last executing test programs: 21m10.663917364s ago: executing program 1 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r4, 0x8914, 0x0) ioctl(r4, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/39) ioctl(r4, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e0000000000000") socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) 21m9.023028034s ago: executing program 1 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2, 0x200000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x0, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc0d4) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000380)={0x0, 0x0, 0x0, @lost_msgs}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 21m2.388094577s ago: executing program 1 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$cont(0x18, r0, 0x4, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r5, &(0x7f0000000440), 0x0, 0x4040, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x6, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='traceon', 0x7) 21m0.899647664s ago: executing program 1 (id=298): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 20m59.772772762s ago: executing program 1 (id=300): r0 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0) write$vga_arbiter(r4, &(0x7f0000000240), 0xf) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}}) 20m58.198115s ago: executing program 1 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 20m41.942280011s ago: executing program 32 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 18m59.743190838s ago: executing program 3 (id=555): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000640)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r2 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000001c0)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000200)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000800)='0', 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, 0x0, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000500)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x235b, 0x1}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000840)='sysfs\x00', 0x6) syz_clone3(&(0x7f0000000b80)={0x84000000, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0x33}, &(0x7f0000000940)=""/248, 0xf8, &(0x7f0000000a40)=""/222, &(0x7f0000000b40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r3}}, 0x58) setpriority(0x1, r4, 0x8) 18m55.244157879s ago: executing program 3 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000000)=0xd6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001680)=""/4130, 0x1022, 0x1000000000001) 18m53.393920645s ago: executing program 3 (id=570): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f0000000280)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x2) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @multicast2}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)='f', 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000540), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000840)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r5) 18m51.687773756s ago: executing program 3 (id=571): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) 18m50.376106119s ago: executing program 3 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 18m49.213280047s ago: executing program 3 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newqdisc={0x86c, 0x28, 0x4ee4e6a52ff5644f, 0x5011, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xc}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x9, 0x1, 0x3, 0x7, 0x0, 0x3, 0x5, 0xf, 0x6, 0xfffffb0c, 0x864e0e7, 0x2e6, 0x80000001, 0x5, 0x668f993a, 0x8469, 0x5, 0x6, 0xfffffffd, 0x1, 0x9, 0x3, 0x5, 0x3, 0x8, 0x7fffffff, 0x8001, 0xb, 0x9, 0x6, 0x2, 0x1, 0x7f, 0x9, 0x5, 0x6, 0xfffffff8, 0x0, 0xbeca, 0x9, 0x6, 0x7, 0x2, 0xac, 0x5, 0x4, 0xff, 0x80000000, 0x80, 0x3, 0x81, 0xb04d, 0x6, 0x9, 0x6e4, 0x3, 0x0, 0x47a, 0x8, 0x3, 0x6, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff646c, 0x2, 0x5, 0xf9, 0x101, 0x8, 0x2, 0xb0, 0xa, 0xa4c, 0xe, 0x6, 0x6, 0x1, 0x6a, 0xebc1, 0x8, 0xa5c1, 0x7ff, 0x7, 0x4dee5e01, 0x3, 0x850, 0x2, 0x2, 0x9, 0xfffffffd, 0x6, 0xfffffffa, 0x8, 0x752, 0x4, 0x1000, 0x17b, 0x10, 0x0, 0x7, 0x400, 0x6, 0x4, 0x6, 0x7, 0xffff, 0x5, 0x808, 0x81, 0x3, 0x1, 0x7f, 0x5, 0xfffffffa, 0x2, 0x8, 0x0, 0xa, 0x6, 0x9, 0x800, 0x3, 0x2, 0x7, 0x6, 0x6, 0xa, 0x4, 0x5, 0x4, 0x80, 0x325c, 0x8001, 0x6, 0xa6000000, 0x8, 0xb5e, 0x3, 0xffff, 0x4, 0x8, 0xf, 0x1, 0xfffffffa, 0x200, 0x8001, 0x370, 0x14024585, 0x3, 0x2, 0x80, 0xb06, 0x3, 0x2, 0x6, 0x4, 0x200, 0x8, 0x14, 0x8, 0x9, 0x4, 0x9, 0x7, 0xe4, 0x0, 0x9, 0x8, 0x4, 0x8, 0x4, 0x9, 0xee09, 0x2, 0x200, 0x9, 0x4, 0x2, 0x65e3, 0xa, 0x1000, 0x80000001, 0x4, 0xffffffa8, 0x1bcf, 0x10001, 0xa6, 0x7, 0x4, 0x3, 0x8, 0x5, 0x80000001, 0x67e, 0x18e7, 0x2c1, 0x10000, 0x9, 0x787, 0x6, 0x2, 0x145, 0x8, 0x6, 0x4d, 0x77, 0x1, 0x6, 0x8, 0x1, 0x3, 0x8, 0x5, 0x6edf1ae4, 0x7, 0x2, 0xb74, 0x3, 0x0, 0x3, 0x6, 0x4, 0xe6, 0x401, 0x0, 0x10001, 0x4, 0x6, 0xf, 0x7867, 0x5, 0xffff, 0x1000, 0x5, 0x5, 0x3, 0x3, 0x4, 0x80000000, 0x3, 0x2, 0xeff4, 0x7, 0xe67fb90, 0xfffffffe, 0x7, 0x3, 0x7, 0x9, 0x9, 0x5]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2f3cc5bf75aa77bb}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x9c, 0x81, 0x3, 0x5, 0x4db, 0x8c7, 0x7fff, 0x0, 0x7, 0x2, 0x384, 0x3, 0x100, 0x80000000, 0xfffffff8, 0x5, 0x6fd1bc89, 0x1ff, 0x0, 0x200, 0x3, 0x4a3f, 0xfffffff0, 0x3, 0x7, 0x1, 0x1, 0x80000001, 0x6, 0xb8, 0xe0f2, 0x0, 0x2, 0x10000, 0x4, 0x7, 0x1, 0x1, 0x3, 0xb7b8, 0x1, 0xa, 0x9, 0x5c56, 0x2, 0x4, 0x1, 0x1ff, 0x1, 0x2, 0x7, 0x5, 0x80000000, 0x40, 0x0, 0x3e, 0x4, 0x8, 0x7fffffff, 0x9, 0x0, 0x8, 0x20e, 0x8, 0x936d, 0x4, 0x1993, 0x1, 0xac4, 0x9, 0x3, 0xfffffffc, 0x2, 0xffffffff, 0x1, 0x1, 0xc9, 0x10000, 0x5, 0x0, 0x7, 0x3, 0x4, 0xcbc3, 0x1, 0x7, 0x6, 0x4, 0x7, 0x10001, 0xffffacd1, 0x4, 0x5, 0x10001, 0xffffffff, 0x3, 0x0, 0x8001, 0x4, 0x400, 0xab, 0xbe3, 0x53f8, 0x27f, 0x2e, 0x3, 0x7, 0xf8cb, 0x359f, 0x4, 0x32e5, 0x0, 0x4, 0x3, 0x2, 0x3, 0x1e, 0x8, 0x4, 0x6, 0x0, 0xc936, 0x1, 0xb, 0x8, 0x5, 0x0, 0x81, 0x6, 0x4, 0x800, 0xffffffff, 0x0, 0x0, 0x5, 0x9, 0x6, 0x8, 0x0, 0x4e2, 0x60a1bfb5, 0xffffffff, 0x3, 0x1, 0x10, 0x284e, 0x2, 0x7, 0x2, 0x4, 0x4, 0x80000001, 0x800, 0x5, 0x8d, 0x4, 0x9, 0x200, 0x6, 0x9, 0x7cfc3dfc, 0x22d8, 0x4, 0x7, 0x1, 0xfffffff9, 0x7, 0xcb, 0x5, 0xe000, 0x5, 0x800, 0x8000000, 0x1, 0x8, 0x47, 0x6, 0x7fff, 0x6, 0x6, 0x7, 0x4, 0x5, 0x9, 0xc, 0x7fffffff, 0x101, 0x33c9, 0x2, 0x3, 0x8, 0x2000, 0x2, 0x8, 0xfffffff9, 0xc6, 0x707fd5b1, 0x1, 0x8, 0x984a, 0xe, 0xe2b, 0x8, 0xffffffff, 0x3ff, 0x99a7, 0x1b3, 0xd, 0x4, 0x1b7f, 0x6, 0xe, 0x1, 0x4, 0x6, 0x7, 0xe, 0x2, 0x80, 0x4, 0x3, 0x2, 0xcfa8, 0xffffffff, 0xf09, 0x2, 0x0, 0x2, 0xffffffff, 0x1, 0x2a7ab7a, 0x7fff, 0x198e, 0x10000, 0x3, 0x8, 0x772f, 0x3ff, 0x3, 0x9424, 0x3, 0x400, 0x4d5, 0x4, 0x6, 0x7f, 0x7, 0x4, 0x8000, 0x0, 0xeb, 0x8, 0xb, 0xffffffff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x200, 0xd, 0x4, 0x4}, {0x10, 0x0, 0x53f, 0xf1ca, 0x601e, 0x1}, 0x1, 0x1, 0x15fa}}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 18m32.844832391s ago: executing program 33 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newqdisc={0x86c, 0x28, 0x4ee4e6a52ff5644f, 0x5011, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xc}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x9, 0x1, 0x3, 0x7, 0x0, 0x3, 0x5, 0xf, 0x6, 0xfffffb0c, 0x864e0e7, 0x2e6, 0x80000001, 0x5, 0x668f993a, 0x8469, 0x5, 0x6, 0xfffffffd, 0x1, 0x9, 0x3, 0x5, 0x3, 0x8, 0x7fffffff, 0x8001, 0xb, 0x9, 0x6, 0x2, 0x1, 0x7f, 0x9, 0x5, 0x6, 0xfffffff8, 0x0, 0xbeca, 0x9, 0x6, 0x7, 0x2, 0xac, 0x5, 0x4, 0xff, 0x80000000, 0x80, 0x3, 0x81, 0xb04d, 0x6, 0x9, 0x6e4, 0x3, 0x0, 0x47a, 0x8, 0x3, 0x6, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff646c, 0x2, 0x5, 0xf9, 0x101, 0x8, 0x2, 0xb0, 0xa, 0xa4c, 0xe, 0x6, 0x6, 0x1, 0x6a, 0xebc1, 0x8, 0xa5c1, 0x7ff, 0x7, 0x4dee5e01, 0x3, 0x850, 0x2, 0x2, 0x9, 0xfffffffd, 0x6, 0xfffffffa, 0x8, 0x752, 0x4, 0x1000, 0x17b, 0x10, 0x0, 0x7, 0x400, 0x6, 0x4, 0x6, 0x7, 0xffff, 0x5, 0x808, 0x81, 0x3, 0x1, 0x7f, 0x5, 0xfffffffa, 0x2, 0x8, 0x0, 0xa, 0x6, 0x9, 0x800, 0x3, 0x2, 0x7, 0x6, 0x6, 0xa, 0x4, 0x5, 0x4, 0x80, 0x325c, 0x8001, 0x6, 0xa6000000, 0x8, 0xb5e, 0x3, 0xffff, 0x4, 0x8, 0xf, 0x1, 0xfffffffa, 0x200, 0x8001, 0x370, 0x14024585, 0x3, 0x2, 0x80, 0xb06, 0x3, 0x2, 0x6, 0x4, 0x200, 0x8, 0x14, 0x8, 0x9, 0x4, 0x9, 0x7, 0xe4, 0x0, 0x9, 0x8, 0x4, 0x8, 0x4, 0x9, 0xee09, 0x2, 0x200, 0x9, 0x4, 0x2, 0x65e3, 0xa, 0x1000, 0x80000001, 0x4, 0xffffffa8, 0x1bcf, 0x10001, 0xa6, 0x7, 0x4, 0x3, 0x8, 0x5, 0x80000001, 0x67e, 0x18e7, 0x2c1, 0x10000, 0x9, 0x787, 0x6, 0x2, 0x145, 0x8, 0x6, 0x4d, 0x77, 0x1, 0x6, 0x8, 0x1, 0x3, 0x8, 0x5, 0x6edf1ae4, 0x7, 0x2, 0xb74, 0x3, 0x0, 0x3, 0x6, 0x4, 0xe6, 0x401, 0x0, 0x10001, 0x4, 0x6, 0xf, 0x7867, 0x5, 0xffff, 0x1000, 0x5, 0x5, 0x3, 0x3, 0x4, 0x80000000, 0x3, 0x2, 0xeff4, 0x7, 0xe67fb90, 0xfffffffe, 0x7, 0x3, 0x7, 0x9, 0x9, 0x5]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2f3cc5bf75aa77bb}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x9c, 0x81, 0x3, 0x5, 0x4db, 0x8c7, 0x7fff, 0x0, 0x7, 0x2, 0x384, 0x3, 0x100, 0x80000000, 0xfffffff8, 0x5, 0x6fd1bc89, 0x1ff, 0x0, 0x200, 0x3, 0x4a3f, 0xfffffff0, 0x3, 0x7, 0x1, 0x1, 0x80000001, 0x6, 0xb8, 0xe0f2, 0x0, 0x2, 0x10000, 0x4, 0x7, 0x1, 0x1, 0x3, 0xb7b8, 0x1, 0xa, 0x9, 0x5c56, 0x2, 0x4, 0x1, 0x1ff, 0x1, 0x2, 0x7, 0x5, 0x80000000, 0x40, 0x0, 0x3e, 0x4, 0x8, 0x7fffffff, 0x9, 0x0, 0x8, 0x20e, 0x8, 0x936d, 0x4, 0x1993, 0x1, 0xac4, 0x9, 0x3, 0xfffffffc, 0x2, 0xffffffff, 0x1, 0x1, 0xc9, 0x10000, 0x5, 0x0, 0x7, 0x3, 0x4, 0xcbc3, 0x1, 0x7, 0x6, 0x4, 0x7, 0x10001, 0xffffacd1, 0x4, 0x5, 0x10001, 0xffffffff, 0x3, 0x0, 0x8001, 0x4, 0x400, 0xab, 0xbe3, 0x53f8, 0x27f, 0x2e, 0x3, 0x7, 0xf8cb, 0x359f, 0x4, 0x32e5, 0x0, 0x4, 0x3, 0x2, 0x3, 0x1e, 0x8, 0x4, 0x6, 0x0, 0xc936, 0x1, 0xb, 0x8, 0x5, 0x0, 0x81, 0x6, 0x4, 0x800, 0xffffffff, 0x0, 0x0, 0x5, 0x9, 0x6, 0x8, 0x0, 0x4e2, 0x60a1bfb5, 0xffffffff, 0x3, 0x1, 0x10, 0x284e, 0x2, 0x7, 0x2, 0x4, 0x4, 0x80000001, 0x800, 0x5, 0x8d, 0x4, 0x9, 0x200, 0x6, 0x9, 0x7cfc3dfc, 0x22d8, 0x4, 