last executing test programs: 9m10.497963297s ago: executing program 4 (id=313): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 9m9.438005506s ago: executing program 4 (id=316): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, '\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) close_range(r5, 0xffffffffffffffff, 0x0) 9m5.063460584s ago: executing program 4 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 9m4.539725998s ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 9m3.324330398s ago: executing program 4 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 9m1.766811737s ago: executing program 4 (id=331): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) 8m46.342081405s ago: executing program 32 (id=331): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) 14.915820506s ago: executing program 0 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000000c00018004000200636f6e6e6c696d6974000000040002800900010073797a3000000000710000001000010000"], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x6400c884}, 0x4000004) 12.815512822s ago: executing program 0 (id=1848): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001600)={0x8, [], 0xb, "97451a24bdc556"}) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 5.940586475s ago: executing program 3 (id=1879): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) 5.649896654s ago: executing program 1 (id=1880): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 5.637616996s ago: executing program 2 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20) 5.135273211s ago: executing program 2 (id=1883): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$setperm(0x5, r1, 0x400001d) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 5.120723843s ago: executing program 3 (id=1884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x4000009c, 0x0, 0x1}, {0xc0000101, 0x0, 0x8}]}) 5.007687773s ago: executing program 2 (id=1885): io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="49d3d482f8", 0x5, 0xfffffffffffffc01, 0x0, 0x2, r1}, 0x0) 4.748462216s ago: executing program 1 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.283542785s ago: executing program 1 (id=1888): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 4.268337347s ago: executing program 3 (id=1889): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 4.19718561s ago: executing program 0 (id=1890): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000600)={r7, r6, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 4.041810666s ago: executing program 5 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a01020000000000000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000000c00018004000200636f6e6e6c696d6974000000040002800900010073797a3000000000710000001000010000"], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x6400c884}, 0x4000004) 3.995093714s ago: executing program 2 (id=1892): r0 = socket$inet(0x2, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x800, {{0x2, 0x4e23, @multicast2}}}, 0x90) 3.755678505s ago: executing program 3 (id=1893): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) syz_open_dev$sndctrl(0x0, 0x0, 0x0) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f00000005c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x7}, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'barrier'}}], 0x2c}, 0x1, 0x47d, &(0x7f0000001340)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000f40)='./file0\x00', 0x4c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a001200", 0x3c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x600) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x2) 3.713733142s ago: executing program 5 (id=1894): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) 3.523270834s ago: executing program 2 (id=1895): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "fd"}, @main=@item_012={0x2, 0x0, 0x8, "0107"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x31, 0x5, "2118031c9e"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x10}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d832"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, '}W'}, 0x0, 0x0, 0x0, 0x0}) 3.286428374s ago: executing program 1 (id=1896): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 3.182838762s ago: executing program 0 (id=1897): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 2.579880274s ago: executing program 5 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040) 2.505938916s ago: executing program 3 (id=1899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='common_pid >', 0xc) 1.590632221s ago: executing program 5 (id=1900): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001600)={0x8, [], 0xb, "97451a24bdc556"}) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 1.571849904s ago: executing program 0 (id=1901): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/168, 0xa8, 0x20, 0x0, 0x0) 1.388177465s ago: executing program 3 (id=1902): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={r6, r5, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 1.149960035s ago: executing program 5 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100040000000000040003000000006c10000100000000002000"], 0x24, 0x0) 1.102656973s ago: executing program 1 (id=1904): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 1.022531267s ago: executing program 5 (id=1905): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000ffffffffeffffffffffffffd2e2e"], 0x48) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) 987.543073ms ago: executing program 0 (id=1906): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840) r8 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, 0x0, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0) 353.03µs ago: executing program 1 (id=1907): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000600)={r7, r6, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 0s ago: executing program 2 (id=1908): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 8][ T4541] 9pnet: Insufficient options for proto=fd [ 100.339854][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 100.339867][ T26] audit: type=1800 audit(1790921511.507:21): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.62" name="memory_backed" dev="configfs" ino=33991 res=0 errno=0 [ 100.357952][ T4546] netlink: 'syz.4.62': attribute type 4 has an invalid length. [ 100.483243][ T4546] netlink: 104 bytes leftover after parsing attributes in process `syz.4.62'. [ 100.492700][ T26] audit: type=1800 audit(1790921511.507:22): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.62" name="zoned" dev="configfs" ino=33992 res=0 errno=0 [ 100.547224][ T4525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.587643][ T4188] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.253199][ T4557] loop2: detected capacity change from 0 to 512 [ 102.298754][ T4557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.65: missing EA_INODE flag [ 102.316445][ T26] audit: type=1800 audit(1790921513.487:23): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.62" name="power" dev="configfs" ino=34091 res=0 errno=0 [ 102.322176][ T4557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.65: error while reading EA inode 2 err=-117 [ 102.718133][ T4557] EXT4-fs (loop2): 1 orphan inode deleted [ 102.735282][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 102.771576][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 102.830021][ T4575] loop4: detected capacity change from 0 to 1024 [ 102.842534][ T4582] futex_wake_op: syz.0.69 tries to shift op by 144; fix this program [ 104.056637][ T4592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.400693][ C0] Unknown status report in ack skb [ 105.409136][ T4604] capability: warning: `syz.1.73' uses 32-bit capabilities (legacy support in use) [ 106.109460][ T4612] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 106.884826][ T26] audit: type=1326 audit(1790921774.062:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98f5042159 code=0x0 [ 106.935421][ T4620] misc userio: Invalid payload size [ 106.964978][ T4620] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.373840][ T4174] libceph: connect (1)[c::]:6789 error -101 [ 107.380298][ T4174] libceph: mon0 (1)[c::]:6789 connect error [ 107.390073][ T4625] ceph: No mds server is up or the cluster is laggy [ 107.597386][ T4635] device veth0 entered promiscuous mode [ 108.180841][ T4626] device veth0 left promiscuous mode [ 109.231538][ T4643] loop3: detected capacity change from 0 to 32768 [ 109.588938][ T4643] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.569447][ T4658] loop2: detected capacity change from 0 to 512 [ 110.668879][ T4658] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.682154][ T4658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.793221][ T4658] EXT4-fs (loop2): 1 truncate cleaned up [ 110.798999][ T4658] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,data_err=ignore,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 111.468438][ T4643] syz.3.85 (4643) used greatest stack depth: 18208 bytes left [ 111.625817][ T4672] loop0: detected capacity change from 0 to 512 [ 111.626678][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 111.654990][ T26] audit: type=1326 audit(1790921778.832:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 111.763851][ T26] audit: type=1326 audit(1790921778.832:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 113.523596][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 113.613556][ T26] audit: type=1326 audit(1790921778.892:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ee067698e code=0x7ffc0000 [ 113.697738][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 113.794126][ T26] audit: type=1326 audit(1790921778.892:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 113.824048][ T26] audit: type=1326 audit(1790921778.892:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.238185][ T26] audit: type=1326 audit(1790921778.902:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.318982][ T26] audit: type=1326 audit(1790921778.902:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.343036][ T26] audit: type=1326 audit(1790921778.902:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.367441][ T26] audit: type=1326 audit(1790921778.902:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.393502][ T26] audit: type=1326 audit(1790921778.902:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.417568][ T26] audit: type=1326 audit(1790921778.902:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 114.441489][ T26] audit: type=1326 audit(1790921778.902:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.4.90" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6ee06b6159 code=0x7ffc0000 [ 115.342885][ T4704] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 115.959606][ T4704] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000011 [ 116.428347][ T4712] 9pnet: Insufficient options for proto=fd [ 119.193019][ T4733] lo speed is unknown, defaulting to 1000 [ 119.536564][ C0] net_ratelimit: 46 callbacks suppressed [ 120.903978][ T4747] loop3: detected capacity change from 0 to 128 [ 122.072346][ T4747] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.258467][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 123.322780][ T4747] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.267868][ T4773] futex_wake_op: syz.0.113 tries to shift op by 144; fix this program [ 124.856085][ C1] net_ratelimit: 44 callbacks suppressed [ 125.216892][ T4774] udc-core: couldn't find an available UDC or it's busy [ 126.228199][ T4768] tmpfs: Unknown parameter 'quota' [ 127.061803][ T4785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 127.368704][ T4768] md: pers->run() failed ... [ 127.606022][ T4788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.664719][ T4792] bond1 (unregistering): Released all slaves [ 128.274224][ T4788] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.283428][ T4788] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.292262][ T4788] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.301584][ T4788] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.968599][ C1] net_ratelimit: 53 callbacks suppressed [ 130.892610][ T4834] futex_wake_op: syz.1.126 tries to shift op by 144; fix this program [ 131.547062][ T4835] UBIFS error (pid: 4835): cannot open "", error -22 [ 132.493752][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.706012][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712319][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418452][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 135.263500][ C0] net_ratelimit: 36 callbacks suppressed [ 136.636526][ T1107] usb 3-1: device descriptor read/all, error -71 [ 136.727513][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 136.764433][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 137.023069][ T4868] udc-core: couldn't find an available UDC or it's busy [ 137.958784][ T4872] sctp: [Deprecated]: syz.3.138 (pid 4872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.958784][ T4872] Use struct sctp_sack_info instead [ 139.061123][ T4877] [U]  [ 140.863506][ C1] net_ratelimit: 66 callbacks suppressed [ 144.195432][ T4918] loop3: detected capacity change from 0 to 512 [ 144.547788][ T4918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.775084][ T4918] EXT4-fs (loop3): 1 truncate cleaned up [ 144.780944][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,data_err=ignore,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 145.987255][ C0] net_ratelimit: 37 callbacks suppressed [ 148.365025][ T4950] [U]  [ 148.524192][ T4957] loop4: detected capacity change from 0 to 512 [ 149.883416][ T4972] loop4: detected capacity change from 0 to 128 [ 150.860182][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 150.871408][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 151.113513][ C0] net_ratelimit: 61 callbacks suppressed [ 152.095693][ T4997] futex_wake_op: syz.2.164 tries to shift op by 144; fix this program [ 152.960150][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 152.970204][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 154.504628][ T5025] futex_wake_op: syz.0.183 tries to shift op by 144; fix this program [ 155.964828][ T5034] futex_wake_op: syz.0.175 tries to shift op by 144; fix this program [ 156.863521][ C1] net_ratelimit: 36 callbacks suppressed [ 157.412401][ T5047] loop4: detected capacity change from 0 to 512 [ 157.600999][ T5047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.842356][ T5047] EXT4-fs (loop4): 1 truncate cleaned up [ 157.849339][ T5047] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,data_err=ignore,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 158.343898][ T5057] futex_wake_op: syz.3.179 tries to shift op by 144; fix this program [ 159.223971][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 159.251584][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 160.142849][ T5074] futex_wake_op: syz.4.181 tries to shift op by 144; fix this program [ 160.976411][ T5088] md/raid1:md0: active with 1 out of 2 mirrors [ 161.541650][ T5088] md0: detected capacity change from 0 to 2048 [ 162.191796][ C0] net_ratelimit: 60 callbacks suppressed [ 163.226760][ T5110] sctp: [Deprecated]: syz.4.192 (pid 5110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.226760][ T5110] Use struct sctp_sack_info instead [ 164.358543][ T5119] loop3: detected capacity change from 0 to 256 [ 164.633986][ T5123] futex_wake_op: syz.1.196 tries to shift op by 144; fix this program [ 164.941971][ T5129] loop3: detected capacity change from 0 to 128 [ 165.149292][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 165.159681][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 166.205002][ T5136] futex_wake_op: syz.3.198 tries to shift op by 144; fix this program [ 167.193515][ C0] net_ratelimit: 40 callbacks suppressed [ 167.817634][ T5142] loop3: detected capacity change from 0 to 512 [ 169.200810][ T5153] futex_wake_op: syz.0.204 tries to shift op by 144; fix this program [ 170.085031][ T5159] siw: device registration error -23 [ 170.127438][ T5159] loop3: detected capacity change from 0 to 512 [ 170.143526][ T5159] EXT4-fs (loop3): Ignoring removed bh option [ 170.242864][ T5159] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,bh,minixdf,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 170.259146][ T5159] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.368695][ T5159] EXT4-fs error (device loop3): ext4_get_first_dir_block:3607: inode #12: block 32: comm syz.3.208: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 170.395719][ T5159] EXT4-fs error (device loop3): ext4_get_first_dir_block:3610: inode #12: comm syz.3.208: directory missing '.' [ 172.376884][ C1] net_ratelimit: 50 callbacks suppressed [ 172.392931][ T5177] loop4: detected capacity change from 0 to 1024 [ 173.958194][ T5177] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 173.986894][ T5177] EXT4-fs (loop4): barriers disabled [ 174.044088][ T5177] JBD2: no valid journal superblock found [ 174.062565][ T5177] EXT4-fs (loop4): error loading journal [ 174.273866][ T5191] futex_wake_op: syz.1.212 tries to shift op by 144; fix this program [ 174.453051][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 174.939242][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 175.969790][ T5208] futex_wake_op: syz.2.215 tries to shift op by 144; fix this program [ 176.074005][ T5206] loop4: detected capacity change from 0 to 128 [ 176.851319][ T5214] siw: device registration error -23 [ 177.663501][ C1] net_ratelimit: 51 callbacks suppressed [ 177.789262][ T5205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.216'. [ 177.800043][ T5215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.216'. [ 177.816361][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 177.827838][ T5217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 178.088948][ T5222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.497943][ T5225] device bond_slave_0 entered promiscuous mode [ 178.504611][ T5225] device bond_slave_1 entered promiscuous mode [ 178.577830][ T5225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.597517][ T5225] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.707155][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.742524][ T5232] block device autoloading is deprecated and will be removed. [ 178.806892][ T5234] tmpfs: Unknown parameter 'quota' [ 179.988109][ T5237] 9pnet: Insufficient options for proto=fd [ 180.044379][ T5244] futex_wake_op: syz.2.218 tries to shift op by 144; fix this program [ 180.816802][ T5253] futex_wake_op: syz.3.226 tries to shift op by 144; fix this program [ 182.638077][ T5268] futex_wake_op: syz.2.230 tries to shift op by 144; fix this program [ 183.343508][ C1] net_ratelimit: 44 callbacks suppressed [ 183.376860][ T5275] futex_wake_op: syz.0.232 tries to shift op by 144; fix this program [ 184.081100][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 184.091910][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 185.983575][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 186.031394][ T5295] futex_wake_op: syz.0.237 tries to shift op by 144; fix this program [ 186.042207][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 186.051926][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 186.101244][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 186.674896][ T4836] Bluetooth: hci0: