239077][ T7836] ? netdev_core_pick_tx+0x320/0x320 [ 274.244366][ T7836] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 274.249918][ T7836] packet_sendmsg+0x4775/0x61a0 [ 274.254771][ T7836] ? aa_sk_perm+0xa60/0xa60 [ 274.259312][ T7836] ? aa_sk_perm+0x92d/0xa60 [ 274.263803][ T7836] ? tomoyo_socket_bind_permission+0x330/0x330 [ 274.269968][ T7836] ? packet_getsockopt+0xed0/0xed0 [ 274.275084][ T7836] ? __import_iovec+0x316/0x4c0 [ 274.279928][ T7836] ? aa_sock_msg_perm+0x91/0x150 [ 274.284877][ T7836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 274.290183][ T7836] ? security_socket_sendmsg+0x7d/0xa0 [ 274.295652][ T7836] ? packet_getsockopt+0xed0/0xed0 [ 274.300799][ T7836] ____sys_sendmsg+0x5a5/0x8f0 [ 274.305561][ T7836] ? __sys_sendmsg_sock+0x30/0x30 [ 274.310585][ T7836] __sys_sendmsg+0x2a9/0x390 [ 274.315163][ T7836] ? ____sys_sendmsg+0x8f0/0x8f0 [ 274.320114][ T7836] ? rcu_is_watching+0x11/0xb0 [ 274.324908][ T7836] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 274.330930][ T7836] ? syscall_enter_from_user_mode+0x2e/0x230 [ 274.336929][ T7836] ? lockdep_hardirqs_on+0x94/0x130 [ 274.342149][ T7836] ? syscall_enter_from_user_mode+0x2e/0x230 [ 274.348121][ T7836] do_syscall_64+0x3b/0xb0 [ 274.352545][ T7836] ? clear_bhb_loop+0x45/0xa0 [ 274.357224][ T7836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.363107][ T7836] RIP: 0033:0x7fb20227d0a9 [ 274.367519][ T7836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 274.387124][ T7836] RSP: 002b:00007fb202fff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.395527][ T7836] RAX: ffffffffffffffda RBX: 00007fb2023b3f80 RCX: 00007fb20227d0a9 [ 274.403488][ T7836] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 274.411464][ T7836] RBP: 00007fb2022ec074 R08: 0000000000000000 R09: 0000000000000000 [ 274.419424][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.427379][ T7836] R13: 000000000000000b R14: 00007fb2023b3f80 R15: 00007ffed1e09cf8 [ 274.435368][ T7836] [ 274.438712][ T7836] Kernel Offset: disabled [ 274.443090][ T7836] Rebooting in 86400 seconds..