0x7, 0x1, 0xfffffff9, 0x7, 0xcb, 0x5, 0xe000, 0x5, 0x800, 0x8000000, 0x1, 0x8, 0x47, 0x6, 0x7fff, 0x6, 0x6, 0x7, 0x4, 0x5, 0x9, 0xc, 0x7fffffff, 0x101, 0x33c9, 0x2, 0x3, 0x8, 0x2000, 0x2, 0x8, 0xfffffff9, 0xc6, 0x707fd5b1, 0x1, 0x8, 0x984a, 0xe, 0xe2b, 0x8, 0xffffffff, 0x3ff, 0x99a7, 0x1b3, 0xd, 0x4, 0x1b7f, 0x6, 0xe, 0x1, 0x4, 0x6, 0x7, 0xe, 0x2, 0x80, 0x4, 0x3, 0x2, 0xcfa8, 0xffffffff, 0xf09, 0x2, 0x0, 0x2, 0xffffffff, 0x1, 0x2a7ab7a, 0x7fff, 0x198e, 0x10000, 0x3, 0x8, 0x772f, 0x3ff, 0x3, 0x9424, 0x3, 0x400, 0x4d5, 0x4, 0x6, 0x7f, 0x7, 0x4, 0x8000, 0x0, 0xeb, 0x8, 0xb, 0xffffffff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x200, 0xd, 0x4, 0x4}, {0x10, 0x0, 0x53f, 0xf1ca, 0x601e, 0x1}, 0x1, 0x1, 0x15fa}}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 11.488291006s ago: executing program 4 (id=2988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.678061435s ago: executing program 4 (id=2993): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000640)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r2 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000001c0)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000200)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='0', 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, 0x0, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000500)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x235b, 0x1}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000840)='sysfs\x00', 0x6) syz_clone3(&(0x7f0000000b80)={0x84000000, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0x33}, &(0x7f0000000940)=""/248, 0xf8, &(0x7f0000000a40)=""/222, &(0x7f0000000b40), 0x0, {r4}}, 0x58) setpriority(0x1, r5, 0x8) 7.367240787s ago: executing program 4 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.05727359s ago: executing program 4 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000b55cbdd9771302", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2, 0x2}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x83a, [0x10008000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80008, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x5, 0x4, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008070, 0x7, 0x16, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x3, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x200008, 0x4, 0x5, 0x6], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xa, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x1ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x7, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x0, 0x80ffff, 0xfffffffe, 0x7, 0x798277ee, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x4, 0x3], [0x9, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x878c, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x5e9, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x7f, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000000, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x9, 0x6, 0x9602, 0x7, 0xac, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x4, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3443, 0xfff]}, 0x45c) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x4010, &(0x7f0000000a40)={[{@bsdgroups}, {@errors_remount}, {@noauto_da_alloc}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x1, 0x453, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x83) syz_open_dev$vim2m(&(0x7f0000000f80), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000fc0), 0x47b, 0x2) ppoll(&(0x7f0000001000)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x9) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="a000000010dd3a0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYRES32], 0xa0}}, 0x0) r9 = syz_open_procfs(r5, &(0x7f0000000480)='stack\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x22, 0x0, 0xffffffffffffffff, 0x6, '\x00', r8, r9, 0x4, 0x2, 0x200002}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r10, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$UHID_INPUT(r3, &(0x7f0000002580)={0xfc, {"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", 0x1000}}, 0x1006) 5.749938207s ago: executing program 5 (id=3014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xfffffffffffffe80) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 4.692642514s ago: executing program 5 (id=3016): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x80242, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000280)={0x40, 0xa, 0x2e, "c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94e294b4b18ff7b023cc83b30b268c3b5f50b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000340)={0x0, 0xb45d, 0x0, 0x0, 0x4}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x143102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000600)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 3.105511743s ago: executing program 5 (id=3018): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c01000013000101000000000000000006000000000000000000000000000000640101020002000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000003000000000084000500ffffffff000000000000000000000000000004d22b0000000a00000000000000000000000000000000000000000000000301010005000000020000000100008000000000000000000000ffff00000000000004d532"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.022233855s ago: executing program 0 (id=3019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.962446647s ago: executing program 2 (id=3020): r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xd, @vbi={0x0, 0x44de, 0x0, 0x52424752, [0xffff795f, 0x9], [0xfffffff8, 0x5e92ce8f], 0x2}}) 2.918266508s ago: executing program 4 (id=3021): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000e80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0xa880, 0x97) getdents64(r0, &(0x7f0000001440)=""/163, 0xba974ed140df4995) 2.80756052s ago: executing program 2 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.656239715s ago: executing program 0 (id=3023): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0xff53, &(0x7f0000000080)=[{&(0x7f00000000c0)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x1, 0x10}, &(0x7f00000003c0)=0xc) 2.655915544s ago: executing program 5 (id=3024): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xfffffffffffffe80) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 2.074415409s ago: executing program 0 (id=3025): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2b, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00>'], 0x28}, 0x0) 1.764556526s ago: executing program 2 (id=3026): preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x1, 0x2, 0x6) 1.717728667s ago: executing program 4 (id=3027): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000640)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r2 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000001c0)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000200)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='0', 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, 0x0, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000500)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x235b, 0x1}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000840)='sysfs\x00', 0x6) syz_clone3(&(0x7f0000000b80)={0x84000000, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0x33}, &(0x7f0000000940)=""/248, 0xf8, &(0x7f0000000a40)=""/222, &(0x7f0000000b40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r4}}, 0x58) setpriority(0x1, r5, 0x8) 1.652793189s ago: executing program 5 (id=3028): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x80242, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000280)={0x40, 0xa, 0x2e, "c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94e294b4b18ff7b023cc83b30b268c3b5f50b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000340)={0x0, 0xb45d, 0x0, 0x0, 0x4}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x143102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000600)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 1.63768246s ago: executing program 0 (id=3029): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r1, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1.544629692s ago: executing program 2 (id=3030): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f00000005c0)="0400000000000000000000009001000038010000000010000000000000000000000000000000000000000000000000006d7061746830") 1.029159965s ago: executing program 0 (id=3031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 596.191825ms ago: executing program 2 (id=3032): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000aa9b00000a00bd"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 164.098166ms ago: executing program 5 (id=3033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 79.599858ms ago: executing program 2 (id=3034): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000002740)) syz_mount_image$ext4(&(0x7f0000002900)='ext4\x00', &(0x7f0000002940)='./file0\x00', 0x200700, &(0x7f0000002980)={[{@bsdgroups}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x56}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f0000002a40)="$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") sched_setscheduler(0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 0 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000640), 0x8}, 0x94) kernel console output (not intermixed with test programs): [ 1173.960711][ T176] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1174.070909][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.121767][T14731] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1174.860208][ T176] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1174.889536][ T176] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1174.909641][ T176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.029915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.113562][T10744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.158115][T14736] zram: Cannot change disksize for initialized device [ 1176.021364][ T176] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1176.149950][T10744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.200997][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.512421][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.745753][ T176] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1178.231418][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.467516][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.029400][ T176] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1179.038413][ T176] cxacru: probe of 3-1:1.0 failed with error -71 [ 1179.049719][ T176] usb 3-1: USB disconnect, device number 40 [ 1179.312395][T14765] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1180.046222][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.485245][T14774] loop5: detected capacity change from 0 to 512 [ 1180.530727][T14774] EXT4-fs: Ignoring removed nobh option [ 1180.614712][T14774] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1180.686717][T14774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1180.759880][T14774] EXT4-fs (loop5): Remounting filesystem read-only [ 1180.803696][T14774] EXT4-fs (loop5): 1 truncate cleaned up [ 1180.826735][T14774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.110570][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.324664][ T8302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.368085][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.511268][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.941211][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.951879][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.966746][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.150104][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.921867][ T9496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1182.943213][ T9496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1182.957115][ T9496] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1182.992261][ T9496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1183.011970][ T9496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1183.019596][ T9496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1183.979874][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.085452][T14780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.142954][T14780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.181139][T14808] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1184.981238][T14780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.007756][T14780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.030140][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.088243][T14814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.097509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.110413][T13708] Bluetooth: hci2: command tx timeout [ 1185.110622][T14814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.125985][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.160675][T14816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.169170][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.184667][T14780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.209421][T14780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.324744][T14780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.342035][T14780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.909600][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.070589][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.456218][T14796] chnl_net:caif_netlink_parms(): no params data found [ 1186.498941][T14780] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.516711][T14780] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.189581][T13708] Bluetooth: hci2: command tx timeout [ 1187.468857][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2292'. [ 1187.497866][T14844] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1188.506530][T14796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.534422][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.559859][T14796] bridge_slave_0: entered allmulticast mode [ 1188.584362][T14796] bridge_slave_0: entered promiscuous mode [ 1188.611016][T14796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.618326][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.631532][T14796] bridge_slave_1: entered allmulticast mode [ 1188.639055][T14796] bridge_slave_1: entered promiscuous mode [ 1189.328725][T13708] Bluetooth: hci2: command tx timeout [ 1189.363095][ T5782] net_ratelimit: 5 callbacks suppressed [ 1189.363111][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.537934][T14796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.742358][T14796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.861923][T14780] tipc: Left network mode [ 1190.400681][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.805330][T13708] Bluetooth: hci2: command tx timeout [ 1191.822878][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.833996][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.842192][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.976100][T14796] team0: Port device team_slave_0 added [ 1192.029952][T14888] zram: Cannot change disksize for initialized device [ 1192.637167][T14796] team0: Port device team_slave_1 added [ 1192.910237][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.110723][T14796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.134764][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.199715][T14796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.221681][T14796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.228890][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.277337][T14796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.508864][T14796] hsr_slave_0: entered promiscuous mode [ 1193.516243][T14796] hsr_slave_1: entered promiscuous mode [ 1193.990426][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.774934][T13708] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 1194.815376][T14916] loop5: detected capacity change from 0 to 512 [ 1194.838852][T14916] EXT4-fs: Ignoring removed nobh option [ 1194.867547][T14916] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1194.996368][T14780] hsr_slave_0: left promiscuous mode [ 1195.002544][T14780] hsr_slave_1: left promiscuous mode [ 1195.030096][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.046028][T14780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.047347][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.054883][T14916] EXT4-fs (loop5): 1 truncate cleaned up [ 1195.062309][T14780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.075110][T14916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.097101][T14780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.106282][T14780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.115960][T14780] bridge_slave_1: left allmulticast mode [ 1195.121909][T14780] bridge_slave_1: left promiscuous mode [ 1195.127740][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.137934][T14780] bridge_slave_0: left allmulticast mode [ 1195.143678][T14780] bridge_slave_0: left promiscuous mode [ 1195.149515][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.174844][T14780] veth1_macvtap: left promiscuous mode [ 1195.181265][T14780] veth0_macvtap: left promiscuous mode [ 1195.186876][T14780] veth1_vlan: left promiscuous mode [ 1195.193464][T14780] veth0_vlan: left promiscuous mode [ 1195.415279][T14780] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1195.681427][ T8302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.886523][T14927] zram: Cannot change disksize for initialized device [ 1196.003820][T14893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1196.222772][T10744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.072324][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.231821][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.533295][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.549649][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.110872][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.192533][ T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.260573][T14780] team0 (unregistering): Port device team_slave_1 removed [ 1201.334108][T14780] team0 (unregistering): Port device team_slave_0 removed [ 1201.394707][T14780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.448920][T14780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.220646][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.121352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.269978][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.374147][T14780] bond0 (unregistering): Released all slaves [ 1203.514659][T14938] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1203.688341][T14796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1203.728553][T14796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1203.767191][T14796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1203.788963][T14796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1203.835725][T14978] zram: Cannot change disksize for initialized device [ 1204.066436][T14796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.152062][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.211923][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.214125][T14780] IPVS: stop unused estimator thread 0... [ 1204.244668][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.251912][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.273433][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.280669][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.320115][T14369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.333396][T14796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.345456][T14796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.598151][T15002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.627695][T15002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.673050][T14996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1204.789653][T13708] Bluetooth: hci2: command 0x0405 tx timeout [ 1204.835799][T14796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.878910][T15009] loop5: detected capacity change from 0 to 512 [ 1204.918795][T15009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1204.977231][T15009] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1205.027290][T15009] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1205.044607][T14796] veth0_vlan: entered promiscuous mode [ 1205.075514][T14796] veth1_vlan: entered promiscuous mode [ 1205.088244][T15009] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1205.190169][T15009] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1205.216643][T14796] veth0_macvtap: entered promiscuous mode [ 1205.324180][T15009] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2330: Failed to acquire dquot type 1 [ 1205.794724][T15009] EXT4-fs (loop5): Remounting filesystem read-only [ 1205.821779][T14796] veth1_macvtap: entered promiscuous mode [ 1205.844558][T15009] EXT4-fs (loop5): 1 truncate cleaned up [ 1205.862577][ T42] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1205.914527][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.930446][ T42] Quota error (device loop5): write_blk: dquota write failed [ 1205.932065][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.937859][ T42] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 1205.951649][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.999240][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.022310][ T42] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1206.029387][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.039498][ T42] Quota error (device loop5): write_blk: dquota write failed [ 1206.051205][ T42] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 1206.066038][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.067370][ T42] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 1206.104303][T15033] zram: Cannot change disksize for initialized device [ 1206.105114][T14796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.139497][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.159402][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.170082][ T42] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1206.183778][T15009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1206.189932][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.207943][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.220330][T14796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.241409][T14796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.265307][T14796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.458281][T14796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.497977][T14796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.933387][T14796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.986179][T14796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.078522][T15043] netlink: 'syz.5.2330': attribute type 13 has an invalid length. [ 1208.574060][ T8302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.728575][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.759827][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.840564][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.891179][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.179580][T14369] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1211.584289][T14369] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.595006][T14369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1211.607564][T14369] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1211.622326][T14369] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1211.634573][T14369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.628131][T14369] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1212.644651][T14369] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1212.653459][T14369] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1212.664358][T14369] cxacru: probe of 3-1:1.0 failed with error -71 [ 1212.681061][T14369] usb 3-1: USB disconnect, device number 41 [ 1213.083443][T15101] zram: Cannot change disksize for initialized device [ 1213.093871][T15072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.848831][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2353'. [ 1218.067810][T14369] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1218.276552][T14369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.307536][T14369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1218.338091][T14369] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1218.374293][T14369] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1218.389608][T14369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.675036][T15154] zram: Cannot change disksize for initialized device [ 1219.581988][T14369] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 1219.589225][T14369] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1219.635537][T14369] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1219.683100][T14369] cxacru: probe of 1-1:1.0 failed with error -71 [ 1219.739943][T14369] usb 1-1: USB disconnect, device number 45 [ 1222.925967][T15189] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1223.193811][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2365'. [ 1224.901770][T15193] tipc: Enabling of bearer rejected, failed to enable media [ 1231.349588][T14369] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1231.574079][T14369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.610446][T14369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1231.787497][T14369] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1231.849606][T14369] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1231.859027][T14369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.723037][T15256] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1232.915576][T14369] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 1232.927933][T14369] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1232.935906][T14369] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1232.944897][T14369] cxacru: probe of 1-1:1.0 failed with error -71 [ 1232.960584][T14369] usb 1-1: USB disconnect, device number 46 [ 1233.646864][T15279] gadgetfs: bound to dummy_udc driver [ 1233.929972][T14369] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1234.021529][ C1] gadgetfs: connected [ 1234.037296][T14369] gadgetfs: disconnected [ 1234.280109][ C1] gadgetfs: connected [ 1234.288223][T14369] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1234.326983][T15276] gadgetfs: suspended from state 3 [ 1234.332707][T15276] gadgetfs: disconnected [ 1235.703178][T14369] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1235.730600][T14369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.764400][T14369] usb 1-1: can't set config #1, error -71 [ 1235.800983][T14369] usb 1-1: USB disconnect, device number 47 [ 1236.506216][T15311] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1237.480676][ T5837] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1238.882186][T15317] gadgetfs: bound to dummy_udc driver [ 1238.907659][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.958607][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.074130][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1239.111828][ T5837] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1239.151677][ T5837] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1239.181437][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.826702][T15327] tipc: Enabling of bearer rejected, failed to enable media [ 1240.010507][ T5837] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1240.016746][ T5837] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1240.058393][ T5837] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1240.118279][ T5837] cxacru: probe of 5-1:1.0 failed with error -71 [ 1240.182750][ T5837] usb 5-1: USB disconnect, device number 25 [ 1241.873474][T15357] gadgetfs: bound to dummy_udc driver [ 1246.019481][ T7277] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1246.591712][ T7277] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.602043][ T7277] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1246.613291][ T7277] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1246.627334][ T7277] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1246.636828][ T7277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.655945][T15383] tipc: Enabling of bearer rejected, failed to enable media [ 1246.687932][T15383] syzkaller0: entered promiscuous mode [ 1246.713287][T15383] syzkaller0: entered allmulticast mode [ 1247.657025][T14369] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1247.726068][ T7277] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 1247.757350][ T7277] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1247.817832][ T7277] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1247.897580][ T7277] cxacru: probe of 6-1:1.0 failed with error -71 [ 1247.931933][T14369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.011059][T14369] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1248.062475][ T7277] usb 6-1: USB disconnect, device number 12 [ 1248.187343][T14369] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1248.384501][T14369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.426871][T14369] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1248.581821][T15409] zram: Cannot change disksize for initialized device [ 1250.627979][ T5815] usb 1-1: USB disconnect, device number 49 [ 1254.997212][T15448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1255.569666][ T5815] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1256.941909][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.955385][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1256.967322][ T5815] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1256.979491][ T7277] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1256.980748][ T5815] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1256.997985][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.541357][ T5815] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 1258.582954][T15469] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1258.620139][ T5815] usb 1-1: USB disconnect, device number 50 [ 1258.634090][ T7277] usb 3-1: device descriptor read/all, error -71 [ 1258.649440][T15469] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1265.849550][ T176] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1267.161119][ T176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.179527][ T176] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1267.219465][ T176] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1267.283811][ T176] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1267.859757][ T176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.578273][ T176] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1268.601446][ T176] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1268.637709][ T176] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1268.670387][ T176] cxacru: probe of 3-1:1.0 failed with error -71 [ 1268.713708][ T176] usb 3-1: USB disconnect, device number 44 [ 1268.917238][ T9496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.927964][ T9496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.937817][ T9496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.955775][ T9496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.971916][ T9496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1268.989271][ T9496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1269.085406][ T2117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.089703][ T5782] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1269.238103][ T2117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.303204][ T5782] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.329560][ T5782] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1269.344916][ T2117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.356938][ T5782] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1269.382464][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.669514][ T2117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.573471][ T5782] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1272.207961][T13708] Bluetooth: hci0: command tx timeout [ 1272.369771][ T176] usb 5-1: USB disconnect, device number 26 [ 1272.545753][T15540] chnl_net:caif_netlink_parms(): no params data found [ 1272.720641][ T2117] tipc: Left network mode [ 1273.075771][T15590] syzkaller0: left promiscuous mode [ 1273.307425][T15590] syzkaller0: left allmulticast mode [ 1273.919721][ T176] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1274.013005][T15540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.037265][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.054877][T15540] bridge_slave_0: entered allmulticast mode [ 1274.086437][T15540] bridge_slave_0: entered promiscuous mode [ 1274.121726][ T176] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.148347][ T176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1274.199713][ T176] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1274.234066][T13708] Bluetooth: hci0: command tx timeout [ 1274.262861][ T176] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1274.314844][ T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.625717][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.679100][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.766011][T15540] bridge_slave_1: entered allmulticast mode [ 1274.885937][T15540] bridge_slave_1: entered promiscuous mode [ 1276.120299][ T176] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1276.145839][T15540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.156684][ T176] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1276.163088][T15540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.190900][ T176] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1277.467338][T13708] Bluetooth: hci0: command tx timeout [ 1277.478303][ T176] cxacru: probe of 5-1:1.0 failed with error -71 [ 1277.493491][ T176] usb 5-1: USB disconnect, device number 27 [ 1277.645728][T15540] team0: Port device team_slave_0 added [ 1277.677688][T15540] team0: Port device team_slave_1 added [ 1277.997351][T15540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.046505][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.615011][T15540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.844778][T15540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.898320][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.024198][T15540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.509743][T13708] Bluetooth: hci0: command tx timeout [ 1279.990724][ T2117] hsr_slave_0: left promiscuous mode [ 1280.006497][ T2117] hsr_slave_1: left promiscuous mode [ 1280.012857][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.029436][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.050357][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.057811][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.071885][ T2117] bridge_slave_1: left allmulticast mode [ 1280.077590][ T2117] bridge_slave_1: left promiscuous mode [ 1280.086609][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.096459][ T2117] bridge_slave_0: left allmulticast mode [ 1280.108164][ T2117] bridge_slave_0: left promiscuous mode [ 1280.114301][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.141390][ T2117] veth1_macvtap: left promiscuous mode [ 1280.146990][ T2117] veth0_macvtap: left promiscuous mode [ 1280.152943][ T2117] veth1_vlan: left promiscuous mode [ 1280.158257][ T2117] veth0_vlan: left promiscuous mode [ 1280.319571][ T7277] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1280.357969][ T2117] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1280.537348][ T7277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.547898][ T7277] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1280.560977][ T7277] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1280.570161][ T7277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.592695][ T7277] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1281.006141][ T2117] team0 (unregistering): Port device team_slave_1 removed [ 1281.062604][ T2117] team0 (unregistering): Port device team_slave_0 removed [ 1281.118594][ T2117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.175592][ T2117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.637323][ T2117] bond0 (unregistering): Released all slaves [ 1281.716931][T15540] hsr_slave_0: entered promiscuous mode [ 1281.727078][T15540] hsr_slave_1: entered promiscuous mode [ 1281.734596][T15540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.745272][T15540] Cannot create hsr debugfs directory [ 1281.811757][T15665] netlink: 'syz.5.2458': attribute type 1 has an invalid length. [ 1281.825681][T15665] netlink: 64543 bytes leftover after parsing attributes in process `syz.5.2458'. [ 1283.330328][T10744] usb 3-1: USB disconnect, device number 45 [ 1285.666498][T15540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1285.698711][T15540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1285.886097][T15707] gadgetfs: bound to dummy_udc driver [ 1288.174403][T15540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1288.358597][T15540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1289.464017][T15540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.791016][ T9496] Bluetooth: hci0: command tx timeout [ 1290.873745][T15540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.903830][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.911061][ T2117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.940707][ T2117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.947807][ T2117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.790381][ T7277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1291.934749][T15540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1292.091548][ T7277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.114514][ T7277] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1292.163198][ T7277] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1292.182588][ T7277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.236461][ T7277] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1292.456634][T15540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.590753][T15540] veth0_vlan: entered promiscuous mode [ 1292.627367][T15540] veth1_vlan: entered promiscuous mode [ 1292.740509][T15540] veth0_macvtap: entered promiscuous mode [ 1292.780842][T15540] veth1_macvtap: entered promiscuous mode [ 1292.861043][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.904976][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.943228][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.975150][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.999825][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.022882][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.041121][T15540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.077290][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.107331][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.137599][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.156354][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.179584][T15540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.199747][T15540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.229930][T15540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.255794][T15540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.280703][T15540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.199848][T10744] usb 5-1: USB disconnect, device number 28 [ 1294.214829][T15540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.251835][T15540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.514428][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 