command 0x0406 tx timeout [ 188.111324][ T5307] siw: device registration error -23 [ 189.053869][ C0] net_ratelimit: 67 callbacks suppressed [ 190.859593][ T5324] futex_wake_op: syz.0.240 tries to shift op by 144; fix this program [ 192.052833][ T5332] futex_wake_op: syz.0.250 tries to shift op by 144; fix this program [ 193.720048][ T5342] futex_wake_op: syz.3.245 tries to shift op by 144; fix this program [ 194.223563][ C1] net_ratelimit: 49 callbacks suppressed [ 195.342336][ T5347] futex_wake_op: syz.4.254 tries to shift op by 144; fix this program [ 195.758277][ T5346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 195.767831][ T5353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 195.845106][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.851524][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.411809][ T5369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 197.428717][ T5369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 198.002145][ T5377] futex_wake_op: syz.1.261 tries to shift op by 144; fix this program [ 199.340441][ T5391] loop3: detected capacity change from 0 to 512 [ 199.854947][ T5395] futex_wake_op: syz.1.265 tries to shift op by 144; fix this program [ 200.130911][ T5391] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.256: missing EA_INODE flag [ 200.344770][ T5391] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.256: error while reading EA inode 2 err=-117 [ 200.698048][ C1] net_ratelimit: 35 callbacks suppressed [ 201.172762][ T5391] EXT4-fs (loop3): 1 orphan inode deleted [ 201.389999][ T5391] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 202.094184][ T5413] loop4: detected capacity change from 0 to 128 [ 202.886235][ T5422] futex_wake_op: syz.1.272 tries to shift op by 144; fix this program [ 202.921110][ T5413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 202.932492][ T5413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 204.832548][ T5438] futex_wake_op: syz.3.276 tries to shift op by 144; fix this program [ 205.683334][ T5444] futex_wake_op: syz.2.279 tries to shift op by 144; fix this program [ 205.983514][ C1] net_ratelimit: 89 callbacks suppressed [ 208.466571][ T5465] futex_wake_op: syz.0.284 tries to shift op by 144; fix this program [ 210.458021][ T5477] futex_wake_op: syz.0.287 tries to shift op by 144; fix this program [ 211.005848][ T5483] loop4: detected capacity change from 0 to 128 [ 211.324486][ T5486] loop3: detected capacity change from 0 to 128 [ 211.340654][ C1] net_ratelimit: 42 callbacks suppressed [ 211.617991][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 211.627886][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 211.700480][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 211.787881][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 214.058620][ T5509] futex_wake_op: syz.2.295 tries to shift op by 144; fix this program [ 215.922532][ T5520] futex_wake_op: syz.4.298 tries to shift op by 144; fix this program [ 216.666600][ C1] net_ratelimit: 79 callbacks suppressed [ 216.853170][ T5526] futex_wake_op: syz.2.299 tries to shift op by 144; fix this program [ 219.104949][ T5548] futex_wake_op: syz.1.306 tries to shift op by 144; fix this program [ 219.211126][ T5539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 220.137967][ T5553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 220.427105][ T5573] futex_wake_op: syz.0.310 tries to shift op by 144; fix this program [ 221.005917][ T5575] futex_wake_op: syz.3.312 tries to shift op by 144; fix this program [ 222.143496][ C1] net_ratelimit: 62 callbacks suppressed [ 223.332159][ T5595] loop3: detected capacity change from 0 to 128 [ 224.279162][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 224.289077][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 225.881752][ T5621] futex_wake_op: syz.4.324 tries to shift op by 144; fix this program [ 227.069454][ T5630] futex_wake_op: syz.4.325 tries to shift op by 144; fix this program [ 227.343507][ C1] net_ratelimit: 65 callbacks suppressed [ 227.490704][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 227.500854][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 228.194730][ T5642] futex_wake_op: syz.4.327 tries to shift op by 144; fix this program [ 231.002361][ T5665] futex_wake_op: syz.2.335 tries to shift op by 144; fix this program [ 232.097509][ T5672] futex_wake_op: syz.0.337 tries to shift op by 144; fix this program [ 232.873630][ C1] net_ratelimit: 73 callbacks suppressed [ 233.295230][ T5676] futex_wake_op: syz.0.338 tries to shift op by 144; fix this program [ 234.156433][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 234.193947][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 236.919863][ T5707] futex_wake_op: syz.1.346 tries to shift op by 144; fix this program [ 237.395880][ T5716] futex_wake_op: syz.3.348 tries to shift op by 144; fix this program [ 238.059169][ T4230] net_ratelimit: 73 callbacks suppressed [ 238.362051][ T5722] futex_wake_op: syz.1.350 tries to shift op by 144; fix this program [ 241.601855][ T5738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 241.625253][ T5738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 243.193499][ C1] net_ratelimit: 67 callbacks suppressed [ 243.718501][ T5768] futex_wake_op: syz.1.359 tries to shift op by 144; fix this program [ 245.086738][ T5780] futex_wake_op: syz.3.365 tries to shift op by 144; fix this program [ 245.704594][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 245.714866][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 247.126772][ T5786] lo speed is unknown, defaulting to 1000 [ 247.405917][ T4287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.418800][ T4287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.775878][ T4287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.932614][ T4287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.354947][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 248.449984][ T4287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.558898][ T4287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.644780][ T5806] futex_wake_op: syz.1.362 tries to shift op by 144; fix this program [ 248.660241][ C1] net_ratelimit: 56 callbacks suppressed [ 249.557950][ T5811] futex_wake_op: syz.1.372 tries to shift op by 144; fix this program [ 249.958472][ T4287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.058493][ T4287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.199317][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'. [ 250.209853][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'. [ 250.464778][ T4232] Bluetooth: hci5: command 0x041b tx timeout [ 251.574404][ T5820] loop3: detected capacity change from 0 to 128 [ 252.061926][ T5820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 252.071777][ T5820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 252.400785][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 252.698030][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 253.743499][ C1] net_ratelimit: 39 callbacks suppressed [ 255.203016][ T5863] futex_wake_op: syz.0.381 tries to shift op by 144; fix this program [ 255.225835][ T5861] futex_wake_op: syz.3.380 tries to shift op by 144; fix this program [ 255.236569][ T5854] Bluetooth: hci5: command 0x0419 tx timeout [ 255.786460][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.810642][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.848788][ T5786] device bridge_slave_0 entered promiscuous mode [ 255.881438][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.923744][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.955795][ T5786] device bridge_slave_1 entered promiscuous mode [ 257.880128][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.926202][ T5901] futex_wake_op: syz.0.382 tries to shift op by 144; fix this program [ 258.731597][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.793519][ C1] net_ratelimit: 50 callbacks suppressed [ 259.182861][ T5786] team0: Port device team_slave_0 added [ 259.480553][ T5786] team0: Port device team_slave_1 added [ 259.882676][ T5919] loop3: detected capacity change from 0 to 256 [ 260.194776][ T5927] futex_wake_op: syz.0.392 tries to shift op by 144; fix this program [ 260.880121][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.886601][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.926851][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 260.936431][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 260.968104][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.975147][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.007822][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.331785][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.349738][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.581418][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.016872][ T5951] futex_wake_op: syz.2.397 tries to shift op by 144; fix this program [ 263.903510][ C0] net_ratelimit: 43 callbacks suppressed [ 265.019400][ T5786] device hsr_slave_0 entered promiscuous mode [ 265.123352][ T5786] device hsr_slave_1 entered promiscuous mode [ 265.328797][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.361887][ T5786] Cannot create hsr debugfs directory [ 265.601243][ T5980] futex_wake_op: syz.0.393 tries to shift op by 144; fix this program [ 266.789923][ T5986] futex_wake_op: syz.0.402 tries to shift op by 144; fix this program [ 267.741724][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 267.757023][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 269.056207][ T6006] futex_wake_op: syz.3.407 tries to shift op by 144; fix this program [ 269.263514][ C1] net_ratelimit: 49 callbacks suppressed [ 271.073881][ T4287] device hsr_slave_0 left promiscuous mode [ 271.167024][ T4287] device hsr_slave_1 left promiscuous mode [ 271.290283][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.314572][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.716548][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.740460][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.748984][ T4287] device bridge_slave_1 left promiscuous mode [ 271.766022][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.787643][ T4287] device bridge_slave_0 left promiscuous mode [ 271.800158][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.966475][ T6037] futex_wake_op: syz.2.411 tries to shift op by 144; fix this program [ 272.735640][ T4287] device veth1_macvtap left promiscuous mode [ 272.799923][ T4287] device veth0_macvtap left promiscuous mode [ 272.995012][ T4287] device veth1_vlan left promiscuous mode [ 273.209323][ T4287] device veth0_vlan left promiscuous mode [ 274.280498][ T6067] futex_wake_op: syz.3.417 tries to shift op by 144; fix this program [ 274.463535][ C1] net_ratelimit: 60 callbacks suppressed [ 275.681166][ T6076] futex_wake_op: syz.3.419 tries to shift op by 144; fix this program [ 276.947079][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 277.060302][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 277.276749][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.721890][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.755658][ T21] infiniband syz5: ib_query_port failed (-19) [ 277.957555][ T4287] bond0 (unregistering): Released all slaves [ 278.161098][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'. [ 278.276212][ T6090] futex_wake_op: syz.2.423 tries to shift op by 144; fix this program [ 278.865522][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'. [ 278.958314][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'. [ 278.984285][ T6038] lo speed is unknown, defaulting to 1000 [ 278.993030][ T4330] bond0 speed is unknown, defaulting to 1000 [ 279.665544][ C0] net_ratelimit: 30 callbacks suppressed [ 279.891222][ T6110] futex_wake_op: syz.1.427 tries to shift op by 144; fix this program [ 280.768969][ T5786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.782275][ T5786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.796793][ T5786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.809830][ T5786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.141765][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.193192][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.219030][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.306854][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.408885][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.441876][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.494090][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.501219][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.540557][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.569926][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.634769][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.641900][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.684764][ T6142] futex_wake_op: syz.3.434 tries to shift op by 144; fix this program [ 282.818053][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.878504][ T6148] futex_wake_op: syz.3.435 tries to shift op by 144; fix this program [ 283.962197][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 283.971526][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 284.077529][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.118725][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.252014][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.312260][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.357248][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.441970][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.649221][ T6159] futex_wake_op: syz.1.429 tries to shift op by 144; fix this program [ 284.805185][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.953529][ C1] net_ratelimit: 40 callbacks suppressed [ 285.026598][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.829025][ T6163] futex_wake_op: syz.1.438 tries to shift op by 144; fix this program [ 285.993679][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.039573][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.085083][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.152056][ T5786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.291974][ T6168] futex_wake_op: syz.2.439 tries to shift op by 144; fix this program [ 287.279362][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.305617][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.376505][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.827836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.852005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.917850][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.962210][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.994518][ T5786] device veth0_vlan entered promiscuous mode [ 288.017349][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.042662][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.068006][ T5786] device veth1_vlan entered promiscuous mode [ 288.102545][ T6201] loop3: detected capacity change from 0 to 128 [ 288.463780][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.535116][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.847957][ T5786] device veth0_macvtap entered promiscuous mode [ 288.913842][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.922984][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.931952][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.988192][ T5786] device veth1_macvtap entered promiscuous mode [ 289.035762][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 289.056703][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 289.284817][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.529044][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.726047][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.736738][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.777134][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.821599][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.868655][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.922320][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.969582][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.065050][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.073499][ C1] net_ratelimit: 31 callbacks suppressed [ 290.104208][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.203684][ T6230] futex_wake_op: syz.2.444 tries to shift op by 144; fix this program [ 290.577108][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.395826][ T6237] futex_wake_op: syz.2.445 tries to shift op by 144; fix this program [ 291.731282][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.788816][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.851571][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.903370][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.943495][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.980014][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.021910][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.093497][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.141798][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.180301][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 292.214360][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 292.228878][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.261114][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.294559][ T5786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.335451][ T5786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.394020][ T5786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.445547][ T5786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.845215][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.883693][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.993127][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.074614][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.125975][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.186305][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.937275][ T6271] futex_wake_op: syz.1.449 tries to shift op by 144; fix this program [ 295.247247][ T6279] futex_wake_op: syz.0.460 tries to shift op by 144; fix this program [ 295.258186][ C0] net_ratelimit: 68 callbacks suppressed [ 295.609079][ T6283] futex_wake_op: syz.2.447 tries to shift op by 144; fix this program [ 296.673260][ T6299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.882005][ T6308] futex_wake_op: syz.1.455 tries to shift op by 144; fix this program [ 297.490175][ T6301] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 297.595424][ T6299] netlink: 14 bytes leftover after parsing attributes in process `syz.5.454'. [ 297.853035][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.974578][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.042896][ T6299] bond0 (unregistering): Released all slaves [ 298.123641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 298.431974][ T6318] loop5: detected capacity change from 0 to 512 [ 298.540691][ T6323] futex_wake_op: syz.3.457 tries to shift op by 144; fix this program [ 299.498993][ T6318] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.456: missing EA_INODE flag [ 299.530116][ T6318] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.456: error while reading EA inode 2 err=-117 [ 299.647642][ T6318] EXT4-fs (loop5): 1 orphan inode deleted [ 299.653413][ T6318] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 299.685657][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 299.696415][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 300.315372][ C0] net_ratelimit: 72 callbacks suppressed [ 302.297501][ T6365] 9pnet: Insufficient options for proto=fd [ 302.923547][ T6368] futex_wake_op: syz.5.464 tries to shift op by 144; fix this program [ 303.972575][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.133835][ T6388] futex_wake_op: syz.5.470 tries to shift op by 144; fix this program [ 305.823512][ C0] net_ratelimit: 49 callbacks suppressed [ 306.097969][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 306.107855][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 306.119968][ T6413] loop5: detected capacity change from 0 to 256 [ 306.593900][ T6418] loop3: detected capacity change from 0 to 512 [ 307.067229][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 307.091306][ T6418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.476: missing EA_INODE flag [ 307.154391][ T6418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.476: error while reading EA inode 2 err=-117 [ 307.245334][ T6418] EXT4-fs (loop3): 1 orphan inode deleted [ 307.252955][ T6418] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 307.522916][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 307.532983][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 308.293342][ T6445] futex_wake_op: syz.2.480 tries to shift op by 144; fix this program [ 309.523101][ T6457] futex_wake_op: syz.3.482 tries to shift op by 144; fix this program [ 310.719064][ T6461] 9pnet: Insufficient options for proto=fd [ 310.863282][ C0] net_ratelimit: 48 callbacks suppressed [ 313.071543][ T6505] futex_wake_op: syz.0.494 tries to shift op by 144; fix this program [ 314.000425][ T6523] futex_wake_op: syz.1.498 tries to shift op by 144; fix this program [ 314.874221][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 314.884022][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 315.913557][ C0] net_ratelimit: 49 callbacks suppressed [ 318.914243][ T6580] loop3: detected capacity change from 0 to 128 [ 319.597437][ T6590] futex_wake_op: syz.1.509 tries to shift op by 144; fix this program [ 320.229276][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 321.023498][ C1] net_ratelimit: 54 callbacks suppressed [ 321.137238][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 322.288424][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.300539][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.862411][ T6620] futex_wake_op: syz.2.515 tries to shift op by 144; fix this program [ 325.688417][ T6660] futex_wake_op: syz.0.521 tries to shift op by 144; fix this program [ 326.623510][ C0] net_ratelimit: 68 callbacks suppressed [ 327.030361][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 327.052914][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 328.011621][ T6686] loop5: detected capacity change from 0 to 128 [ 328.682703][ T6693] futex_wake_op: syz.1.527 tries to shift op by 144; fix this program [ 329.100688][ T6686] FAT-fs (loop5): bogus number of reserved sectors [ 329.173794][ T6686] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 329.214937][ T6686] FAT-fs (loop5): Can't find a valid FAT filesystem [ 330.369902][ T6704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.214227][ T6706] futex_wake_op: syz.2.532 tries to shift op by 144; fix this program [ 331.614764][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 331.663606][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 331.683677][ C1] net_ratelimit: 80 callbacks suppressed [ 331.712382][ T6703] ceph: No mds server is up or the cluster is laggy [ 331.721708][ T4836] libceph: connect (1)[c::]:6789 error -101 [ 331.732450][ T4836] libceph: mon0 (1)[c::]:6789 connect error [ 332.869196][ T6740] futex_wake_op: syz.0.539 tries to shift op by 144; fix this program [ 334.956815][ T6762] futex_wake_op: syz.3.544 tries to shift op by 144; fix this program [ 336.215303][ T6769] loop3: detected capacity change from 0 to 2048 [ 336.700528][ C0] net_ratelimit: 52 callbacks suppressed [ 336.841808][ T6769] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 337.002922][ T6769] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.220184][ T6797] futex_wake_op: syz.5.550 tries to shift op by 144; fix this program [ 340.128804][ T6840] futex_wake_op: syz.3.557 tries to shift op by 144; fix this program [ 341.983573][ C0] net_ratelimit: 52 callbacks suppressed [ 342.180413][ T6867] futex_wake_op: syz.1.562 tries to shift op by 144; fix this program [ 343.395798][ T6873] futex_wake_op: syz.0.564 tries to shift op by 144; fix this program [ 343.886092][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 343.967375][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 345.073705][ T6899] loop3: detected capacity change from 0 to 512 [ 345.111861][ T6902] loop5: detected capacity change from 0 to 128 [ 345.122565][ T6899] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=" or missing value [ 345.983303][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.569'. [ 346.568694][ T6912] futex_wake_op: syz.3.570 tries to shift op by 144; fix this program [ 347.000191][ C1] net_ratelimit: 55 callbacks suppressed [ 347.931384][ T6925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.568782][ T6928] futex_wake_op: syz.2.573 tries to shift op by 144; fix this program [ 349.547828][ T6939] futex_wake_op: syz.2.575 tries to shift op by 144; fix this program [ 349.989235][ T6934] futex_wake_op: syz.5.576 tries to shift op by 144; fix this program [ 352.383568][ C1] net_ratelimit: 55 callbacks suppressed [ 352.902895][ T6979] loop5: detected capacity change from 0 to 128 [ 352.939343][ T6977] process 'syz.3.572' launched './file2' with NULL argv: empty string added [ 353.204251][ T4636] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 353.524066][ T4636] usb 3-1: Using ep0 maxpacket: 32 [ 353.742145][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.5.582'. [ 353.775780][ T4636] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.865671][ T4636] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 354.940027][ T6992] futex_wake_op: syz.3.585 tries to shift op by 144; fix this program [ 355.108893][ T7008] futex_wake_op: syz.5.587 tries to shift op by 144; fix this program [ 355.144450][ T4636] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 355.824470][ T4636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.997471][ T4636] usb 3-1: Product: syz [ 356.001881][ T4636] usb 3-1: Manufacturer: syz [ 356.006656][ T4636] usb 3-1: SerialNumber: syz [ 356.084511][ T4636] usb 3-1: can't set config #4, error -71 [ 356.107428][ T4636] usb 3-1: USB disconnect, device number 4 [ 356.828377][ T7032] loop3: detected capacity change from 0 to 2048 [ 356.876171][ T7030] md: could not open device unknown-block(1,1). [ 357.448179][ C1] net_ratelimit: 69 callbacks suppressed [ 358.925929][ T7057] futex_wake_op: syz.2.604 tries to shift op by 144; fix this program [ 359.843735][ T7071] futex_wake_op: syz.2.608 tries to shift op by 144; fix this program [ 362.334747][ T7087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.463526][ C0] net_ratelimit: 44 callbacks suppressed [ 362.700211][ T7094] loop5: detected capacity change from 0 to 64 [ 363.162101][ T7094] hfs: get root inode failed [ 364.460523][ T7109] futex_wake_op: syz.5.619 tries to shift op by 144; fix this program [ 364.763642][ T6038] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 365.440952][ T7132] futex_wake_op: syz.2.626 tries to shift op by 144; fix this program [ 365.514752][ T6038] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.821228][ T6038] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.173966][ T6038] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=ff.de [ 367.016615][ T6038] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 367.024939][ T6038] usb 1-1: Product: syz [ 367.029113][ T6038] usb 1-1: SerialNumber: syz [ 367.405421][ T6038] speedtch 1-1:1.0: speedtch_bind: wrong device class 6 [ 367.440520][ T6038] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 367.583552][ C0] net_ratelimit: 45 callbacks suppressed [ 367.759061][ T6038] usb 1-1: USB disconnect, device number 3 [ 369.690608][ T7171] futex_wake_op: syz.5.638 tries to shift op by 144; fix this program [ 369.962042][ T7182] futex_wake_op: syz.1.640 tries to shift op by 144; fix this program [ 370.305528][ T6038] Bluetooth: hci5: command 0x0406 tx timeout [ 370.587362][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 372.769063][ T7214] futex_wake_op: syz.3.649 tries to shift op by 144; fix this program [ 373.355126][ C1] net_ratelimit: 66 callbacks suppressed [ 376.991200][ T7259] futex_wake_op: syz.5.661 tries to shift op by 144; fix this program [ 378.173742][ T7276] futex_wake_op: syz.3.651 tries to shift op by 144; fix this program [ 378.829375][ C0] net_ratelimit: 57 callbacks suppressed [ 381.112130][ T7316] futex_wake_op: syz.1.679 tries to shift op by 144; fix this program [ 383.594148][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.600508][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.969361][ T7358] futex_wake_op: syz.2.692 tries to shift op by 144; fix this program [ 384.063542][ C1] net_ratelimit: 68 callbacks suppressed [ 387.297018][ T7396] comedi comedi1: pcl730: I/O port conflict (0x2,4) [ 388.636077][ T7409] futex_wake_op: syz.1.706 tries to shift op by 144; fix this program [ 388.650300][ T7403] futex_wake_op: syz.2.704 tries to shift op by 144; fix this program [ 389.743601][ C1] net_ratelimit: 45 callbacks suppressed [ 392.443874][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 392.480959][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 392.597230][ T7446] netlink: 'syz.5.717': attribute type 10 has an invalid length. [ 392.816980][ T7454] futex_wake_op: syz.5.719 tries to shift op by 144; fix this program [ 394.953500][ C0] net_ratelimit: 42 callbacks suppressed [ 397.041275][ T7498] futex_wake_op: syz.2.731 tries to shift op by 144; fix this program [ 398.229594][ T7512] futex_wake_op: syz.5.733 tries to shift op by 144; fix this program [ 399.513237][ T7528] netlink: 'syz.2.738': attribute type 49 has an invalid length. [ 400.383530][ C1] net_ratelimit: 78 callbacks suppressed [ 401.872405][ T7558] futex_wake_op: syz.0.746 tries to shift op by 144; fix this program [ 403.795550][ T7568] netlink: 'syz.0.749': attribute type 49 has an invalid length. [ 404.322413][ T7577] futex_wake_op: syz.2.751 tries to shift op by 144; fix this program [ 405.406297][ C0] net_ratelimit: 64 callbacks suppressed [ 409.107883][ T7607] futex_wake_op: syz.3.759 tries to shift op by 144; fix this program [ 409.866853][ T7609] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 410.816838][ C1] net_ratelimit: 51 callbacks suppressed [ 415.908562][ C0] net_ratelimit: 51 callbacks suppressed [ 416.338890][ T7688] futex_wake_op: syz.3.780 tries to shift op by 144; fix this program [ 418.403872][ T7711] futex_wake_op: syz.1.784 tries to shift op by 144; fix this program [ 420.238087][ T7731] futex_wake_op: syz.5.792 tries to shift op by 144; fix this program [ 420.292267][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 420.943490][ C1] net_ratelimit: 46 callbacks suppressed [ 421.285185][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 421.295232][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 422.989987][ T7758] futex_wake_op: syz.5.799 tries to shift op by 144; fix this program [ 424.526090][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.5.802'. [ 424.943054][ T7781] device veth1_macvtap left promiscuous mode [ 425.278443][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 425.278454][ T26] audit: type=1326 audit(1790923372.416:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.808" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4e45159 code=0x7ffc0000 [ 425.404374][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.809'. [ 425.434776][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.809'. [ 425.493567][ T26] audit: type=1326 audit(1790923372.486:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.808" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dc4e45159 code=0x7ffc0000 [ 425.618847][ T7796] futex_wake_op: syz.2.811 tries to shift op by 144; fix this program [ 426.210765][ T26] audit: type=1326 audit(1790923372.486:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.808" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4e45159 code=0x7ffc0000 [ 426.246684][ T26] audit: type=1326 audit(1790923372.486:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.808" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4e45159 code=0x7ffc0000 [ 426.383503][ C1] net_ratelimit: 68 callbacks suppressed [ 431.743632][ C0] net_ratelimit: 47 callbacks suppressed [ 432.389069][ T3850] device veth1_macvtap entered promiscuous mode [ 432.477440][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.426712][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 433.487848][ T7912] futex_wake_op: syz.1.837 tries to shift op by 144; fix this program [ 433.739606][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 434.632160][ T7914] futex_wake_op: syz.5.839 tries to shift op by 144; fix this program [ 434.792080][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 434.801841][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 436.873186][ C1] net_ratelimit: 54 callbacks suppressed [ 438.514719][ T7959] futex_wake_op: syz.1.850 tries to shift op by 144; fix this program [ 439.275560][ T7966] futex_wake_op: syz.1.852 tries to shift op by 144; fix this program [ 439.704014][ T7976] futex_wake_op: syz.1.853 tries to shift op by 144; fix this program [ 440.360632][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 440.394188][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 442.873491][ C1] net_ratelimit: 56 callbacks suppressed [ 442.969360][ T8019] futex_wake_op: syz.0.863 tries to shift op by 144; fix this program [ 443.627327][ T8024] futex_wake_op: syz.3.866 tries to shift op by 144; fix this program [ 445.104244][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.110610][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.966454][ T8060] futex_wake_op: syz.2.878 tries to shift op by 144; fix this program [ 446.900779][ T8069] futex_wake_op: syz.3.880 tries to shift op by 144; fix this program [ 447.047489][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 447.267808][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 447.903518][ C1] net_ratelimit: 56 callbacks suppressed [ 449.391177][ T8106] futex_wake_op: syz.5.889 tries to shift op by 144; fix this program [ 450.627196][ T8120] futex_wake_op: syz.0.892 tries to shift op by 144; fix this program [ 452.670040][ T8149] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 453.663510][ C1] net_ratelimit: 46 callbacks suppressed [ 454.064083][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 454.665097][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.617612][ T5282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.628549][ T5282] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 455.874450][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 456.059525][ T5282] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 456.068678][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.276373][ T5282] cxacru 4-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 456.318463][ T5282] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 456.440943][ T5282] cxacru: probe of 4-1:1.0 failed with error -22 [ 456.731810][ T5282] usb 4-1: USB disconnect, device number 2 [ 456.922782][ T8217] futex_wake_op: syz.0.919 tries to shift op by 144; fix this program [ 458.760301][ T8242] futex_wake_op: syz.0.926 tries to shift op by 144; fix this program [ 459.661238][ C1] net_ratelimit: 62 callbacks suppressed [ 460.646908][ T8265] futex_wake_op: syz.1.930 tries to shift op by 144; fix this program [ 464.703521][ C1] net_ratelimit: 54 callbacks suppressed [ 469.695990][ T8406] futex_wake_op: syz.3.970 tries to shift op by 144; fix this program [ 470.801256][ C1] net_ratelimit: 64 callbacks suppressed [ 471.285275][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.975'. [ 471.295601][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.975'. [ 471.850750][ T8421] futex_wake_op: syz.2.976 tries to shift op by 144; fix this program [ 472.489519][ T5282] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 473.281619][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 473.654482][ T5282] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 473.674049][ T5282] usb 2-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 473.682431][ T5282] usb 2-1: Product: syz [ 473.717562][ T5282] usb 2-1: Manufacturer: syz [ 473.722295][ T5282] usb 2-1: SerialNumber: syz [ 473.769850][ T5282] usb 2-1: config 0 descriptor?? [ 474.079725][ T5282] pwc: Logitech ViewPort AV 100 webcam detected. [ 474.943831][ T5282] pwc: Failed to set LED on/off time (-71) [ 474.964072][ T5282] pwc: send_video_command error -71 [ 474.969385][ T5282] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 474.995558][ T5282] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 475.038491][ T5282] usb 2-1: USB disconnect, device number 2 [ 475.049654][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 475.064001][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 476.394223][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 476.414403][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 476.623494][ C1] net_ratelimit: 66 callbacks suppressed [ 477.583072][ T8483] futex_wake_op: syz.2.995 tries to shift op by 144; fix this program [ 479.571069][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 479.580969][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 479.667112][ T8525] futex_wake_op: syz.2.1006 tries to shift op by 144; fix this program [ 481.943284][ C0] net_ratelimit: 52 callbacks suppressed [ 482.272611][ T8544] futex_wake_op: syz.0.1008 tries to shift op by 144; fix this program [ 484.813647][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 485.833509][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 486.383861][ T4229] usb 3-1: config 1 has an invalid interface number: 216 but max is 0 [ 486.866271][ T8595] futex_wake_op: syz.5.1022 tries to shift op by 144; fix this program [ 486.877767][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.927383][ T4229] usb 3-1: config 1 has no interface number 0 [ 486.969654][ T4229] usb 3-1: config 1 interface 216 has no altsetting 0 [ 487.017300][ C1] net_ratelimit: 58 callbacks suppressed [ 487.043101][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 487.053793][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 487.219232][ T4229] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 487.239290][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.325110][ T4229] usb 3-1: Product: syz [ 487.411176][ T4229] usb 3-1: Manufacturer: syz [ 487.554242][ T4229] usb 3-1: SerialNumber: syz [ 487.795268][ T4229] usb 3-1: can't set config #1, error -71 [ 487.867154][ T4229] usb 3-1: USB disconnect, device number 5 [ 488.125353][ T8618] futex_wake_op: syz.2.1028 tries to shift op by 144; fix this program [ 490.216833][ T8641] futex_wake_op: syz.0.1035 tries to shift op by 144; fix this program [ 490.842669][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 492.393495][ C0] net_ratelimit: 54 callbacks suppressed [ 492.979796][ T8689] futex_wake_op: syz.3.1050 tries to shift op by 144; fix this program [ 493.442558][ T8691] futex_wake_op: syz.2.1051 tries to shift op by 144; fix this program [ 493.544615][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 493.554657][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 496.202596][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 496.213811][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 496.364137][ T8726] futex_wake_op: syz.2.1062 tries to shift op by 144; fix this program [ 497.045661][ T8742] comedi comedi3: mpc624: I/O port conflict (0x1f,16) [ 497.170711][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'. [ 497.180567][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'. [ 497.983500][ C1] net_ratelimit: 86 callbacks suppressed [ 498.433624][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 498.714094][ T4229] usb 6-1: Using ep0 maxpacket: 16 [ 498.855527][ T4229] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 498.999611][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.181713][ T4229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.265274][ T4229] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 499.311608][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.505922][ T4229] usb 6-1: config 0 descriptor?? [ 500.560980][ T4229] pxrc 6-1:0.0: Could not find endpoint [ 500.574353][ T4229] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 500.817037][ T4229] usb 6-1: USB disconnect, device number 2 [ 501.693995][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 501.774156][ T8782] tc_dump_action: action bad kind [ 502.158866][ T8669] udevd[8669]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 503.197223][ C1] net_ratelimit: 65 callbacks suppressed [ 505.695208][ T8669] udevd[8669]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 505.997360][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1096'. [ 506.023413][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1096'. [ 506.476562][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.483068][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.832273][ T8669] udevd[8669]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 508.443563][ T4636] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 508.683664][ T4636] usb 2-1: Using ep0 maxpacket: 16 [ 508.834734][ T4636] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 508.848455][ T4636] usb 2-1: config 0 has no interface number 0 [ 508.879642][ T4636] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 509.183498][ C1] net_ratelimit: 57 callbacks suppressed [ 509.275963][ T4636] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 509.593981][ T4636] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 509.639654][ T4636] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 510.065031][ T4636] usb 2-1: Product: syz [ 510.070271][ T4636] usb 2-1: SerialNumber: syz [ 510.357644][ T4636] usb 2-1: config 0 descriptor?? [ 510.446297][ T4636] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 510.653422][ T4636] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 511.094029][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 511.113656][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 511.127077][ T4636] usb 2-1: USB disconnect, device number 3 [ 511.133618][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 511.140570][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 511.397839][ T4636] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 514.194141][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 514.286858][ T8957] IPv6: Can't replace route, no match found [ 514.783504][ C1] net_ratelimit: 65 callbacks suppressed [ 517.113861][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 517.309280][ T9014] futex_wake_op: syz.0.1142 tries to shift op by 144; fix this program [ 518.618008][ T8669] udevd[8669]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 519.272325][ T4230] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 519.683888][ T4230] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 520.221765][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 520.228576][ T4230] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 520.237951][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.250489][ T4230] usb 2-1: config 0 descriptor?? [ 520.543507][ C1] net_ratelimit: 74 callbacks suppressed [ 521.395930][ T4264] usb 2-1: USB disconnect, device number 4 [ 521.894289][ T6038] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 522.231509][ T7614] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 522.393477][ T9076] futex_wake_op: syz.1.1161 tries to shift op by 144; fix this program [ 523.073637][ T7614] usb 6-1: Using ep0 maxpacket: 16 [ 523.294509][ T7614] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.363165][ T7614] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.530696][ T7614] usb 6-1: config 0 interface 0 has no altsetting 0 [ 523.603740][ T7614] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 523.714640][ T7614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.876256][ T6038] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.913729][ T7614] usb 6-1: config 0 descriptor?? [ 523.993931][ T6038] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.018715][ T6038] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 524.062695][ T6038] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 524.064448][ T9091] futex_wake_op: syz.2.1164 tries to shift op by 144; fix this program [ 524.145712][ T6038] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 524.203509][ T6038] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 524.275330][ T6038] usb 1-1: config 1 interface 1 has no altsetting 0 [ 524.954187][ T6038] usb 1-1: string descriptor 0 read error: -71 [ 525.010459][ T7614] input: HID 046a:0023 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046A:0023.0002/input/input6 [ 525.137634][ T7614] cherry 0003:046A:0023.0002: input,hiddev0,hidraw0: USB HID vff.fe Device [HID 046a:0023] on usb-dummy_hcd.5-1/input0 [ 525.190448][ T7614] usb 6-1: USB disconnect, device number 3 [ 525.223696][ T6038] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 525.232761][ T6038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.529177][ T6038] usb 1-1: can't set config #1, error -71 [ 525.583805][ T6038] usb 1-1: USB disconnect, device number 4 [ 525.983501][ C0] net_ratelimit: 81 callbacks suppressed [ 526.012822][ T9106] fido_id[9106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 526.058143][ T9110] futex_wake_op: syz.0.1170 tries to shift op by 144; fix this program [ 526.660914][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 526.671042][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 527.954204][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 529.004061][ T4230] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 529.218695][ T4230] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 529.272143][ T8769] udevd[8769]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 529.434715][ T4230] usb 4-1: config 0 has no interface number 0 [ 529.540766][ T4230] usb 4-1: too many endpoints for config 0 interface 8 altsetting 91: 227, using maximum allowed: 30 [ 529.558213][ T4230] usb 4-1: config 0 interface 8 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 529.572051][ T4230] usb 4-1: config 0 interface 8 has no altsetting 0 [ 529.579997][ T4230] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 529.590592][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.722740][ T4230] usb 4-1: config 0 descriptor?? [ 529.796051][ T4230] usb 4-1: can't set config #0, error -71 [ 529.918453][ T4230] usb 4-1: USB disconnect, device number 3 [ 530.068805][ T9164] futex_wake_op: syz.3.1182 tries to shift op by 144; fix this program [ 530.353921][ T9169] futex_wake_op: syz.1.1183 tries to shift op by 144; fix this program [ 531.183584][ C1] net_ratelimit: 62 callbacks suppressed [ 532.187461][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 532.199325][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 533.018986][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1188'. [ 533.029262][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1188'. [ 536.102815][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 536.112674][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 536.223500][ C0] net_ratelimit: 52 callbacks suppressed [ 537.716664][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1200'. [ 537.728396][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1200'. [ 540.025631][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 541.414569][ C0] net_ratelimit: 66 callbacks suppressed [ 541.914596][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 541.924869][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 542.376738][ T9301] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1221'. [ 543.231514][ T9220] udevd[9220]: setting mode of /dev/loop1536 to 060660 failed: No such file or directory [ 543.465506][ T9220] udevd[9220]: setting owner of /dev/loop1536 to uid=0, gid=6 failed: No such file or directory [ 543.694439][ T9220] udevd[9220]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 544.529979][ T9218] udevd[9218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 544.802979][ T9335] futex_wake_op: syz.0.1230 tries to shift op by 144; fix this program [ 545.182743][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1235'. [ 545.192937][ T9347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1235'. [ 546.556645][ C1] net_ratelimit: 70 callbacks suppressed [ 546.986815][ T9218] udevd[9218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 547.051121][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 547.061175][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 547.816307][ T9388] netlink: 436 bytes leftover after parsing attributes in process `syz.5.1245'. [ 547.866471][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1245'. [ 548.665535][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1250'. [ 548.678100][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1250'. [ 549.813579][ T4229] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 550.446196][ T9218] udevd[9218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 550.633151][ T4229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.644177][ T4229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 550.653098][ T4229] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.873785][ T4229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.882865][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.531029][ T4229] usb 6-1: Product: syz [ 551.535293][ T4229] usb 6-1: Manufacturer: syz [ 551.539899][ T4229] usb 6-1: SerialNumber: syz [ 551.583559][ C1] net_ratelimit: 60 callbacks suppressed [ 551.955935][ T4229] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 551.973420][ T4229] cdc_ncm 6-1:1.0: bind() failure [ 552.691190][ T4330] usb 6-1: USB disconnect, device number 4 [ 554.049731][ T9462] futex_wake_op: syz.1.1265 tries to shift op by 144; fix this program [ 554.191594][ T9468] futex_wake_op: syz.2.1262 tries to shift op by 144; fix this program [ 555.601702][ T9484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1269'. [ 555.624643][ T9484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1269'. [ 555.732689][ T9488] futex_wake_op: syz.3.1272 tries to shift op by 144; fix this program [ 557.363710][ T4264] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 557.423497][ C1] net_ratelimit: 59 callbacks suppressed [ 557.526306][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 557.536659][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 557.733717][ T4264] usb 6-1: Using ep0 maxpacket: 32 [ 558.363856][ T4264] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 558.393998][ T4264] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 558.459576][ T4264] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 558.581896][ T4264] usb 6-1: config 1 has no interface number 0 [ 558.632725][ T9516] futex_wake_op: syz.0.1280 tries to shift op by 144; fix this program [ 558.673829][ T4264] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.753561][ T4264] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 559.152858][ T4264] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 559.162249][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.227476][ T4264] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 559.453129][ T4264] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 560.399211][ T4264] usb 6-1: USB disconnect, device number 5 [ 560.424388][ T4264] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 562.180299][ T9564] futex_wake_op: syz.3.1292 tries to shift op by 144; fix this program [ 562.407874][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1290'. [ 562.418233][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1290'. [ 563.025283][ C1] net_ratelimit: 52 callbacks suppressed [ 566.079664][ T9583] (unnamed net_device) (uninitialized): (slave ip6tnl0): Device is not bonding slave [ 566.123810][ T9583] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) [ 566.143152][ T9585] futex_wake_op: syz.3.1298 tries to shift op by 144; fix this program [ 566.733640][ T4188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 567.233742][ T4188] usb 3-1: Using ep0 maxpacket: 16 [ 568.542087][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.548479][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.559759][ C0] net_ratelimit: 70 callbacks suppressed [ 568.831192][ T4188] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 569.211649][ T9607] futex_wake_op: syz.3.1303 tries to shift op by 144; fix this program [ 569.223941][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.258610][ T4188] usb 3-1: Product: syz [ 569.263168][ T4188] usb 3-1: Manufacturer: syz [ 569.268282][ T4188] usb 3-1: SerialNumber: syz [ 569.292777][ T4188] r8152-cfgselector 3-1: config 0 descriptor?? [ 570.154552][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1306'. [ 570.163855][ T4188] r8152-cfgselector 3-1: Unknown version 0x0000 [ 570.171905][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1306'. [ 570.214072][ T4188] r8152-cfgselector 3-1: Unknown version 0x0000 [ 570.220550][ T4188] r8152-cfgselector 3-1: bad CDC descriptors [ 570.274006][ T4188] r8152-cfgselector 3-1: Unknown version 0x0000 [ 570.334718][ T4188] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 570.683485][ T9628] futex_wake_op: syz.2.1310 tries to shift op by 144; fix this program [ 571.176389][ T9640] futex_wake_op: syz.2.1313 tries to shift op by 144; fix this program [ 573.484801][ T9661] futex_wake_op: syz.2.1319 tries to shift op by 144; fix this program [ 573.743499][ C1] net_ratelimit: 70 callbacks suppressed [ 577.037198][ T9693] futex_wake_op: syz.0.1328 tries to shift op by 144; fix this program [ 577.052174][ T9696] futex_wake_op: syz.3.1330 tries to shift op by 144; fix this program [ 578.747203][ T9714] udevd[9714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 578.964215][ T4264] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 579.203565][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 579.743510][ C1] net_ratelimit: 69 callbacks suppressed [ 579.893909][ T9729] futex_wake_op: syz.5.1342 tries to shift op by 144; fix this program [ 580.003884][ T4264] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 580.592900][ T4264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.623748][ T4264] usb 4-1: config 0 has no interface number 0 [ 581.053739][ T4264] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 581.087885][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.147448][ T4264] usb 4-1: Product: syz [ 581.228563][ T4264] usb 4-1: Manufacturer: syz [ 581.271544][ T4264] usb 4-1: SerialNumber: syz [ 581.752943][ T4264] usb 4-1: config 0 descriptor?? [ 581.998256][ T4264] usb 4-1: can't set config #0, error -71 [ 582.005942][ T4264] usb 4-1: USB disconnect, device number 4 [ 582.952986][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 583.187717][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 584.783999][ C0] net_ratelimit: 51 callbacks suppressed [ 584.798256][ T9787] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 584.842791][ T9787] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 584.851561][ T9788] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 586.043573][ T4188] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 586.337897][ T4188] usb 3-1: Using ep0 maxpacket: 32 [ 586.514113][ T4188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.664126][ T4188] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 586.672396][ T4188] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 586.672416][ T4188] usb 3-1: config 12 has no interface number 0 [ 586.672430][ T4188] usb 3-1: config 12 has no interface number 1 [ 586.672460][ T4188] usb 3-1: config 12 interface 183 has no altsetting 0 [ 586.672476][ T4188] usb 3-1: config 12 interface 229 has no altsetting 0 [ 588.023556][ T4188] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 588.032720][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.032741][ T4188] usb 3-1: Product: syz [ 588.032755][ T4188] usb 3-1: Manufacturer: syz [ 588.032768][ T4188] usb 3-1: SerialNumber: syz [ 588.396830][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1368'. [ 588.407972][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1368'. [ 588.601736][ T4188] usb 3-1: USB disconnect, device number 7 [ 589.958000][ T4636] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.305441][ C1] net_ratelimit: 67 callbacks suppressed [ 590.990378][ T9858] futex_wake_op: syz.5.1376 tries to shift op by 144; fix this program [ 591.005007][ T4636] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 591.029784][ T4636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.103237][ T4636] usb 4-1: Product: syz [ 591.142690][ T4636] usb 4-1: Manufacturer: syz [ 591.213706][ T4636] usb 4-1: SerialNumber: syz [ 591.356276][ T4636] ums-karma 4-1:1.0: USB Mass Storage device detected [ 591.408003][ T4636] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 591.408003][ T4636] Please send a copy of this message to and [ 591.645893][ T9864] futex_wake_op: syz.2.1379 tries to shift op by 144; fix this program [ 592.028870][ T4636] scsi host1: usb-storage 4-1:1.0 [ 592.828193][ T1323] usb 4-1: USB disconnect, device number 5 [ 593.082312][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1383'. [ 593.352267][ T9883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.361372][ T9883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.370214][ T9883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.379211][ T9883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.993850][ T1323] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 594.884666][ T9905] futex_wake_op: syz.0.1390 tries to shift op by 144; fix this program [ 595.433513][ C0] net_ratelimit: 45 callbacks suppressed [ 596.448098][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 596.465573][ T1323] usb 3-1: Using ep0 maxpacket: 16 [ 596.634441][ T1323] usb 3-1: unable to read config index 0 descriptor/all [ 596.646580][ T1323] usb 3-1: can't read configurations, error -71 [ 596.769234][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 596.792839][ T9801] udevd[9801]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 598.042002][ T9952] futex_wake_op: syz.2.1406 tries to shift op by 144; fix this program [ 599.875476][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 600.116712][ T9977] Bluetooth: hci0: unsupported parameter 5135 [ 600.152365][ T9977] Bluetooth: hci0: unsupported parameter 8192 [ 600.201768][ T9977] Bluetooth: hci0: unsupported parameter 5135 [ 600.223279][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 600.261030][ T9977] Bluetooth: hci0: unsupported parameter 8192 [ 600.405677][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 600.713487][ C0] net_ratelimit: 58 callbacks suppressed [ 601.318734][ T9992] futex_wake_op: syz.3.1417 tries to shift op by 144; fix this program [ 601.436434][ T9994] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.445747][ T9994] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.455090][ T9994] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.463933][ T9994] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.319785][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 603.420976][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'. [ 603.822374][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 603.836149][ T9801] udevd[9801]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 604.252300][T10035] futex_wake_op: syz.3.1429 tries to shift op by 144; fix this program [ 605.369141][T10045] futex_wake_op: syz.0.1433 tries to shift op by 144; fix this program [ 605.724462][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 605.744549][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 605.823507][ C1] net_ratelimit: 49 callbacks suppressed [ 606.671956][ T1323] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 607.115670][ T1323] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 607.166132][ T1323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.230319][ T1323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.299178][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 607.363500][ T1323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 607.499120][ T1323] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 607.539519][ T1323] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 607.614247][ T1323] usb 2-1: Manufacturer: syz [ 607.660594][ T1323] usb 2-1: config 0 descriptor?? [ 607.887573][ T1323] usb 2-1: can't set config #0, error -71 [ 607.912660][ T1323] usb 2-1: USB disconnect, device number 5 [ 608.758652][ T9822] udevd[9822]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 609.437196][T10096] futex_wake_op: syz.5.1444 tries to shift op by 144; fix this program [ 610.175117][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 610.224229][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 610.598320][T10108] futex_wake_op: syz.1.1449 tries to shift op by 144; fix this program [ 610.943524][ C0] net_ratelimit: 42 callbacks suppressed [ 611.703418][T10109] futex_wake_op: syz.0.1450 tries to shift op by 144; fix this program [ 612.023887][ T9801] udevd[9801]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 613.299891][T10130] futex_wake_op: syz.1.1455 tries to shift op by 144; fix this program [ 614.142800][T10133] futex_wake_op: syz.5.1456 tries to shift op by 144; fix this program [ 616.143506][ C1] net_ratelimit: 52 callbacks suppressed [ 616.732117][T10149] futex_wake_op: syz.2.1462 tries to shift op by 144; fix this program [ 617.364013][T10155] futex_wake_op: syz.2.1463 tries to shift op by 144; fix this program [ 617.807420][T10166] udevd[10166]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 617.979857][T10171] udevd[10171]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 618.013691][T10164] udevd[10164]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 618.137778][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 618.148445][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1465'. [ 619.260846][T10181] futex_wake_op: syz.2.1469 tries to shift op by 144; fix this program [ 620.116176][T10186] futex_wake_op: syz.1.1468 tries to shift op by 144; fix this program [ 621.263547][ C1] net_ratelimit: 37 callbacks suppressed [ 621.696792][T10199] futex_wake_op: syz.5.1474 tries to shift op by 144; fix this program [ 623.385299][T10218] udevd[10218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 623.731557][T10225] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 623.739831][T10225] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 623.770484][T10225] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 623.933550][ T4330] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 623.989695][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 623.999588][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 625.103879][ T4330] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.539442][ T4330] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.849291][ T4330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 625.897394][ T4330] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 625.909342][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.941284][ T4330] usb 4-1: config 0 descriptor?? [ 626.303519][ C0] net_ratelimit: 59 callbacks suppressed [ 626.933598][ T21] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 627.043871][ T4330] usbhid 4-1:0.0: can't add hid device: -71 [ 627.050034][ T4330] usbhid: probe of 4-1:0.0 failed with error -71 [ 627.102817][ T4330] usb 4-1: USB disconnect, device number 6 [ 627.262069][T10267] comedi: valid board names for 8255 driver are: [ 627.438345][ T21] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.464090][T10218] udevd[10218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 627.478833][T10267] 8255 [ 628.188754][ T21] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.201919][T10267] comedi: valid board names for vmk80xx driver are: [ 628.212075][ T21] usb 6-1: config 0 interface 0 has no altsetting 0 [ 628.230808][T10267] vmk80xx [ 628.250456][ T21] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 628.253234][T10267] comedi: valid board names for usbduxsigma driver are: [ 628.286746][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.365393][ T21] usb 6-1: config 0 descriptor?? [ 628.420123][T10267] usbduxsigma [ 628.425584][T10267] comedi: valid board names for usbduxfast driver are: [ 628.432463][T10267] usbduxfast [ 628.436131][T10267] comedi: valid board names for usbdux driver are: [ 628.442733][T10267] usbdux [ 628.445989][T10267] comedi: valid board names for ni6501 driver are: [ 628.452730][T10267] ni6501 [ 628.456617][T10267] comedi: valid board names for dt9812 driver are: [ 628.475986][T10267] dt9812 [ 628.482179][T10267] comedi: valid board names for ni_labpc_cs driver are: [ 628.529398][T10267] ni_labpc_cs [ 628.532881][T10267] comedi: valid board names for ni_daq_700 driver are: [ 628.541248][T10267] ni_daq_700 [ 628.545077][ T21] usb 6-1: can't set config #0, error -71 [ 628.586719][T10267] comedi: valid board names for labpc_pci driver are: [ 628.586732][T10267] labpc_pci [ 628.586740][T10267] comedi: valid board names for adl_pci9118 driver are: [ 628.676329][ T21] usb 6-1: USB disconnect, device number 6 [ 628.688375][T10267] pci9118dg [ 628.701296][T10267] pci9118hg [ 628.742877][T10267] pci9118hr [ 628.875659][T10267] comedi: valid board names for 8255_pci driver are: [ 629.020731][T10267] 8255_pci [ 629.217783][T10267] comedi: valid board names for s526 driver are: [ 629.337254][T10284] futex_wake_op: syz.2.1497 tries to shift op by 144; fix this program [ 629.361446][T10267] s526 [ 629.384810][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.400569][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.468999][T10267] comedi: valid board names for multiq3 driver are: [ 629.748231][T10267] multiq3 [ 629.751306][T10267] comedi: valid board names for pcmuio driver are: [ 630.001405][T10267] pcmuio48 [ 630.370880][T10267] pcmuio96 [ 630.397356][T10267] comedi: valid board names for pcmmio driver are: [ 630.436896][T10267] pcmmio [ 630.439872][T10267] comedi: valid board names for pcmda12 driver are: [ 630.446736][T10267] pcmda12 [ 630.449766][T10267] comedi: valid board names for pcmad driver are: [ 630.458478][T10267] pcmad12 [ 630.461545][T10267] pcmad16 [ 630.464865][T10294] capability: warning: `syz.5.1501' uses deprecated v2 capabilities in a way that may be insecure [ 630.476314][T10267] comedi: valid board names for ni_labpc driver are: [ 630.482999][T10267] lab-pc-1200 [ 630.511430][T10267] lab-pc-1200ai [ 630.518701][T10267] lab-pc+ [ 630.524559][T10267] comedi: valid board names for atmio16 driver are: [ 630.541420][T10267] atmio16 [ 630.555335][T10267] atmio16d [ 630.560388][T10267] comedi: valid board names for ni_at_ao driver are: [ 630.576385][T10267] at-ao-6 [ 630.588833][T10267] at-ao-10 [ 630.595227][T10267] comedi: valid board names for ni_at_a2150 driver are: [ 630.628164][T10218] udevd[10218]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 630.778447][T10267] ni_at_a2150 [ 630.831948][T10267] comedi: valid board names for adq12b driver are: [ 630.958084][T10267] adq12b [ 631.019654][T10267] comedi: valid board names for mpc624 driver are: [ 631.144754][T10267] mpc624 [ 631.209891][T10267] comedi: valid board names for c6xdigio driver are: [ 631.894312][ C0] net_ratelimit: 54 callbacks suppressed [ 631.924822][T10267] c6xdigio [ 631.927965][T10267] comedi: valid board names for aio_iiro_16 driver are: [ 631.935036][T10267] aio_iiro_16 [ 631.938502][T10267] comedi: valid board names for aio_aio12_8 driver are: [ 631.948975][T10267] aio_aio12_8 [ 631.952363][T10267] aio_ai12_8 [ 631.952373][T10267] aio_ao12_4 [ 631.952380][T10267] comedi: valid board names for fl512 driver are: [ 631.952389][T10267] fl512 [ 631.952395][T10267] comedi: valid board names for dmm32at driver are: [ 631.952403][T10267] dmm32at [ 631.952409][T10267] comedi: valid board names for dt282x driver are: [ 631.952418][T10267] dt2821 [ 631.952425][T10267] dt2821-f [ 631.952432][T10267] dt2821-g [ 631.952437][T10267] dt2823 [ 631.952443][T10267] dt2824-pgh [ 631.952449][T10267] dt2824-pgl [ 631.952455][T10267] dt2825 [ 631.952459][T10267] dt2827 [ 631.952465][T10267] dt2828 [ 631.952470][T10267] dt2829 [ 631.952475][T10267] dt21-ez [ 631.952481][T10267] dt23-ez [ 631.952486][T10267] dt24-ez [ 631.952491][T10267] dt24-ez-pgl [ 631.952497][T10267] comedi: valid board names for dt2817 driver are: [ 631.952503][T10267] dt2817 [ 631.952508][T10267] comedi: valid board names for dt2815 driver are: [ 631.964728][T10267] dt2815 [ 631.975885][T10267] comedi: valid board names for dt2814 driver are: [ 631.985304][T10267] dt2814 [ 631.985315][T10267] comedi: valid board names for dt2811 driver are: [ 631.985325][T10267] dt2811-pgh [ 631.985332][T10267] dt2811-pgl [ 631.985338][T10267] comedi: valid board names for dt2801 driver are: [ 631.985346][T10267] dt2801 [ 631.985352][T10267] comedi: valid board names for das6402 driver are: [ 631.985359][T10267] das6402-12 [ 631.991621][T10267] das6402-16 [ 631.991630][T10267] comedi: valid board names for das1800 driver are: [ 632.003509][T10267] das-1701st [ 632.008435][T10267] das-1701st-da [ 632.163604][T10267] das-1702st [ 632.166941][T10267] das-1702st-da [ 632.193478][T10267] das-1702hr [ 632.196917][T10267] das-1702hr-da [ 632.200545][T10267] das-1701ao [ 632.250465][T10267] das-1702ao [ 632.266230][T10267] das-1801st [ 632.269555][T10267] das-1801st-da [ 632.281997][T10267] das-1802st [ 632.287299][T10267] das-1802st-da [ 632.532565][T10323] futex_wake_op: syz.0.1510 tries to shift op by 144; fix this program [ 633.222398][T10267] das-1802hr [ 633.397663][T10267] das-1802hr-da [ 633.401265][T10267] das-1801hc [ 633.414061][T10267] das-1802hc [ 633.417424][T10267] das-1801ao [ 633.417433][T10267] das-1802ao [ 633.417442][T10267] comedi: valid board names for das800 driver are: [ 633.417451][T10267] das-800 [ 633.453134][T10267] cio-das800 [ 633.467900][T10267] das-801 [ 633.470946][T10267] cio-das801 [ 633.487854][T10267] das-802 [ 633.522858][T10267] cio-das802 [ 633.526218][T10267] cio-das802/16 [ 633.529780][T10267] comedi: valid board names for isa-das08 driver are: [ 633.733320][T10267] isa-das08 [ 633.755543][T10267] das08-pgm [ 633.780060][T10267] das08-pgh [ 633.783834][T10267] das08-pgl [ 633.836235][T10267] das08-aoh [ 633.901169][T10267] das08-aol [ 633.973884][T10267] das08-aom [ 634.050477][T10267] das08/jr-ao [ 634.054745][T10267] das08jr-16-ao [ 634.058420][T10267] pc104-das08 [ 634.061897][T10267] das08jr/16 [ 634.065720][T10267] comedi: valid board names for das16m1 driver are: [ 634.072599][T10267] das16m1 [ 634.076479][T10267] comedi: valid board names for dac02 driver are: [ 634.083000][T10267] dac02 [ 634.086497][T10267] comedi: valid board names for rti802 driver are: [ 634.093113][T10267] rti802 [ 634.107289][T10267] comedi: valid board names for rti800 driver are: [ 634.140409][T10267] rti800 [ 634.197861][T10267] rti815 [ 634.298499][T10267] comedi: valid board names for pcm3724 driver are: [ 634.305658][T10267] pcm3724 [ 634.308784][T10267] comedi: valid board names for pcl818 driver are: [ 634.336826][T10267] pcl818l [ 634.352616][T10267] pcl818h [ 634.359423][T10340] udevd[10340]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 634.380841][T10267] pcl818hd [ 634.507480][T10267] pcl818hg [ 634.510630][T10267] pcl818 [ 634.559003][T10267] pcl718 [ 634.562004][T10267] pcm3718 [ 634.593099][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'. [ 634.603255][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'. [ 634.610773][T10267] comedi: valid board names for pcl816 driver are: [ 634.747421][T10267] pcl816 [ 634.818353][T10267] pcl814b [ 634.909950][T10267] comedi: valid board names for pcl812 driver are: [ 635.110185][T10267] pcl812 [ 635.226506][T10267] pcl812pg [ 635.229660][T10267] acl8112pg [ 635.232863][T10267] acl8112dg [ 635.287157][T10267] acl8112hg [ 635.290419][T10267] a821pgl [ 635.296722][T10267] a821pglnda [ 635.300036][T10267] a821pgh [ 635.303084][T10267] a822pgl [ 635.306499][T10267] a822pgh [ 635.309534][T10267] a823pgl [ 635.312545][T10267] a823pgh [ 635.315677][T10267] pcl813 [ 635.315684][T10267] pcl813b [ 635.315691][T10267] acl8113 [ 635.315698][T10267] iso813 [ 635.315704][T10267] acl8216 [ 635.315711][T10267] a826pg [ 635.315718][T10267] comedi: valid board names for pcl730 driver are: [ 635.315727][T10267] pcl730 [ 635.315735][T10267] iso730 [ 635.321761][T10267] acl7130 [ 635.327857][T10267] pcm3730 [ 635.337984][T10267] pcl725 [ 635.343518][T10267] p8r8dio [ 635.343526][T10267] acl7225b [ 635.343533][T10267] p16r16dio [ 635.365394][T10267] pcl733 [ 635.368335][T10267] pcl734 [ 635.384968][T10267] opmm-1616-xt [ 635.391662][T10267] pearl-mm-p [ 635.405011][T10267] ir104-pbf [ 635.408330][T10267] comedi: valid board names for pcl726 driver are: [ 635.451699][T10267] pcl726 [ 635.464148][T10267] pcl727 [ 635.467128][T10267] pcl728 [ 635.470103][T10267] acl6126 [ 635.481276][T10267] acl6128 [ 635.497264][T10267] comedi: valid board names for pcl724 driver are: [ 635.505869][T10267] pcl724 [ 635.508854][T10267] pcl722 [ 635.511778][T10267] pcl731 [ 635.527593][T10267] acl7122 [ 635.530660][T10267] acl7124 [ 635.567324][T10267] pet48dio [ 635.570518][T10267] pcmio48 [ 635.607498][T10267] onyx-mm-dio [ 635.610897][T10267] comedi: valid board names for pcl711 driver are: [ 635.673858][T10267] pcl711 [ 635.676840][T10267] pcl711b [ 635.704817][T10267] acl8112hg [ 635.735825][T10267] acl8112dg [ 635.739063][T10267] comedi: valid board names for amplc_pc263 driver are: [ 635.739074][T10267] pc263 [ 635.739082][T10267] comedi: valid board names for amplc_pc236 driver are: [ 635.739092][T10267] pc36at [ 635.739098][T10267] comedi: valid board names for amplc_dio200 driver are: [ 635.739107][T10267] pc212e [ 635.739112][T10267] pc214e [ 635.739118][T10267] pc215e [ 635.739123][T10267] pc218e [ 635.739129][T10267] pc272e [ 635.739134][T10267] comedi: valid board names for comedi_parport driver are: [ 635.739141][T10267] comedi_parport [ 635.739147][T10267] comedi: valid board names for comedi_test driver are: [ 635.739154][T10267] comedi_test [ 635.739159][T10267] comedi: valid board names for comedi_bond driver are: [ 635.739166][T10267] comedi_bond [ 636.747763][T10358] futex_wake_op: syz.2.1520 tries to shift op by 144; fix this program [ 637.055409][T10359] futex_wake_op: syz.3.1521 tries to shift op by 144; fix this program [ 637.093059][ C0] net_ratelimit: 50 callbacks suppressed [ 637.506461][T10340] udevd[10340]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 639.520428][T10339] udevd[10339]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 640.248394][T10399] futex_wake_op: syz.1.1530 tries to shift op by 144; fix this program [ 641.109896][T10407] futex_wake_op: syz.0.1532 tries to shift op by 144; fix this program [ 642.231120][ C1] net_ratelimit: 48 callbacks suppressed [ 643.029905][T10427] futex_wake_op: syz.5.1538 tries to shift op by 144; fix this program [ 643.387313][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 643.397504][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 645.625588][T10445] futex_wake_op: syz.2.1543 tries to shift op by 144; fix this program [ 647.547003][ C0] net_ratelimit: 43 callbacks suppressed [ 648.205538][T10475] futex_wake_op: syz.0.1550 tries to shift op by 144; fix this program [ 648.987294][T10482] udevd[10482]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 650.312532][T10502] futex_wake_op: syz.5.1557 tries to shift op by 144; fix this program [ 652.556273][ C0] net_ratelimit: 57 callbacks suppressed [ 653.680021][T10531] udevd[10531]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 655.067773][T10549] futex_wake_op: syz.0.1569 tries to shift op by 144; fix this program [ 656.338752][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'. [ 656.402317][T10575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'. [ 658.463589][ C0] net_ratelimit: 45 callbacks suppressed [ 658.582188][T10597] futex_wake_op: syz.1.1581 tries to shift op by 144; fix this program [ 659.676953][T10606] futex_wake_op: syz.2.1584 tries to shift op by 144; fix this program [ 660.565868][T10611] futex_wake_op: syz.2.1585 tries to shift op by 144; fix this program [ 662.758164][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1589'. [ 662.758598][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1589'. [ 663.119540][T10633] udevd[10633]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 663.743499][ C1] net_ratelimit: 57 callbacks suppressed [ 664.091858][T10643] futex_wake_op: syz.2.1593 tries to shift op by 144; fix this program [ 665.581345][T10652] futex_wake_op: syz.2.1595 tries to shift op by 144; fix this program [ 668.863501][ C1] net_ratelimit: 56 callbacks suppressed [ 669.600154][T10691] futex_wake_op: syz.5.1606 tries to shift op by 144; fix this program [ 671.151166][T10707] udevd[10707]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 671.170589][T10711] udevd[10711]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 671.231347][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1611'. [ 671.242045][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1611'. [ 672.670178][T10721] futex_wake_op: syz.5.1614 tries to shift op by 144; fix this program [ 673.404975][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 673.472094][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 673.543784][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1617'. [ 