1294.563385][T15772] gadgetfs: bound to dummy_udc driver [ 1295.454342][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.486042][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.586729][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.609705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.229521][ T27] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1299.201596][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.227378][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1299.279458][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1299.298928][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.346831][ T27] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1299.835915][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2486'. [ 1299.862710][T15837] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1300.396850][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.006778][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1301.985309][ T5837] usb 3-1: USB disconnect, device number 46 [ 1303.146311][T15873] gadgetfs: bound to dummy_udc driver [ 1305.124966][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1305.243527][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 1305.302601][T15892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1305.932299][T15889] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1306.203360][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2498'. [ 1307.909726][T13708] Bluetooth: hci2: command 0x0405 tx timeout [ 1308.090709][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1308.122803][T11622] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1308.151405][T15928] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1309.182939][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2508'. [ 1309.200766][T15931] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1309.333809][T11622] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.425374][T11622] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1309.576651][T11622] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1309.965394][T11622] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1310.028859][T11622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.069739][T11622] usb 5-1: can't set config #1, error -71 [ 1311.112651][T11622] usb 5-1: USB disconnect, device number 29 [ 1313.054448][T15952] syzkaller0: entered promiscuous mode [ 1313.069774][T15952] syzkaller0: entered allmulticast mode [ 1313.144678][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2517'. [ 1313.165693][T15955] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1316.278351][T15963] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1319.101235][ T7277] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1319.448896][T15980] Can't find ip_set type hash:net, [ 1319.586715][ T7277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.638294][ T7277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1319.700567][ T7277] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1319.769708][ T7277] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1320.115517][ T7277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.208230][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2526'. [ 1320.244031][T15987] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1320.896828][T15469] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1321.486770][ T7277] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1321.506237][ T7277] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1321.544357][ T7277] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1321.577196][ T7277] cxacru: probe of 3-1:1.0 failed with error -71 [ 1321.596071][ T7277] usb 3-1: USB disconnect, device number 47 [ 1324.177726][T16015] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1326.753746][T16024] Can't find ip_set type hash:net, [ 1329.050719][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1329.085197][T16029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1329.172909][T16031] FAULT_INJECTION: forcing a failure. [ 1329.172909][T16031] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.208409][T16031] CPU: 1 PID: 16031 Comm: syz.4.2536 Not tainted syzkaller #0 [ 1329.215939][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1329.226034][T16031] Call Trace: [ 1329.229331][T16031] [ 1329.232278][T16031] dump_stack_lvl+0x18c/0x250 [ 1329.236990][T16031] ? show_regs_print_info+0x20/0x20 [ 1329.242214][T16031] ? load_image+0x420/0x420 [ 1329.246751][T16031] ? __lock_acquire+0x7eb0/0x7eb0 [ 1329.251812][T16031] should_fail_ex+0x394/0x4c0 [ 1329.256531][T16031] should_failslab+0x9/0x20 [ 1329.261069][T16031] slab_pre_alloc_hook+0x59/0x300 [ 1329.266126][T16031] kmem_cache_alloc+0x5a/0x2c0 [ 1329.270917][T16031] ? create_new_namespaces+0x34/0x700 [ 1329.276330][T16031] create_new_namespaces+0x34/0x700 [ 1329.281573][T16031] __se_sys_setns+0x2f3/0x1740 [ 1329.286369][T16031] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1329.292578][T16031] ? __x64_sys_setns+0x60/0x60 [ 1329.297392][T16031] ? lockdep_hardirqs_on+0x98/0x150 [ 1329.302630][T16031] do_syscall_64+0x55/0xb0 [ 1329.307069][T16031] ? clear_bhb_loop+0x40/0x90 [ 1329.311773][T16031] ? clear_bhb_loop+0x40/0x90 [ 1329.316489][T16031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1329.322437][T16031] RIP: 0033:0x7f7cb179f4d7 [ 1329.326872][T16031] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.346511][T16031] RSP: 002b:00007f7cb25f0fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1329.354974][T16031] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7cb179f4d7 [ 1329.363078][T16031] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 1329.371078][T16031] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1329.379081][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7cb25f16a8 [ 1329.387084][T16031] R13: 000000000000000e R14: 00007f7cb1a25fa0 R15: 00007ffe2d2783d8 [ 1329.395104][T16031] [ 1329.756888][T16051] loop5: detected capacity change from 0 to 2048 [ 1330.112060][ T7277] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1330.305997][ T7277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.473603][ T7277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1330.701879][ T7277] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1330.715684][ T7277] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1330.725112][ T7277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.676683][T16065] Can't find ip_set type hash:net, [ 1332.033399][T16067] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1332.329768][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2546'. [ 1332.359716][ T7277] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1332.366130][ T7277] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1332.389492][ T7277] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1332.411054][ T7277] cxacru: probe of 5-1:1.0 failed with error -71 [ 1332.433810][ T7277] usb 5-1: USB disconnect, device number 30 [ 1332.437623][T16076] FAULT_INJECTION: forcing a failure. [ 1332.437623][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.508080][T16076] CPU: 0 PID: 16076 Comm: syz.2.2547 Not tainted syzkaller #0 [ 1332.515620][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1332.525707][T16076] Call Trace: [ 1332.529005][T16076] [ 1332.531959][T16076] dump_stack_lvl+0x18c/0x250 [ 1332.536672][T16076] ? show_regs_print_info+0x20/0x20 [ 1332.541902][T16076] ? load_image+0x420/0x420 [ 1332.546453][T16076] ? __lock_acquire+0x7eb0/0x7eb0 [ 1332.551524][T16076] should_fail_ex+0x394/0x4c0 [ 1332.556256][T16076] should_failslab+0x9/0x20 [ 1332.560798][T16076] slab_pre_alloc_hook+0x59/0x300 [ 1332.565855][T16076] kmem_cache_alloc+0x5a/0x2c0 [ 1332.570661][T16076] ? create_new_namespaces+0x34/0x700 [ 1332.576073][T16076] create_new_namespaces+0x34/0x700 [ 1332.581329][T16076] __se_sys_setns+0x2f3/0x1740 [ 1332.586130][T16076] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1332.592421][T16076] ? __x64_sys_setns+0x60/0x60 [ 1332.597221][T16076] ? lockdep_hardirqs_on+0x98/0x150 [ 1332.602459][T16076] do_syscall_64+0x55/0xb0 [ 1332.606906][T16076] ? clear_bhb_loop+0x40/0x90 [ 1332.611613][T16076] ? clear_bhb_loop+0x40/0x90 [ 1332.616320][T16076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.622248][T16076] RIP: 0033:0x7f4a5a39f4d7 [ 1332.626689][T16076] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.646333][T16076] RSP: 002b:00007f4a5b19afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1332.654789][T16076] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4a5a39f4d7 [ 1332.662808][T16076] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 1332.670823][T16076] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1332.678840][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a5b19b6a8 [ 1332.686849][T16076] R13: 000000000000000e R14: 00007f4a5a625fa0 R15: 00007fff66f92b48 [ 1332.694964][T16076] [ 1332.899440][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2545'. [ 1332.932388][T16084] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1334.216895][T16095] gadgetfs: bound to dummy_udc driver [ 1334.554158][ T7277] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1334.680441][T16090] gadgetfs: suspended from state 2 [ 1336.881537][T16112] Can't find ip_set type hash:net, [ 1337.234586][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2557'. [ 1337.602531][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'. [ 1337.625123][T16125] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1338.828207][T16136] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1339.661431][T16140] FAULT_INJECTION: forcing a failure. [ 1339.661431][T16140] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.661518][T16140] CPU: 1 PID: 16140 Comm: syz.0.2563 Not tainted syzkaller #0 [ 1339.661540][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1339.661553][T16140] Call Trace: [ 1339.661560][T16140] [ 1339.661570][T16140] dump_stack_lvl+0x18c/0x250 [ 1339.661601][T16140] ? show_regs_print_info+0x20/0x20 [ 1339.661623][T16140] ? load_image+0x420/0x420 [ 1339.661656][T16140] ? __might_sleep+0xe0/0xe0 [ 1339.661683][T16140] ? __lock_acquire+0x7eb0/0x7eb0 [ 1339.661713][T16140] should_fail_ex+0x394/0x4c0 [ 1339.661749][T16140] should_failslab+0x9/0x20 [ 1339.661777][T16140] slab_pre_alloc_hook+0x59/0x300 [ 1339.661804][T16140] kmem_cache_alloc+0x5a/0x2c0 [ 1339.661832][T16140] ? __kernfs_new_node+0xe5/0x7f0 [ 1339.661913][T16140] __kernfs_new_node+0xe5/0x7f0 [ 1339.661950][T16140] ? kernfs_new_node+0x260/0x260 [ 1339.662002][T16140] kernfs_new_node+0x14c/0x260 [ 1339.662037][T16140] __kernfs_create_file+0x4b/0x2e0 [ 1339.662062][T16140] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1339.662093][T16140] sysfs_create_file_ns+0x12c/0x1b0 [ 1339.662119][T16140] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 1339.662141][T16140] ? device_pm_add+0x67/0x320 [ 1339.662169][T16140] ? device_create_file+0xef/0x1b0 [ 1339.662205][T16140] device_add+0x650/0xc40 [ 1339.662236][T16140] device_create+0x26a/0x300 [ 1339.662267][T16140] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1339.662298][T16140] ? _raw_spin_unlock+0x40/0x40 [ 1339.662326][T16140] ? root_device_unregister+0x100/0x100 [ 1339.662351][T16140] ? update_attr+0x550/0x730 [ 1339.662410][T16140] ? is_console_locked+0x9/0x20 [ 1339.662434][T16140] ? csi_J+0xa16/0xea0 [ 1339.662467][T16140] vcs_make_sysfs+0x32/0x80 [ 1339.662489][T16140] vc_allocate+0x5a7/0x680 [ 1339.662519][T16140] ? vc_cons_allocated+0x70/0x70 [ 1339.662556][T16140] con_install+0xa0/0x720 [ 1339.662584][T16140] ? mutex_lock_nested+0x20/0x20 [ 1339.662614][T16140] ? show_tty_active+0x30/0x30 [ 1339.662653][T16140] tty_init_dev+0xd3/0x4c0 [ 1339.662685][T16140] tty_open+0x7dd/0xcc0 [ 1339.662719][T16140] ? __lock_acquire+0x7eb0/0x7eb0 [ 1339.662748][T16140] ? tty_compat_ioctl+0x8b0/0x8b0 [ 1339.662780][T16140] ? do_raw_spin_unlock+0x121/0x230 [ 1339.662813][T16140] chrdev_open+0x58c/0x600 [ 1339.662841][T16140] ? cd_forget+0x160/0x160 [ 1339.662870][T16140] ? fsnotify_perm+0x3ed/0x5e0 [ 1339.662928][T16140] do_dentry_open+0x880/0x14b0 [ 1339.662959][T16140] ? cd_forget+0x160/0x160 [ 1339.662990][T16140] path_openat+0x284f/0x3270 [ 1339.663038][T16140] ? do_sys_openat2+0xda/0x1d0 [ 1339.663062][T16140] ? __x64_sys_openat+0x139/0x160 [ 1339.663090][T16140] ? verify_lock_unused+0x140/0x140 [ 1339.663115][T16140] ? do_filp_open+0x430/0x430 [ 1339.663159][T16140] do_filp_open+0x1f2/0x430 [ 1339.663188][T16140] ? vfs_tmpfile+0x620/0x620 [ 1339.663238][T16140] ? _raw_spin_unlock+0x28/0x40 [ 1339.663271][T16140] ? alloc_fd+0x590/0x640 [ 1339.663319][T16140] do_sys_openat2+0x134/0x1d0 [ 1339.663348][T16140] ? do_sys_open+0xe0/0xe0 [ 1339.663384][T16140] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1339.663417][T16140] ? lock_chain_count+0x20/0x20 [ 1339.663447][T16140] __x64_sys_openat+0x139/0x160 [ 1339.663480][T16140] do_syscall_64+0x55/0xb0 [ 1339.663499][T16140] ? clear_bhb_loop+0x40/0x90 [ 1339.663519][T16140] ? clear_bhb_loop+0x40/0x90 [ 1339.663542][T16140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1339.663571][T16140] RIP: 0033:0x7f1fdcd5ea0e [ 1339.663591][T16140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1339.663609][T16140] RSP: 002b:00007f1fddc74b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1339.663633][T16140] RAX: ffffffffffffffda RBX: 00007f1fddc756c0 RCX: 00007f1fdcd5ea0e [ 1339.663650][T16140] RDX: 0000000000000002 RSI: 00007f1fddc74c00 RDI: ffffffffffffff9c [ 1339.663665][T16140] RBP: 00007f1fdce35888 R08: 0000000000000000 R09: 0000000000000000 [ 1339.663679][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.663693][T16140] R13: 00007f1fdd026038 R14: 00007f1fdd025fa0 R15: 00007fff288e6058 [ 1339.663727][T16140] [ 1341.863255][T16152] gadgetfs: bound to dummy_udc driver [ 1342.089460][ T27] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1342.101486][T16140] tty tty21: ldisc open failed (-12), clearing slot 20 [ 1342.300299][ T5837] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1342.350918][ C0] gadgetfs: connected [ 1342.417518][ T5837] gadgetfs: disconnected [ 1343.997451][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.018800][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1344.040191][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1344.064226][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1344.076686][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.111540][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 1344.388186][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2569'. [ 1345.541223][ T27] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1345.547470][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1345.570122][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1345.578542][ T27] cxacru: probe of 3-1:1.0 failed with error -71 [ 1345.598825][ T27] usb 3-1: USB disconnect, device number 48 [ 1345.920565][T16171] fuse: Bad value for 'group_id' [ 1346.113279][T16169] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1348.660665][T16183] gadgetfs: bound to dummy_udc driver [ 1348.949635][ T27] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1349.035134][ C1] gadgetfs: connected [ 1349.055076][ T27] gadgetfs: disconnected [ 1349.320415][ C1] gadgetfs: connected [ 1349.349812][ T27] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1349.363712][T16181] gadgetfs: suspended from state 3 [ 1349.368948][T16181] gadgetfs: disconnected [ 1349.409909][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1349.419009][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.489525][ T27] usb 1-1: can't set config #1, error -71 [ 1349.525627][ T27] usb 1-1: USB disconnect, device number 53 [ 1349.841923][T16192] net_ratelimit: 3 callbacks suppressed [ 1349.841940][T16192] ip_tables: iptables: counters copy to user failed while replacing table [ 1351.004243][T16206] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1351.189459][ T5837] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1353.246414][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.257070][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1353.296215][ T5837] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1353.369809][ T5837] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1353.408180][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.605604][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1354.451129][ T5837] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 1354.481486][T16223] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1354.485505][ T5837] usb 1-1: USB disconnect, device number 54 [ 1354.516875][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1354.548105][T16223] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1355.645040][T16238] ip_tables: iptables: counters copy to user failed while replacing table [ 1358.586129][T16260] zram: Cannot change disksize for initialized device [ 1358.789433][T13708] Bluetooth: hci0: command tx timeout [ 1360.437273][T16265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2600'. [ 1361.298128][T13708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1361.309132][T13708] CPU: 1 PID: 13708 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1361.316807][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1361.326886][T13708] Workqueue: hci4 hci_rx_work [ 1361.331746][T13708] Call Trace: [ 1361.335044][T13708] [ 1361.337991][T13708] dump_stack_lvl+0x18c/0x250 [ 1361.342697][T13708] ? show_regs_print_info+0x20/0x20 [ 1361.347917][T13708] ? load_image+0x420/0x420 [ 1361.352549][T13708] sysfs_create_dir_ns+0x26e/0x2a0 [ 1361.357682][T13708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1361.362737][T13708] ? sysfs_warn_dup+0xa0/0xa0 [ 1361.367441][T13708] ? do_raw_spin_unlock+0x121/0x230 [ 1361.372671][T13708] kobject_add_internal+0x617/0xc90 [ 1361.377998][T13708] kobject_add+0x164/0x240 [ 1361.382442][T13708] ? preempt_schedule_thunk+0x1a/0x30 [ 1361.387861][T13708] ? kobject_init+0x1d0/0x1d0 [ 1361.392579][T13708] ? get_device_parent+0x366/0x390 [ 1361.397722][T13708] device_add+0x3fa/0xc40 [ 1361.402082][T13708] hci_conn_add_sysfs+0xd5/0x1e0 [ 1361.407128][T13708] le_conn_complete_evt+0xe9a/0x1480 [ 1361.412501][T13708] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1361.418779][T13708] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1361.424458][T13708] hci_le_conn_complete_evt+0x187/0x440 [ 1361.430044][T13708] ? hci_remote_host_features_evt+0x150/0x150 [ 1361.436135][T13708] hci_event_packet+0x7b4/0x1280 [ 1361.441098][T13708] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1361.446754][T13708] ? bis_list+0x290/0x290 [ 1361.451109][T13708] ? kcov_remote_start+0x1b7/0x810 [ 1361.456248][T13708] ? hci_send_to_monitor+0xd7/0x4f0 [ 1361.461478][T13708] hci_rx_work+0x43a/0xd60 [ 1361.465919][T13708] ? process_scheduled_works+0x975/0x1600 [ 1361.471648][T13708] process_scheduled_works+0xa60/0x1600 [ 1361.477238][T13708] ? worker_attach_to_pool+0x370/0x370 [ 1361.482709][T13708] ? assign_work+0x3cc/0x5d0 [ 1361.487307][T13708] worker_thread+0xa5e/0xfe0 [ 1361.491911][T13708] ? _raw_spin_unlock+0x40/0x40 [ 1361.496769][T13708] ? __kthread_parkme+0x71/0x1c0 [ 1361.501717][T13708] kthread+0x2fa/0x390 [ 1361.505788][T13708] ? pr_cont_work+0x550/0x550 [ 1361.510564][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1361.515161][T13708] ret_from_fork+0x48/0x80 [ 1361.519589][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1361.524181][T13708] ret_from_fork_asm+0x11/0x20 [ 1361.528963][T13708] [ 1361.645746][T13708] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1361.660470][T13708] Bluetooth: hci4: failed to register connection device [ 1361.847953][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.016661][ T28] audit: type=1326 audit(1791631347.592:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1362.053883][ T28] audit: type=1326 audit(1791631347.622:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1362.108273][ T28] audit: type=1326 