673.553634][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1617'. [ 674.303515][ C1] net_ratelimit: 66 callbacks suppressed [ 678.214395][T10770] udevd[10770]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 679.343492][ C1] net_ratelimit: 50 callbacks suppressed [ 681.083127][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 681.106055][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'. [ 681.605814][T10831] udevd[10831]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 681.853740][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 682.094164][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 682.236954][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.459236][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.762250][ T21] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 682.775541][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.932654][ T21] usb 4-1: config 0 descriptor?? [ 683.808714][ T21] wacom 0003:056A:0084.0003: unbalanced delimiter at end of report description [ 683.843917][ T21] wacom 0003:056A:0084.0003: parse failed [ 683.870333][ T21] wacom: probe of 0003:056A:0084.0003 failed with error -22 [ 684.059955][ T4230] usb 4-1: USB disconnect, device number 7 [ 684.383702][ C0] net_ratelimit: 49 callbacks suppressed [ 686.415428][T10876] futex_wake_op: syz.5.1653 tries to shift op by 144; fix this program [ 687.311418][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1654'. [ 687.681528][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1654'. [ 688.729828][T10891] futex_wake_op: syz.1.1657 tries to shift op by 144; fix this program [ 689.103547][ T4229] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 689.443727][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 689.505493][ T153] net_ratelimit: 41 callbacks suppressed [ 689.569706][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.593037][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.634266][ T4229] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 690.463096][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.473096][ T4229] usb 3-1: config 0 descriptor?? [ 690.786245][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.792639][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.823723][T10910] udevd[10910]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 690.990988][ T4229] wacom 0003:056A:0084.0004: unbalanced delimiter at end of report description [ 691.054193][ T4229] wacom 0003:056A:0084.0004: parse failed [ 691.060048][ T4229] wacom: probe of 0003:056A:0084.0004 failed with error -22 [ 691.158643][T10926] futex_wake_op: syz.1.1664 tries to shift op by 144; fix this program [ 692.377557][T10931] futex_wake_op: syz.3.1666 tries to shift op by 144; fix this program [ 692.719582][ T4229] usb 3-1: USB disconnect, device number 10 [ 693.402194][T10910] udevd[10910]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 694.714774][ T7579] net_ratelimit: 52 callbacks suppressed [ 696.403988][T10964] futex_wake_op: syz.5.1674 tries to shift op by 144; fix this program [ 697.984935][T10982] futex_wake_op: syz.3.1677 tries to shift op by 144; fix this program [ 699.554479][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'. [ 699.641247][T10910] udevd[10910]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 699.662085][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'. [ 699.743513][ C0] net_ratelimit: 42 callbacks suppressed [ 700.064230][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 700.113810][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 700.557342][T11021] futex_wake_op: syz.2.1684 tries to shift op by 144; fix this program [ 701.866450][T10910] udevd[10910]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 703.245083][T11050] futex_wake_op: syz.5.1689 tries to shift op by 144; fix this program [ 703.918376][T11058] futex_wake_op: syz.0.1693 tries to shift op by 144; fix this program [ 705.103492][ C0] net_ratelimit: 40 callbacks suppressed [ 706.516131][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1696'. [ 706.527307][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1696'. [ 707.599478][T11085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1699'. [ 707.658077][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1699'. [ 707.813075][T11095] futex_wake_op: syz.2.1702 tries to shift op by 144; fix this program [ 709.159753][T11101] udevd[11101]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 710.143520][ C1] net_ratelimit: 46 callbacks suppressed [ 710.292123][T11111] futex_wake_op: syz.5.1706 tries to shift op by 144; fix this program [ 711.546192][T11101] udevd[11101]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 712.348787][T11130] futex_wake_op: syz.3.1712 tries to shift op by 144; fix this program [ 713.531675][T11133] futex_wake_op: syz.1.1713 tries to shift op by 144; fix this program [ 713.989796][T11140] futex_wake_op: syz.3.1714 tries to shift op by 144; fix this program [ 715.303887][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 715.724507][ T4231] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 715.775500][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.823505][ C1] net_ratelimit: 45 callbacks suppressed [ 715.989342][ T4231] usb 3-1: config 0 has no interface number 0 [ 716.039405][ T4231] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 716.114151][ T4231] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.407520][T11161] udevd[11161]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 716.684285][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1720'. [ 716.700101][ T4231] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 716.723520][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.753623][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1720'. [ 716.770356][ T4231] usb 3-1: Product: syz [ 716.797923][ T4231] usb 3-1: Manufacturer: syz [ 716.802644][ T4231] usb 3-1: SerialNumber: syz [ 716.860158][ T4231] usb 3-1: config 0 descriptor?? [ 717.126229][T11179] futex_wake_op: syz.1.1724 tries to shift op by 144; fix this program [ 717.884978][T11188] futex_wake_op: syz.1.1728 tries to shift op by 144; fix this program [ 717.999855][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 718.010448][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 718.769770][ T4231] usb 3-1: USB disconnect, device number 11 [ 719.888772][T11148] udevd[11148]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 720.864849][ C1] net_ratelimit: 41 callbacks suppressed [ 720.903046][T11161] udevd[11161]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 721.375777][T11222] futex_wake_op: syz.0.1736 tries to shift op by 144; fix this program [ 722.114026][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1737'. [ 722.253628][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1737'. [ 722.512319][T11148] udevd[11148]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 723.975122][T11148] udevd[11148]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 724.318586][T11265] futex_wake_op: syz.2.1748 tries to shift op by 144; fix this program [ 725.166878][T11278] futex_wake_op: syz.1.1751 tries to shift op by 144; fix this program [ 725.657315][T11286] futex_wake_op: syz.2.1754 tries to shift op by 144; fix this program [ 725.983669][ T4461] net_ratelimit: 44 callbacks suppressed [ 726.400441][T11161] udevd[11161]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 726.759366][T11293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.494892][T11314] futex_wake_op: syz.0.1761 tries to shift op by 144; fix this program [ 730.820285][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1769'. [ 730.851479][T11335] futex_wake_op: syz.2.1768 tries to shift op by 144; fix this program [ 730.893187][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1769'. [ 731.103510][ C0] net_ratelimit: 42 callbacks suppressed [ 732.853730][ T4265] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 732.911921][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'. [ 732.921807][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'. [ 733.525651][T11362] futex_wake_op: syz.5.1775 tries to shift op by 144; fix this program [ 734.014028][ T4265] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 734.069398][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 734.187338][ T4265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 734.587666][ T4265] usb 2-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 734.597135][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.617460][ T4265] usb 2-1: config 0 descriptor?? [ 734.893764][ T4636] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 735.103035][ T4265] wacom 0003:056A:012C.0005: unknown main item tag 0x4 [ 735.200589][ T4265] wacom 0003:056A:012C.0005: hidraw0: USB HID v0.08 Device [HID 056a:012c] on usb-dummy_hcd.1-1/input0 [ 735.305243][ T4636] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 735.393880][ T4636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.618900][ T4265] usb 2-1: USB disconnect, device number 6 [ 735.873885][ T4636] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 735.946032][ T4636] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 735.961608][T11386] fido_id[11386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 735.996919][ T4636] usb 6-1: Manufacturer: syz [ 736.034563][ T4636] usb 6-1: config 0 descriptor?? [ 736.873842][ T4287] net_ratelimit: 55 callbacks suppressed [ 736.954033][ T4636] rc_core: IR keymap rc-hauppauge not found [ 736.993953][ T4636] Registered IR keymap rc-empty [ 737.594541][ T4636] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 737.697261][ T4636] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 737.783039][ T4636] usb 6-1: USB disconnect, device number 7 [ 737.799014][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1789'. [ 737.858071][T11407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1787'. [ 737.869289][T11407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1787'. [ 738.790740][T11419] futex_wake_op: syz.3.1788 tries to shift op by 144; fix this program [ 742.543491][ C1] net_ratelimit: 48 callbacks suppressed [ 743.700102][T11481] futex_wake_op: syz.0.1805 tries to shift op by 144; fix this program [ 744.644101][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 744.654857][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 746.673320][ T4231] hid-generic 0009:057B:0306.0006: hidraw0: HID v0.03 Device [syz0] on syz0 [ 746.918089][T11520] futex_wake_op: syz.2.1813 tries to shift op by 144; fix this program [ 747.103889][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 747.414061][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 747.663508][ C1] net_ratelimit: 49 callbacks suppressed [ 747.765163][ T4231] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 747.818314][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.074381][T11535] futex_wake_op: syz.5.1817 tries to shift op by 144; fix this program [ 748.760687][T11504] udevd[11504]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 749.064551][ T4231] usb 4-1: Product: syz [ 749.068874][ T4231] usb 4-1: Manufacturer: syz [ 749.073698][ T4231] usb 4-1: SerialNumber: syz [ 749.198438][ T4231] usb 4-1: can't set config #1, error -71 [ 749.305482][ T4231] usb 4-1: USB disconnect, device number 8 [ 749.574660][ T4188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 750.015166][ T4188] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 750.284805][ T4188] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 750.349473][ T4188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.687191][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1823'. [ 750.696735][ T4188] usb 2-1: Product: syz [ 750.701171][ T4188] usb 2-1: Manufacturer: syz [ 750.701188][ T4188] usb 2-1: SerialNumber: syz [ 750.710589][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1823'. [ 750.788460][ T4188] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 750.877527][ T4188] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 751.408028][ T4188] usb 2-1: USB disconnect, device number 7 [ 751.425818][ T4188] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 751.438665][ T4188] cyberjack 2-1:1.0: device disconnected [ 751.946134][T11577] futex_wake_op: syz.2.1829 tries to shift op by 144; fix this program [ 753.146070][T11587] futex_wake_op: syz.5.1832 tries to shift op by 144; fix this program [ 753.512478][ C0] net_ratelimit: 41 callbacks suppressed [ 753.521366][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.537524][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.623904][T11583] tipc: Started in network mode [ 754.004166][T11583] tipc: Node identity ac14140f, cluster identity 4711 [ 754.057514][T11583] tipc: New replicast peer: 255.255.255.255 [ 754.195107][T11583] tipc: Enabled bearer , priority 10 [ 755.264367][ T4188] tipc: Node number set to 2886997007 [ 755.830138][T11619] netlink: 'syz.0.1844': attribute type 3 has an invalid length. [ 755.940495][T11622] futex_wake_op: syz.2.1843 tries to shift op by 144; fix this program [ 756.408586][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1841'. [ 756.418743][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1841'. [ 756.614614][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 756.972831][T11626] udevd[11626]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 757.148045][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 757.974388][T11641] device erspan0 entered promiscuous mode [ 758.119520][T11626] udevd[11626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 758.623560][ C0] net_ratelimit: 52 callbacks suppressed [ 758.839954][T11653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 758.850347][T11653] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 760.189814][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1858'. [ 760.200889][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1858'. [ 763.438901][T11719] netlink: 'syz.3.1871': attribute type 5 has an invalid length. [ 763.579130][T11718] udevd[11718]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 763.983556][ C0] net_ratelimit: 45 callbacks suppressed [ 764.735532][T11718] udevd[11718]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 766.688773][T11784] netlink: 'syz.5.1891': attribute type 3 has an invalid length. [ 766.696980][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 766.706103][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'. [ 766.977680][T11718] udevd[11718]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 767.292638][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 767.363399][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 767.563759][ T4265] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 768.337335][T11814] tipc: Enabling of bearer rejected, failed to enable media [ 768.393523][ T4265] usb 3-1: Using ep0 maxpacket: 32 [ 769.040748][ T4310] net_ratelimit: 36 callbacks suppressed [ 769.186951][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.308677][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.318815][ T4265] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 769.532453][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.543929][ T4265] usb 3-1: config 0 descriptor?? [ 769.589434][T11826] jffs2: notice: (11826) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 770.552145][T11718] udevd[11718]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 770.703058][ T5786] ------------[ cut here ]------------ [ 770.710602][ T5786] kernel BUG at fs/jffs2/nodelist.c:462! [ 770.730965][ T5786] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 770.737530][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 [ 770.745005][ C1] bridge0: hello timer expired [ 770.745521][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.745560][ T5786] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 770.750593][ C1] bridge0: hello timer expired [ 770.760674][ T5786] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 01 d2 18 ff e9 4d fe ff ff e8 47 9e d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 770.760692][ T5786] RSP: 0018:ffffc900032efb38 EFLAGS: 00010293 [ 770.760706][ T5786] RAX: ffffffff82a57659 RBX: ffff8880627fc000 RCX: ffff888024e9bb80 [ 770.760716][ T5786] RDX: 0000000000000000 RSI: ffff8880627fc000 RDI: ffff888075e70000 [ 770.760727][ T5786] RBP: 0000000000000006 R08: ffff888075e7036b R09: 1ffff1100ebce06d [ 770.760735][ C1] virtqueue callback for ffff888147c8f700 (ffffffff85491a80) [ 770.760736][ T5786] R10: dffffc0000000000 R11: ffffed100ebce06e R12: ffff8880627fc000 [ 770.760754][ T5786] R13: dffffc0000000000 R14: ffff8880627fc020 R15: ffff888075e70000 [ 770.760766][ T5786] FS: 000055556c3ad500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 770.766820][ C1] bridge0: hello timer expired [ 770.771464][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.791297][ C1] dummy_hcd dummy_hcd.2: no ep configured for urb ffff888053a16300 [ 770.797742][ T5786] CR2: 000000110c2a9bec CR3: 000000005bdb0000 CR4: 00000000003506f0 [ 770.805909][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 770.813845][ T5786] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 770.822450][ C1] kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900022fa000 [ 770.829803][ T5786] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 770.837967][ C1] kcov: kcov_move_area: ffffc900111c5000 1048576 <= ffffc900022fa000 10 [ 770.845910][ T5786] Call Trace: [ 770.845920][ T5786] [ 770.855046][ C1] nf_conntrack: normal packet for ffff888079e8a480 [ 770.859564][ T5786] ? jffs2_do_clear_inode+0x310/0x390 [ 770.866214][ C1] tcp_in_window: START [ 770.874036][ T5786] jffs2_do_clear_inode+0x31b/0x390 [ 770.874063][ T5786] ? jffs2_statfs+0x370/0x370 [ 770.882023][ C1] tcp_in_window: [ 770.890161][ T5786] evict+0x4b6/0x8b0 [ 770.898195][ C1] seq=2120510745 ack=3944262245+(0) sack=3944262245+(0) win=24569 end=2120510825 [ 770.907254][ T5786] ? evict_inodes+0x577/0x6e0 [ 770.907283][ T5786] ? proc_nr_inodes+0x320/0x320 [ 770.907303][ T5786] ? do_raw_spin_unlock+0x11d/0x230 [ 770.915296][ C1] tcp_in_window: sender end=2120510745 maxend=2123651977 maxwin=3144832 scale=7 receiver end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 [ 770.923567][ T5786] evict_inodes+0x650/0x6e0 [ 770.923596][ T5786] ? clear_inode+0x150/0x150 [ 770.926862][ C1] tcp_in_window: [ 770.929776][ T5786] ? jffs2_sync_fs+0x93/0xa0 [ 770.936297][ C1] virtqueue callback for ffff888147c8f700 (ffffffff85491a80) [ 770.941630][ T5786] generic_shutdown_super+0x93/0x300 [ 770.946262][ C1] seq=2120510745 ack=3944262245+(0) sack=3944262245+(0) win=24569 end=2120510825 [ 770.951396][ T5786] kill_mtd_super+0x1f/0x60 [ 770.956105][ C1] tcp_in_window: sender end=2120510745 maxend=2123651977 maxwin=3144832 scale=7 receiver end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 [ 770.959687][ T5786] jffs2_kill_sb+0x92/0xb0 [ 770.963585][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 770.972774][ T5786] deactivate_locked_super+0x93/0xf0 [ 770.977458][ C1] tcp_in_window: res=1 sender end=2120510825 maxend=2123651977 maxwin=3144832 receiver end=3944262245 maxend=3947407077 maxwin=3144576 [ 770.982255][ T5786] cleanup_mnt+0x426/0x4d0 [ 770.987446][ C1] tcp_conntracks: [ 771.002262][ T5786] task_work_run+0x125/0x1a0 [ 771.006790][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 771.011516][ T5786] exit_to_user_mode_loop+0x10f/0x130 [ 771.015224][ C1] Sent skb ffff888020c9a0e8 [ 771.019780][ T5786] exit_to_user_mode_prepare+0xee/0x180 [ 771.027186][ C1] No more buffers in queue [ 771.032507][ T5786] syscall_exit_to_user_mode+0x16/0x40 [ 771.041701][ C1] eth0: xmit ffff88804acd1c68 42:01:0a:80:00:01 [ 771.046152][ T5786] do_syscall_64+0x58/0xa0 [ 771.046171][ T5786] ? clear_bhb_loop+0x30/0x80 [ 771.060856][ C1] Added buffer head 19 to ffff888147c8f800 [ 771.065218][ T5786] ? clear_bhb_loop+0x30/0x80 [ 771.065239][ T5786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 771.065246][ C1] virtqueue callback for ffff888147c8f800 (ffffffff85491b70) [ 771.065258][ T5786] RIP: 0033:0x7fcca0313397 [ 771.065268][ C1] virtqueue callback for ffff888147c8f700 (ffffffff85491a80) [ 771.065275][ T5786] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 771.065288][ T5786] RSP: 002b:00007ffd506c0b88 EFLAGS: 00000246 [ 771.070750][ C1] Sent skb ffff88804acd1c68 [ 771.075805][ T5786] ORIG_RAX: 00000000000000a6 [ 771.075815][ T5786] RAX: 0000000000000000 RBX: 00007fcca03a84bb RCX: 00007fcca0313397 [ 771.075825][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd506c0c40 [ 771.075835][ T5786] RBP: 00007ffd506c0c40 R08: 00007ffd506c1c40 R09: 00000000ffffffff [ 771.089639][ C1] No more buffers in queue [ 771.094012][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd506c1cd0 [ 771.094025][ T5786] R13: 00007fcca03a84bb R14: 00000000000bbe39 R15: 00007ffd506c1d10 [ 771.094043][ T5786] [ 771.097859][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 771.102448][ T5786] Modules linked in: [ 771.107818][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 771.113120][ T5786] [ 771.113296][ C0] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 15) [ 771.117643][ C1] Receiving skb proto 0x0800 len 980 type 0 [ 771.123192][ C0] wireguard: wg0: Handshake for peer 38 (224.0.0.1:20000) did not complete after 5 seconds, retrying (try 2) [ 771.127617][ C1] Receiving skb proto 0x0800 len 956 type 0 [ 771.134990][ T4836] MPTCP: msk=ffff88805fa20000 status=10 [ 771.139325][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 771.148702][ T4310] nf_conntrack: normal packet for ffff88802aa3af00 [ 771.154455][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 771.159374][ C0] proto(17) != IPPROTO_TCP or too short (len = 156) [ 771.165302][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 771.177730][ T4836] MPTCP: msk=ffff88805fa20000 snd_data_fin_enable=1 pending=0 snd_nxt=2209072697919922654 write_seq=2209072697919922654 [ 771.184626][ C1] No more buffers in queue [ 771.184645][ C1] Added buffer head 65 to ffff888147c8f700 [ 771.184659][ C1] Added buffer head 4021 to ffff888147c8f700 [ 771.184670][ C1] Added buffer head 4020 to ffff888147c8f700 [ 771.184681][ C1] Added buffer head 3870 to ffff888147c8f700 [ 771.184693][ C1] Added buffer head 3869 to ffff888147c8f700 [ 771.184706][ C1] Added buffer head 3868 to ffff888147c8f700 [ 771.184717][ C1] Added buffer head 3867 to ffff888147c8f700 [ 771.205342][T11850] kcov: kcov_start: t = ffff888024fd0000, size = 524288, area = ffffc9000d9b9000 [ 771.210526][ C1] Added buffer head 3866 to ffff888147c8f700 [ 771.221977][T11851] kcov: kcov_start: t = ffff888024fd1dc0, size = 524288, area = ffffc9000e1bb000 [ 771.227713][ C1] Added buffer head 4015 to ffff888147c8f700 [ 771.256726][T11853] kcov: kcov_start: t = ffff888024fd5940, size = 524288, area = ffffc9000edbe000 [ 771.264108][ C1] Added buffer head 4014 to ffff888147c8f700 [ 771.460564][ C1] Added buffer head 4013 to ffff888147c8f700 [ 771.466666][ C1] Added buffer head 4012 to ffff888147c8f700 [ 771.472717][ C1] Added buffer head 4011 to ffff888147c8f700 [ 771.478851][ C1] Added buffer head 4010 to ffff888147c8f700 [ 771.481488][ T4836] MPTCP: msk=ffff88805fa20000 ssk=ffff888029336600 sending dfrag at seq=2209072697919922625 len=28 already sent=0 [ 771.485034][ C1] Added buffer head 4009 to ffff888147c8f700 [ 771.485075][ C1] Added buffer head 4008 to ffff888147c8f700 [ 771.485089][ C1] Added buffer head 4007 to ffff888147c8f700 [ 771.485101][ C1] Added buffer head 4006 to ffff888147c8f700 [ 771.485112][ C1] Added buffer head 4005 to ffff888147c8f700 [ 771.485124][ C1] Added buffer head 4004 to ffff888147c8f700 [ 771.513527][ C0] nf_conntrack: new packet for ffff88807bd08f00 [ 771.515068][ C1] Added buffer head 4003 to ffff888147c8f700 [ 771.521008][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 771.526991][ C1] Added buffer head 4002 to ffff888147c8f700 [ 771.532977][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 771.539176][ C1] Added buffer head 4001 to ffff888147c8f700 [ 771.545154][ C0] virtqueue callback for ffff88801e703700 (ffffffff8444ab50) [ 771.554011][ C1] Added buffer head 4000 to ffff888147c8f700 [ 771.559997][ C0] virtqueue interrupt with no work for ffff88801e703600 [ 771.568800][ C1] Added buffer head 3999 to ffff888147c8f700 [ 771.574727][ C0] virtqueue interrupt with no work for ffff88801e703500 [ 771.574818][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 771.582116][ C1] Added buffer head 3998 to ffff888147c8f700 [ 771.599099][T11850] kcov: kcov_task_exit: t = ffff888024fd0000, kcov->t = ffff888024fd0000 [ 771.601025][ C1] Added buffer head 3997 to ffff888147c8f700 [ 771.619971][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 771.622818][ C1] Added buffer head 3996 to ffff888147c8f700 [ 771.631476][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 771.637436][ C1] Added buffer head 3995 to ffff888147c8f700 [ 771.661127][ C1] virtqueue callback for ffff888147c8f700 (ffffffff85491a80) [ 771.674563][ C1] Added buffer head 3994 to ffff888147c8f700 [ 771.680550][ C1] Added buffer head 3993 to ffff888147c8f700 [ 771.686719][ C1] Added buffer head 3992 to ffff888147c8f700 [ 771.690298][ T4836] MPTCP: data_seq=2209072697919922625 subflow_seq=1513 data_len=28 dsn64=1 [ 771.692709][ C1] Added buffer head 3991 to ffff888147c8f700 [ 771.707582][ C1] Added buffer head 3990 to ffff888147c8f700 [ 771.713775][ C1] Added buffer head 4054 to ffff888147c8f700 [ 771.719916][ C1] Added buffer head 4053 to ffff888147c8f700 [ 771.726045][ C1] Added buffer head 3908 to ffff888147c8f700 [ 771.726517][ T4836] tcp_in_window: START [ 771.732155][ C1] tcp_in_window: START [ 771.736220][ T4836] tcp_in_window: [ 771.736229][ T4836] seq=1677944216 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944244 [ 771.740285][ C1] tcp_in_window: [ 771.743916][ T4836] tcp_in_window: sender end=1677944216 maxend=1678009752 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 771.752828][ C1] seq=3944262245 ack=2120507929+(0) sack=2120507929+(0) win=24567 end=3944262245 [ 771.756462][ T4836] tcp_in_window: [ 771.756471][ T4836] seq=1677944216 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944244 [ 771.770882][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123651977 maxwin=3144832 scale=7 [ 771.779981][ T4836] tcp_in_window: sender end=1677944216 maxend=1678009752 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 771.783614][ C1] tcp_in_window: [ 771.792520][ T4836] tcp_in_window: I=1 II=1 III=1 IV=1 [ 771.807546][ C1] seq=3944262245 ack=2120507929+(0) sack=2120507929+(0) win=24567 end=3944262245 [ 771.822060][ T4836] tcp_in_window: res=1 sender end=1677944244 maxend=1678009752 maxwin=65536 receiver end=3725119414 maxend=3725184950 maxwin=65536 [ 771.825862][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123651977 maxwin=3144832 scale=7 [ 771.831139][ T4836] tcp_conntracks: [ 771.840388][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 771.854118][ T4836] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 771.868781][ C1] tcp_in_window: res=1 sender end=3944262245 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123652505 maxwin=3144832 [ 771.872673][ C0] bridge0: port 1(bridge_slave_0) hold timer expired [ 771.878208][ C1] tcp_conntracks: [ 771.883833][ C0] bridge0: port 2(bridge_slave_1) hold timer expired [ 771.897743][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 771.904412][ C0] bridge0: port 1(bridge_slave_0) hold timer expired [ 771.908296][ C1] tcp_in_window: START [ 771.915038][ C0] bridge0: port 2(bridge_slave_1) hold timer expired [ 771.920562][ C1] tcp_in_window: [ 771.938079][ C1] seq=3944262245 ack=2120510745+(0) sack=2120510745+(0) win=24559 end=3944262245 [ 771.950987][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123652505 maxwin=3144832 scale=7 [ 771.965700][ C1] tcp_in_window: [ 771.965715][ C1] seq=3944262245 ack=2120510745+(0) sack=2120510745+(0) win=24559 end=3944262245 [ 771.978656][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123652505 maxwin=3144832 scale=7 [ 771.993490][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 771.998783][ C1] tcp_in_window: res=1 sender end=3944262245 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123654297 maxwin=3144832 [ 772.012638][ C1] tcp_conntracks: [ 772.012656][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 772.021783][ C1] tcp_in_window: START [ 772.025887][ C1] tcp_in_window: [ 772.025900][ C1] seq=3944262245 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944263173 [ 772.032856][T11860] kcov: kcov_start: t = ffff88805d7abb80, size = 524288, area = ffffc90005681000 [ 772.038766][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123654297 maxwin=3144832 scale=7 [ 772.062706][ C1] tcp_in_window: [ 772.062723][ C1] seq=3944262245 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944263173 [ 772.075615][ C1] tcp_in_window: sender end=3944262245 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123654297 maxwin=3144832 scale=7 [ 772.090328][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.095665][ C1] tcp_in_window: res=1 sender end=3944263173 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123655321 maxwin=3144832 [ 772.109611][ C1] tcp_conntracks: [ 772.109629][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 772.118891][ C1] tcp_in_window: START [ 772.122965][ C1] tcp_in_window: [ 772.122980][ C1] seq=3944263173 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264077 [ 772.135797][ C1] tcp_in_window: sender end=3944263173 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.150705][ C1] tcp_in_window: [ 772.150720][ C1] seq=3944263173 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264077 [ 772.163691][ C1] tcp_in_window: sender end=3944263173 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.178407][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.183727][ C1] tcp_in_window: res=1 sender end=3944264077 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123655321 maxwin=3144832 [ 772.197577][ C1] tcp_conntracks: [ 772.197594][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 772.206731][ C1] tcp_in_window: START [ 772.210801][ C1] tcp_in_window: [ 772.210816][ C1] seq=3944264077 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264078 [ 772.223605][ C1] tcp_in_window: sender end=3944264077 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.238325][ C1] tcp_in_window: [ 772.238341][ C1] seq=3944264077 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264078 [ 772.251127][ C1] tcp_in_window: sender end=3944264077 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.266020][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.271410][ C1] tcp_in_window: res=1 sender end=3944264078 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123655321 maxwin=3144832 [ 772.285371][ C1] tcp_conntracks: [ 772.285389][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 772.294522][ C1] tcp_in_window: START [ 772.298596][ C1] tcp_in_window: [ 772.298609][ C1] seq=3944264077 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264078 [ 772.311518][ C1] tcp_in_window: sender end=3944264078 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.326249][ C1] tcp_in_window: [ 772.326266][ C1] seq=3944264077 ack=2120510745+(0) sack=2120510745+(0) win=24567 end=3944264078 [ 772.339032][ C1] tcp_in_window: sender end=3944264078 maxend=3947407077 maxwin=3144576 scale=7 receiver end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 [ 772.354320][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.359615][ C1] tcp_in_window: res=1 sender end=3944264078 maxend=3947407077 maxwin=3144576 receiver end=2120510825 maxend=2123655321 maxwin=3144832 [ 772.373641][ C1] tcp_conntracks: [ 772.373658][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 772.382758][ C1] tcp_conntracks: [ 772.382773][ C1] syn=0 ack=0 fin=0 rst=1 old=6 new=8 [ 772.392337][ C1] nf_conntrack: normal packet for ffff888079e8a480 [ 772.398999][ C1] tcp_in_window: START [ 772.403083][ C1] tcp_in_window: [ 772.403099][ C1] seq=2120510825 ack=3944264078+(0) sack=3944264078+(0) win=24563 end=2120510825 [ 772.416015][ C1] tcp_in_window: sender end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 receiver end=3944264078 maxend=3947407077 maxwin=3144576 scale=7 [ 772.430847][ C1] tcp_in_window: [ 772.430865][ C1] seq=2120510825 ack=3944264078+(0) sack=3944264078+(0) win=24563 end=2120510825 [ 772.443672][ C1] tcp_in_window: sender end=2120510825 maxend=2123655321 maxwin=3144832 scale=7 receiver end=3944264078 maxend=3947407077 maxwin=3144576 scale=7 [ 772.458777][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.464106][ C1] tcp_in_window: res=1 sender end=2120510825 maxend=2123655321 maxwin=3144832 receiver end=3944264078 maxend=3947408142 maxwin=3144576 [ 772.478319][ C1] tcp_conntracks: [ 772.478336][ C1] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 772.487627][ C1] No more buffers in queue [ 772.492081][ C1] eth0: xmit ffff88805ac58640 42:01:0a:80:00:01 [ 772.498364][ C1] Added buffer head 19 to ffff888147c8f800 [ 772.504203][ C1] virtqueue callback for ffff888147c8f800 (ffffffff85491b70) [ 772.504230][ C1] virtqueue callback for ffff888147c8f700 (ffffffff85491a80) [ 772.519420][T11844] kcov: kcov_task_exit: t = ffff88801daa8000, kcov->t = ffff88801daa8000 [ 772.519427][ C0] MPTCP: DSS [ 772.519441][ C0] MPTCP: data_fin=1 dsn64=1 use_map=1 ack64=0 use_ack=1 [ 772.528152][ C1] bridge0: port 1(bridge_slave_0) hold timer expired [ 772.531211][ C0] MPTCP: data_ack=1898080627 [ 772.538248][ C1] bridge0: port 2(bridge_slave_1) hold timer expired [ 772.544960][ C0] MPTCP: data_seq=2209072697919922625 subflow_seq=1513 data_len=29 csum=0:0 [ 772.549543][ C1] bridge0: port 1(bridge_slave_0) hold timer expired [ 772.549558][ C1] bridge0: port 2(bridge_slave_1) hold timer expired [ 772.549571][ C1] bridge0: port 1(bridge_slave_0) hold timer expired [ 772.556416][ C0] nf_conntrack: normal packet for ffff88807bd09980 [ 772.565561][ C1] Sent skb ffff88805ac58640 [ 772.571667][ C0] tcp_in_window: START [ 772.578360][ C1] No more buffers in queue [ 772.585013][ C0] tcp_in_window: [ 772.592668][T11853] kcov: kcov_task_exit: t = ffff888024fd5940, kcov->t = ffff888024fd5940 [ 772.596285][ C0] seq=3725119414 ack=1677944244+(0) sack=1677944244+(0) win=512 end=3725119414 [ 772.600873][ C1] No more buffers in queue [ 772.605281][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944244 maxend=1678009752 maxwin=65536 scale=7 [ 772.608922][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 772.617324][ C0] tcp_in_window: [ 772.626465][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 772.630926][ C0] seq=3725119414 ack=1677944244+(0) sack=1677944244+(0) win=512 end=3725119414 [ 772.645361][ C1] No more buffers in queue [ 772.651241][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944244 maxend=1678009752 maxwin=65536 scale=7 [ 772.655010][ C1] No more buffers in queue [ 772.660660][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 772.669883][ C1] eth0: xmit ffff88804acd3780 42:01:0a:80:00:01 [ 772.674416][ C0] tcp_in_window: res=1 sender end=3725119414 maxend=3725184950 maxwin=65536 receiver end=1677944244 maxend=1678009780 maxwin=65536 [ 772.688727][ C1] Added buffer head 19 to ffff888147c8f800 [ 772.693209][ C0] tcp_conntracks: [ 772.693214][ C1] virtqueue callback for ffff888147c8f800 (ffffffff85491b70) [ 772.693218][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 772.693607][ C0] nf_conntrack: new packet for ffff88807bd08f00 [ 772.698582][ C1] tcp_conntracks: [ 772.705002][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 772.718432][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 772.724355][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 772.728353][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 772.735422][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 772.762101][T11838] kobject: 'loop1536' (ffff88805e7b8c00): kobject_cleanup, parent 0000000000000000 [ 772.765499][ C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 772.773983][T11838] kobject: 'loop1536' (ffff88805e7b8c00): calling ktype release [ 772.783223][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 772.791321][T11838] kobject: 'queue' (ffff88802250d638): kobject_cleanup, parent 0000000000000000 [ 772.801668][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 772.813196][T11838] kobject: 'queue' (ffff88802250d638): calling ktype release [ 772.834043][T11863] kcov: kcov_start: t = ffff88801f961dc0, size = 524288, area = ffffc9000e5bc000 [ 772.838940][T11838] kobject: '0' (ffff888076d0aa90): kobject_cleanup, parent 0000000000000000 [ 772.850830][T11863] sock ffff88804e115a00 [ 772.858059][T11838] kobject: '0' (ffff888076d0aa90): calling ktype release [ 772.870527][T11863] sock ffff88804e115a00 sk ffff88807e2a2000 [ 772.876123][T11838] kobject: '0': free name [ 772.880250][T11863] channel 2 len 36 [ 772.887494][T11838] kobject: 'cpu0' (ffffe8ffffc14ce0): kobject_cleanup, parent 0000000000000000 [ 772.899528][T11863] sock ffff88804e115a00 sk ffff88807e2a2000 [ 772.901653][T11838] kobject: 'cpu0' (ffffe8ffffc14ce0): calling ktype release [ 772.912056][T11863] nf_conntrack: new packet for ffff88807bd08900 [ 772.916514][T11838] kobject: 'cpu0': free name [ 772.923783][T11863] tcp_new: sender end=1145258562 maxend=1145258562 maxwin=1 scale=0 receiver end=0 maxend=0 maxwin=0 scale=0 [ 772.930064][T11838] kobject: 'cpu1' (ffffe8ffffd14ce0): kobject_cleanup, parent 0000000000000000 [ 772.934615][T11863] tcp_in_window: START [ 772.946184][T11838] kobject: 'cpu1' (ffffe8ffffd14ce0): calling ktype release [ 772.955099][T11863] tcp_in_window: [ 772.959169][T11838] kobject: 'cpu1': free name [ 772.966439][T11863] seq=1145258561 ack=1145258561+(0) sack=1145258561+(0) win=0 end=1145258562 [ 772.970601][T11864] kcov: kcov_start: t = ffff888028b38000, size = 524288, area = ffffc9000f5c0000 [ 772.974675][T11863] tcp_in_window: sender end=1145258562 maxend=1145258562 maxwin=1 scale=0 receiver end=0 maxend=0 maxwin=0 scale=0 [ 772.983770][T11864] futex_wake_op: syz.2.1910 tries to shift op by 144; fix this program [ 772.992618][T11863] tcp_in_window: [ 773.009112][T11838] kobject: 'mq' (ffff88805effa780): kobject_cleanup, parent 0000000000000000 [ 773.012897][T11863] seq=1145258561 ack=0+(0) sack=0+(0) win=0 end=1145258562 [ 773.016588][T11838] kobject: 'mq' (ffff88805effa780): calling ktype release [ 773.025306][T11863] tcp_in_window: sender end=1145258562 maxend=1145258562 maxwin=1 scale=0 receiver end=0 maxend=0 maxwin=0 scale=0 [ 773.032574][T11838] kobject: 'mq': free name [ 773.039778][T11863] tcp_in_window: I=1 II=1 III=1 IV=1 [ 773.052208][T11838] kobject: 'queue': free name [ 773.056260][T11863] tcp_in_window: res=1 sender end=1145258562 maxend=1145258562 maxwin=1 receiver end=0 maxend=1 maxwin=0 [ 773.061601][T11838] kobject: 'loop1536': free name [ 773.066206][T11863] tcp_conntracks: [ 773.077657][T11838] kcov: kcov_task_exit: t = ffff888020e70000, kcov->t = ffff888020e70000 [ 773.082421][T11863] syn=1 ack=0 fin=0 rst=0 old=0 new=1 [ 773.100498][T11863] nf_conntrack: Confirming conntrack ffff88807bd08900 [ 773.103754][ T263] sd 0:0:1:0: cmd ffff8880214ae928 CDB: 0x35 [ 773.107542][T11863] tcp_in_window: START [ 773.113529][ T263] Added buffer head 145 to ffff8881478b7d00 [ 773.117996][T11863] tcp_in_window: [ 773.123881][T11863] seq=0 ack=1145258562+(0) sack=1145258562+(0) win=0 end=0 [ 773.123988][ C1] virtqueue callback for ffff8881478b7d00 (ffffffff85068310) [ 773.127551][T11863] tcp_in_window: sender end=0 maxend=1 maxwin=0 scale=0 receiver end=1145258562 maxend=1145258562 maxwin=1 scale=0 [ 773.134719][ C1] sd 0:0:1:0: cmd ffff8880214ae928 response 0 status 0x0 sense_len 0 [ 773.134740][ C1] No more buffers in queue [ 773.142105][T11863] tcp_in_window: [ 773.160523][T11859] sock ffff88804e115a00 sk ffff88807e2a2000 [ 773.162460][T11863] seq=0 ack=1145258562+(0) sack=1145258562+(0) win=0 end=0 [ 773.166935][T11859] channel 2 len 10 [ 773.170497][T11863] tcp_in_window: sender end=0 maxend=1 maxwin=1 scale=0 receiver end=1145258562 maxend=1145258562 maxwin=1 scale=0 [ 773.176792][T11864] kcov: kcov_task_exit: t = ffff888028b38000, kcov->t = ffff888028b38000 [ 773.183687][T11863] tcp_in_window: I=1 II=1 III=1 IV=1 [ 773.189405][ C1] bridge0: hello timer expired [ 773.199598][T11863] tcp_in_window: res=1 sender end=0 maxend=1 maxwin=1 receiver end=1145258562 maxend=1145258563 maxwin=1 [ 773.208102][ C1] bridge0: hello timer expired [ 773.213271][T11863] tcp_conntracks: [ 773.218094][ C1] bridge0: hello timer expired [ 773.229211][T11863] syn=0 ack=1 fin=0 rst=1 old=1 new=8 [ 773.234187][ C1] dummy_hcd dummy_hcd.2: no ep configured for urb ffff888053a16700 [ 773.237767][T11863] nf_conntrack: clean_from_lists(ffff88807bd08900) [ 773.242529][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 773.247922][T11863] nf_conntrack: nf_ct_destroy(ffff88807bd08900) [ 773.255729][ C1] kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900022fa000 [ 773.255764][ C1] kcov: kcov_move_area: ffffc900111c5000 1048576 <= ffffc900022fa000 10 [ 773.262233][T11863] nf_conntrack: nf_ct_destroy: returning ct=ffff88807bd08900 to slab [ 773.270428][ C1] Sent skb ffff88804acd3780 [ 773.276813][T11863] kcov: kcov_task_exit: t = ffff88801f961dc0, kcov->t = ffff88801f961dc0 [ 773.285847][ C1] No more buffers in queue [ 773.294613][ T4171] tcp_in_window: START [ 773.303284][ C1] No more buffers in queue [ 773.306717][ T4171] tcp_in_window: [ 773.320960][ C1] dummy_hcd dummy_hcd.2: no ep configured for urb ffff888053a16800 [ 773.323621][ T4171] seq=4156661461 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661577 [ 773.327998][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 773.331600][ T4171] tcp_in_window: sender end=4156661461 maxend=4156725589 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 773.339468][ C1] kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900022fa000 [ 773.348413][ T4171] tcp_in_window: [ 773.356543][ C1] kcov: kcov_move_area: ffffc900111c5000 1048576 <= ffffc900022fa000 10 [ 773.370847][ T4171] seq=4156661461 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661577 [ 773.380664][ T4265] usbhid 3-1:0.0: can't add hid device: -71 [ 773.383581][ T4171] tcp_in_window: sender end=4156661461 maxend=4156725589 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 773.383606][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 773.383617][ T4171] tcp_in_window: res=1 sender end=4156661577 maxend=4156725589 maxwin=64768 receiver end=1327181485 maxend=1327245613 maxwin=65408 [ 773.383637][ T4171] tcp_conntracks: [ 773.383644][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 773.384208][ T4836] MPTCP: DSS [ 773.401924][ T4265] kobject: '(null)' (ffff88801e835938): kobject_cleanup, parent 0000000000000000 [ 773.407160][ T4836] MPTCP: data_fin=0 dsn64=0 use_map=0 ack64=0 use_ack=1 [ 773.446340][ T4180] kcov: kcov_task_exit: t = ffff8880224f1dc0, kcov->t = ffff8880224f1dc0 [ 773.449496][ T4181] kcov: kcov_task_exit: t = ffff8880224f3b80, kcov->t = ffff8880224f3b80 [ 773.452680][ T4182] kcov: kcov_task_exit: t = ffff8880224f5940, kcov->t = ffff8880224f5940 [ 773.482073][ T4836] MPTCP: data_ack=579330497 [ 773.485868][ T4183] kcov: kcov_task_exit: t = ffff888022bc0000, kcov->t = ffff888022bc0000 [ 773.507329][ T5773] kcov: kcov_task_exit: t = ffff888074ec5940, kcov->t = ffff888074ec5940 [ 773.513511][ T4836] MPTCP: msk=ffff88805fa20000 ssk=ffff888029336600 sending dfrag at seq=2209072697919922625 len=28 already sent=0 [ 773.528025][ C0] bridge0: hello timer expired [ 773.533099][ C0] bridge0: hello timer expired [ 773.539204][ C0] proto(17) != IPPROTO_TCP or too short (len = 156) [ 773.571926][ T4836] MPTCP: data_seq=2209072697919922625 subflow_seq=1541 data_len=28 dsn64=1 [ 773.604446][ T4836] tcp_in_window: START [ 773.607743][ T4265] kobject: '(null)' (ffff88801e835938): calling ktype release [ 773.608581][ T4836] tcp_in_window: [ 773.616324][ T4836] seq=1677944244 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944272 [ 773.629168][ T4836] tcp_in_window: sender end=1677944244 maxend=1678009780 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 773.640812][ T4265] usbhid: probe of 3-1:0.0 failed with error -71 [ 773.643633][ T4836] tcp_in_window: [ 773.643644][ T4836] seq=1677944244 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944272 [ 773.662569][ T4836] tcp_in_window: sender end=1677944244 maxend=1678009780 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 773.677060][ T4836] tcp_in_window: I=1 II=1 III=1 IV=1 [ 773.681698][ T4265] kernfs 3-1:0.0: removing [ 773.682377][ T4836] tcp_in_window: res=1 sender end=1677944272 maxend=1678009780 maxwin=65536 receiver end=3725119414 maxend=3725184950 maxwin=65536 [ 773.700268][ T4836] tcp_conntracks: [ 773.700294][ T4836] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 773.704343][ T4265] kernfs driver: removing [ 773.743584][ C0] nf_conntrack: new packet for ffff88807bd08f00 [ 773.749930][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 773.759108][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 773.760631][ T4265] device: 'ep_81': device_add [ 773.768063][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 773.781954][ C0] nf_nat: Already setup manip DST for ct ffff88807bd08f00 (status bits 0x188) [ 773.790951][ C0] nf_nat: Already setup manip SRC for ct ffff88807bd08f00 (status bits 0x188) [ 773.800001][ T4265] kobject: 'ep_81' (ffff88807a76f010): kobject_add_internal: parent: '3-1:0.0', set: 'devices' SYZFAIL: failed to send rpc fd=3 want=472 sent=0 n=-1 (errno 32: Broken pipe) [ 773.844699][ T4171] No more buffers in queue [ 773.849270][ T4171] eth0: xmit ffff8880238339e8 42:01:0a:80:00:01 [ 773.854703][ T4265] ep_81: No ACPI support [ 773.855595][ T4171] Added buffer head 10 to ffff888147c8f600 [ 773.860038][ C0] virtqueue callback for ffff888147c8f500 (ffffffff85491a80) [ 773.860077][ C0] virtqueue callback for ffff888147c8f600 (ffffffff85491b70) [ 773.860727][ T4265] PM: Adding info for No Bus:ep_81 [ 773.865967][ C0] Sent skb ffff8880238339e8 [ 773.880928][ T4265] kobject: 'ep_81' (ffff88807a76f010): kobject_uevent_env [ 773.886020][ C0] No more buffers in queue [ 773.886073][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 773.897938][ T4265] kobject: 'ep_81' (ffff88807a76f010): kobject_uevent_env: filter function caused the event to drop! [ 773.902443][ C0] No more buffers in queue [ 773.920905][ T4265] driver: 'usb': driver_bound: bound to device '3-1' [ 773.923568][ C0] nf_conntrack: normal packet for ffff888079e8a300 [ 773.935044][ T4265] kobject: '3-1' (ffff88801fb3a0a8): kobject_uevent_env [ 773.936777][ C0] tcp_in_window: START [ 773.947757][ C0] tcp_in_window: [ 773.947783][ C0] seq=1327181485 ack=4156661577+(0) sack=4156661577+(0) win=501 end=1327181485 [ 773.954954][ T4265] kobject: '3-1' (ffff88801fb3a0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.2/usb3/3-1' [ 773.960449][ C0] tcp_in_window: sender end=1327181485 maxend=1327245613 maxwin=65408 scale=7 receiver end=4156661577 maxend=4156725589 maxwin=64768 scale=7 [ 773.985704][ C0] tcp_in_window: [ 773.985730][ C0] seq=1327181485 ack=4156661577+(0) sack=4156661577+(0) win=501 end=1327181485 [ 773.993295][ T4265] bus: 'usb': really_probe: bound device 3-1 to driver usb [ 773.998538][ C0] tcp_in_window: sender end=1327181485 maxend=1327245613 maxwin=65408 scale=7 receiver end=4156661577 maxend=4156725589 maxwin=64768 scale=7 [ 773.998564][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 773.998578][ C0] tcp_in_window: res=1 sender end=1327181485 maxend=1327245613 maxwin=65408 receiver end=4156661577 maxend=4156725705 maxwin=64768 [ 773.998602][ C0] tcp_conntracks: [ 773.998608][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 773.998979][ C0] No more buffers in queue [ 774.009040][ T4265] device: 'ep_00': device_add [ 774.025106][ T4171] tcp_in_window: START [ 774.033003][ T4265] kobject: 'ep_00' (ffff88807a76e010): kobject_add_internal: parent: '3-1', set: 'devices' [ 774.039341][ T4171] tcp_in_window: [ 774.039351][ T4171] seq=4156661577 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661629 [ 774.039370][ T4171] tcp_in_window: sender end=4156661577 maxend=4156725705 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 774.039391][ T4171] tcp_in_window: [ 774.039397][ T4171] seq=4156661577 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661629 [ 774.039415][ T4171] tcp_in_window: sender end=4156661577 maxend=4156725705 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 774.039438][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.039451][ T4171] tcp_in_window: res=1 sender end=4156661629 maxend=4156725705 maxwin=64768 receiver end=1327181485 maxend=1327245613 maxwin=65408 [ 774.039472][ T4171] tcp_conntracks: [ 774.039479][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.040240][ C0] MPTCP: DSS [ 774.046627][ T4265] ep_00: No ACPI support [ 774.048928][ C0] MPTCP: data_fin=1 dsn64=1 use_map=1 ack64=0 use_ack=1 [ 774.053704][ T4171] No more buffers in queue [ 774.058533][ C0] MPTCP: data_ack=1898080627 [ 774.062547][ T4171] eth0: xmit ffff888025bf05e8 42:01:0a:80:00:01 [ 774.072593][ C0] MPTCP: data_seq=2209072697919922625 subflow_seq=1541 data_len=29 csum=0:0 [ 774.076408][ T4171] Added buffer head 19 to ffff888147c8f800 [ 774.085410][ C1] virtqueue callback for ffff888147c8f800 (ffffffff85491b70) [ 774.085410][ C0] virtqueue callback for ffff888147c8f500 (ffffffff85491a80) [ 774.085515][ C0] nf_conntrack: normal packet for ffff88807bd09980 [ 774.099959][ C1] Sent skb ffff888025bf05e8 [ 774.103462][ C0] tcp_in_window: START [ 774.112554][ C1] No more buffers in queue [ 774.126897][ C0] tcp_in_window: [ 774.126907][ C0] seq=3725119414 ack=1677944272+(0) sack=1677944272+(0) win=512 end=3725119414 [ 774.134694][ T4265] PM: Adding info for No Bus:ep_00 [ 774.145618][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944272 maxend=1678009780 maxwin=65536 scale=7 [ 774.145646][ C0] tcp_in_window: [ 774.145653][ C0] seq=3725119414 ack=1677944272+(0) sack=1677944272+(0) win=512 end=3725119414 [ 774.145672][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944272 maxend=1678009780 maxwin=65536 scale=7 [ 774.145695][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.145706][ C0] tcp_in_window: res=1 sender end=3725119414 maxend=3725184950 maxwin=65536 receiver end=1677944272 maxend=1678009808 maxwin=65536 [ 774.145728][ C0] tcp_conntracks: [ 774.145735][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.146157][ C0] No more buffers in queue [ 774.152113][ T5786] ---[ end trace 61d1e86146e43d1e ]--- [ 774.155177][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 774.155200][ C0] No more buffers in queue [ 774.155228][ C0] nf_conntrack: normal packet for ffff888079e8a300 [ 774.155243][ C0] tcp_in_window: START [ 774.159943][ T5786] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 774.162782][ C0] tcp_in_window: [ 774.170814][ T4265] kobject: 'ep_00' (ffff88807a76e010): kobject_uevent_env [ 774.174132][ C0] seq=1327181485 ack=4156661629+(0) sack=4156661629+(0) win=501 end=1327181485 [ 774.174153][ C0] tcp_in_window: sender end=1327181485 maxend=1327245613 maxwin=65408 scale=7 receiver end=4156661629 maxend=4156725705 maxwin=64768 scale=7 [ 774.179579][ T4265] kobject: 'ep_00' (ffff88807a76e010): kobject_uevent_env: filter function caused the event to drop! [ 774.184977][ C0] tcp_in_window: [ 774.184985][ C0] seq=1327181485 ack=4156661629+(0) sack=4156661629+(0) win=501 end=1327181485 [ 774.185011][ C0] tcp_in_window: sender end=1327181485 maxend=1327245613 maxwin=65408 scale=7 receiver end=4156661629 maxend=4156725705 maxwin=64768 scale=7 [ 774.185034][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.185045][ C0] tcp_in_window: res=1 sender end=1327181485 maxend=1327245613 maxwin=65408 receiver end=4156661629 maxend=4156725757 maxwin=64768 [ 774.195663][ T5786] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 01 d2 18 ff e9 4d fe ff ff e8 47 9e d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 774.199528][ C0] tcp_conntracks: [ 774.207122][ T4265] hub 3-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 774.214272][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.214999][ T4836] MPTCP: DSS [ 774.222549][ T5786] RSP: 0018:ffffc900032efb38 EFLAGS: 00010293 [ 774.225393][ C1] net_ratelimit: 29 callbacks suppressed [ 774.225403][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 774.225456][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 774.225516][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 774.225745][ T4836] MPTCP: data_fin=0 dsn64=0 use_map=0 ack64=0 use_ack=1 [ 774.229694][ T5786] [ 774.234261][ T4836] MPTCP: data_ack=579330497 [ 774.240160][ T4265] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes [ 774.247206][ T4171] tcp_in_window: START [ 774.253005][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 774.266434][ T4171] tcp_in_window: [ 774.270399][ T5786] RAX: ffffffff82a57659 RBX: ffff8880627fc000 RCX: ffff888024e9bb80 [ 774.279085][ T4171] seq=4156661629 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661701 [ 774.295742][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 774.298783][ T4171] tcp_in_window: sender end=4156661629 maxend=4156725757 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 774.315724][ T5786] RDX: 0000000000000000 RSI: ffff8880627fc000 RDI: ffff888075e70000 [ 774.316264][ T4171] tcp_in_window: [ 774.321702][ T5786] RBP: 0000000000000006 R08: ffff888075e7036b R09: 1ffff1100ebce06d [ 774.326270][ T4171] seq=4156661629 ack=1327181485+(0) sack=1327181485+(0) win=501 end=4156661701 [ 774.326290][ T4171] tcp_in_window: sender end=4156661629 maxend=4156725757 maxwin=64768 scale=7 receiver end=1327181485 maxend=1327245613 maxwin=65408 scale=7 [ 774.326310][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.326324][ T4171] tcp_in_window: res=1 sender end=4156661701 maxend=4156725757 maxwin=64768 receiver end=1327181485 maxend=1327245613 maxwin=65408 [ 774.326345][ T4171] tcp_conntracks: [ 774.326352][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.326419][ T4836] MPTCP: msk=ffff88805fa20000 ssk=ffff888029336600 sending dfrag at seq=2209072697919922625 len=28 already sent=0 [ 774.326466][ T4836] MPTCP: data_seq=2209072697919922625 subflow_seq=1569 data_len=28 dsn64=1 [ 774.326508][ T4836] tcp_in_window: START [ 774.326515][ T4836] tcp_in_window: [ 774.326521][ T4836] seq=1677944272 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944300 [ 774.326539][ T4836] tcp_in_window: sender end=1677944272 maxend=1678009808 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 774.326562][ T4836] tcp_in_window: [ 774.326567][ T4836] seq=1677944272 ack=3725119414+(0) sack=3725119414+(0) win=512 end=1677944300 [ 774.326585][ T4836] tcp_in_window: sender end=1677944272 maxend=1678009808 maxwin=65536 scale=7 receiver end=3725119414 maxend=3725184950 maxwin=65536 scale=7 [ 774.326608][ T4836] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.326620][ T4836] tcp_in_window: res=1 sender end=1677944300 maxend=1678009808 maxwin=65536 receiver end=3725119414 maxend=3725184950 maxwin=65536 [ 774.326641][ T4836] tcp_conntracks: [ 774.326648][ T4836] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.328051][ T7614] Added buffer head 0 to ffff88801e703700 [ 774.334258][ T4265] usb usb3-port1: status 0100, change 0001, 12 Mb/s [ 774.338266][ C0] virtqueue callback for ffff88801e703700 (ffffffff8444ab50) [ 774.343335][ T4265] usb 3-1: USB disconnect, device number 12 [ 774.348960][ C0] virtqueue interrupt with no work for ffff88801e703600 [ 774.348973][ C0] virtqueue interrupt with no work for ffff88801e703500 [ 774.357089][ T5786] R10: dffffc0000000000 R11: ffffed100ebce06e R12: ffff8880627fc000 [ 774.362161][ T4836] nf_conntrack: normal packet for ffff888079e8b500 [ 774.363335][ T4265] usb 3-1: unregistering device [ 774.370284][ T4188] nf_conntrack: normal packet for ffff888078487680 [ 774.380834][ T5786] R13: dffffc0000000000 R14: ffff8880627fc020 R15: ffff888075e70000 [ 774.393637][ T4231] nf_conntrack: normal packet for ffff88807bd08000 [ 774.406721][ T4265] usb 3-1: unregistering interface 3-1:0.0 [ 774.408646][ T4230] nf_conntrack: normal packet for ffff88802aa3a300 [ 774.417778][ T5786] FS: 000055556c3ad500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 774.432073][ T4229] nf_conntrack: normal packet for ffff888078486000 [ 774.438999][ T4265] device: 'ep_81': device_unregister [ 774.450941][ T5282] Added buffer head 0 to ffff88801e703700 [ 774.451039][ T5282] nf_conntrack: normal packet for ffff88807bd09680 [ 774.451471][ C0] MPTCP: DSS [ 774.473775][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.474990][ C0] MPTCP: data_fin=1 dsn64=1 use_map=1 ack64=0 use_ack=1 [ 774.481581][ T5786] CR2: 000055f32721c828 CR3: 000000005bdb0000 CR4: 00000000003506e0 [ 774.486925][ C0] MPTCP: data_ack=1898080627 [ 774.486937][ C0] MPTCP: data_seq=2209072697919922625 subflow_seq=1569 data_len=29 csum=0:0 [ 774.487026][ C0] nf_conntrack: normal packet for ffff88807bd09980 [ 774.491731][ T5786] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.496273][ C0] tcp_in_window: START [ 774.496282][ C0] tcp_in_window: [ 774.496289][ C0] seq=3725119414 ack=1677944300+(0) sack=1677944300+(0) win=512 end=3725119414 [ 774.496309][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944300 maxend=1678009808 maxwin=65536 scale=7 [ 774.502660][ T5786] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.510372][ C0] tcp_in_window: [ 774.510382][ C0] seq=3725119414 ack=1677944300+(0) sack=1677944300+(0) win=512 end=3725119414 [ 774.510401][ C0] tcp_in_window: sender end=3725119414 maxend=3725184950 maxwin=65536 scale=7 receiver end=1677944300 maxend=1678009808 maxwin=65536 scale=7 [ 774.510426][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 774.510439][ C0] tcp_in_window: res=1 sender end=3725119414 maxend=3725184950 maxwin=65536 receiver end=1677944300 maxend=1678009836 maxwin=65536 [ 774.520672][ T4265] kernfs runtime_status: removing [ 774.527108][ C0] tcp_conntracks: [ 774.527117][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 774.537716][ T4265] kernfs control: removing [ 774.541062][ C0] proto(17) != IPPROTO_TCP or too short (len = 40) [ 774.549426][ T5786] Kernel panic - not syncing: Fatal exception [ 774.552576][ C0] MPTCP: DSS [ 774.560828][ T5786] Kernel Offset: disabled [ 775.083031][ T5786] Rebooting in 86400 seconds..