audit(1791631347.622:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1362.134857][ T28] audit: type=1326 audit(1791631347.622:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1362.159473][ T28] audit: type=1326 audit(1791631347.622:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1362.183919][ T28] audit: type=1326 audit(1791631347.622:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1363.060805][ T28] audit: type=1326 audit(1791631347.622:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1363.153476][ T28] audit: type=1326 audit(1791631347.622:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1363.260852][T16303] zram: Cannot change disksize for initialized device [ 1363.306309][ T28] audit: type=1326 audit(1791631347.622:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1363.381137][ T28] audit: type=1326 audit(1791631347.622:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.2.2605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a39e1d9 code=0x7ffc0000 [ 1364.432648][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 1367.853829][T16345] zram: Cannot change disksize for initialized device [ 1368.469435][T13708] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.276310][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1369.885807][T16365] Bluetooth: MGMT ver 1.22 [ 1372.805372][T16384] zram: Cannot change disksize for initialized device [ 1376.099827][T13708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1376.110013][T13708] CPU: 0 PID: 13708 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1376.117685][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1376.127770][T13708] Workqueue: hci1 hci_rx_work [ 1376.132494][T13708] Call Trace: [ 1376.135790][T13708] [ 1376.138739][T13708] dump_stack_lvl+0x18c/0x250 [ 1376.143451][T13708] ? show_regs_print_info+0x20/0x20 [ 1376.148688][T13708] ? load_image+0x420/0x420 [ 1376.153254][T13708] sysfs_create_dir_ns+0x26e/0x2a0 [ 1376.158402][T13708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1376.163460][T13708] ? sysfs_warn_dup+0xa0/0xa0 [ 1376.168169][T13708] ? do_raw_spin_unlock+0x121/0x230 [ 1376.173401][T13708] kobject_add_internal+0x617/0xc90 [ 1376.178639][T13708] kobject_add+0x164/0x240 [ 1376.183093][T13708] ? kobject_init+0x1d0/0x1d0 [ 1376.187805][T13708] ? get_device_parent+0x366/0x390 [ 1376.192962][T13708] device_add+0x3fa/0xc40 [ 1376.197335][T13708] hci_conn_add_sysfs+0xd5/0x1e0 [ 1376.202298][T13708] le_conn_complete_evt+0xe9a/0x1480 [ 1376.207625][T13708] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1376.213905][T13708] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1376.219573][T13708] ? mutex_unlock+0x10/0x10 [ 1376.224103][T13708] ? skb_pull_data+0xf0/0x1f0 [ 1376.228845][T13708] hci_le_conn_complete_evt+0x187/0x440 [ 1376.234436][T13708] ? hci_remote_host_features_evt+0x150/0x150 [ 1376.240528][T13708] hci_event_packet+0x7b4/0x1280 [ 1376.245498][T13708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1376.250549][T13708] ? lock_chain_count+0x20/0x20 [ 1376.255426][T13708] ? bis_list+0x290/0x290 [ 1376.259783][T13708] ? kcov_remote_start+0x513/0x810 [ 1376.264923][T13708] ? lockdep_hardirqs_on+0x98/0x150 [ 1376.270155][T13708] ? hci_send_to_monitor+0xd7/0x4f0 [ 1376.275379][T13708] hci_rx_work+0x43a/0xd60 [ 1376.279878][T13708] ? process_scheduled_works+0x975/0x1600 [ 1376.285631][T13708] process_scheduled_works+0xa60/0x1600 [ 1376.291237][T13708] ? worker_attach_to_pool+0x370/0x370 [ 1376.296730][T13708] ? assign_work+0x3cc/0x5d0 [ 1376.301356][T13708] worker_thread+0xa5e/0xfe0 [ 1376.305988][T13708] ? _raw_spin_unlock+0x40/0x40 [ 1376.310874][T13708] ? __kthread_parkme+0x71/0x1c0 [ 1376.315858][T13708] kthread+0x2fa/0x390 [ 1376.319946][T13708] ? pr_cont_work+0x550/0x550 [ 1376.324651][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1376.329267][T13708] ret_from_fork+0x48/0x80 [ 1376.333713][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1376.338327][T13708] ret_from_fork_asm+0x11/0x20 [ 1376.343137][T13708] [ 1376.379596][T13708] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1376.397247][T13708] Bluetooth: hci1: failed to register connection device [ 1376.748194][T16422] tipc: Started in network mode [ 1376.753287][T16422] tipc: Node identity 7ac67856a916, cluster identity 4711 [ 1376.772147][T16422] tipc: Enabled bearer , priority 0 [ 1376.781344][T16422] syzkaller0: entered promiscuous mode [ 1376.789132][T16422] syzkaller0: entered allmulticast mode [ 1376.814218][T16422] tipc: Resetting bearer [ 1376.822391][T16420] tipc: Resetting bearer [ 1376.857240][T16420] tipc: Disabling bearer [ 1378.030301][T16440] loop2: detected capacity change from 0 to 1024 [ 1378.037912][T16440] EXT4-fs: Ignoring removed oldalloc option [ 1378.121111][T16440] EXT4-fs: Ignoring removed orlov option [ 1378.312486][T16440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.776149][T16440] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.809716][T16444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1378.904439][T14796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1380.757342][T16283] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1380.776308][T16465] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1382.789797][ T9496] Bluetooth: hci1: command 0x0406 tx timeout [ 1383.775536][T16498] tipc: Enabled bearer , priority 0 [ 1383.806049][T16498] syzkaller0: entered promiscuous mode [ 1383.825895][T16498] syzkaller0: entered allmulticast mode [ 1383.870412][T16498] tipc: Resetting bearer [ 1384.056369][T16497] tipc: Resetting bearer [ 1384.521383][ T9496] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1384.574521][T16497] tipc: Disabling bearer [ 1386.049705][T16538] fuse: Bad value for 'group_id' [ 1386.877660][T16542] tipc: Enabled bearer , priority 0 [ 1386.899222][T16542] syzkaller0: entered promiscuous mode [ 1386.909069][T16542] syzkaller0: entered allmulticast mode [ 1386.954324][T16542] tipc: Resetting bearer [ 1386.962267][T16541] tipc: Resetting bearer [ 1388.008403][T16541] tipc: Disabling bearer [ 1388.274090][ T5782] tipc: Node number set to 3553654870 [ 1390.210839][T16583] fuse: Bad value for 'group_id' [ 1394.652970][ T9496] Bluetooth: hci0: command 0x0406 tx timeout [ 1395.062996][T16641] loop2: detected capacity change from 0 to 128 [ 1395.094698][ T2967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.118105][T16641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1395.170035][T16641] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.007795][ T9496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1396.029648][ T9496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1396.040102][ T9496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1396.053913][ T9496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1396.064445][ T9496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1396.068309][ T2967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.083110][ T9496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1396.197313][ T2967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.217445][T14796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1396.300086][ T2967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.430718][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1397.086726][T16650] chnl_net:caif_netlink_parms(): no params data found [ 1397.429461][ T2967] tipc: Left network mode [ 1398.161757][T13708] Bluetooth: hci3: command tx timeout [ 1398.898280][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.931796][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.939068][T16650] bridge_slave_0: entered allmulticast mode [ 1398.973325][T16650] bridge_slave_0: entered promiscuous mode [ 1399.160156][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.178302][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.206991][T16650] bridge_slave_1: entered allmulticast mode [ 1399.246521][T16703] FAULT_INJECTION: forcing a failure. [ 1399.246521][T16703] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.272027][T16650] bridge_slave_1: entered promiscuous mode [ 1399.412602][T16703] CPU: 0 PID: 16703 Comm: syz.2.2721 Not tainted syzkaller #0 [ 1399.420149][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1399.430227][T16703] Call Trace: [ 1399.433525][T16703] [ 1399.436473][T16703] dump_stack_lvl+0x18c/0x250 [ 1399.441184][T16703] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1399.446862][T16703] ? show_regs_print_info+0x20/0x20 [ 1399.452107][T16703] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1399.457787][T16703] should_fail_ex+0x394/0x4c0 [ 1399.462520][T16703] should_failslab+0x9/0x20 [ 1399.467060][T16703] slab_pre_alloc_hook+0x59/0x300 [ 1399.472107][T16703] ? lookup_one_len+0x1a1/0x2e0 [ 1399.476988][T16703] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1399.482130][T16703] ? new_inode_pseudo+0x82/0x1d0 [ 1399.487100][T16703] new_inode_pseudo+0x82/0x1d0 [ 1399.491889][T16703] new_inode+0x22/0x1d0 [ 1399.496069][T16703] ? start_creating+0x1f5/0x310 [ 1399.501000][T16703] debugfs_create_dir+0xf0/0x4b0 [ 1399.505987][T16703] blk_mq_debugfs_register_sched+0x109/0x2b0 [ 1399.512040][T16703] blk_mq_init_sched+0x3bc/0x780 [ 1399.517046][T16703] ? blk_mq_sched_try_insert_merge+0x160/0x160 [ 1399.523248][T16703] ? __kmem_cache_free+0xba/0x1f0 [ 1399.528320][T16703] ? kobject_put+0x421/0x450 [ 1399.532948][T16703] elevator_switch+0x1ee/0x5b0 [ 1399.537752][T16703] elv_iosched_store+0x3b9/0x4b0 [ 1399.542727][T16703] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1399.548210][T16703] ? elevator_disable+0x4f0/0x4f0 [ 1399.553275][T16703] queue_attr_store+0x9e/0xd0 [ 1399.557983][T16703] ? sysfs_kf_read+0x360/0x360 [ 1399.562768][T16703] kernfs_fop_write_iter+0x3a4/0x520 [ 1399.568083][T16703] vfs_write+0x474/0x9a0 [ 1399.572364][T16703] ? file_end_write+0x250/0x250 [ 1399.577252][T16703] ? __fget_files+0x3fc/0x460 [ 1399.581967][T16703] ? __fdget_pos+0x2a3/0x330 [ 1399.586579][T16703] ? ksys_write+0x74/0x260 [ 1399.591026][T16703] ksys_write+0x151/0x260 [ 1399.595388][T16703] ? __ia32_sys_read+0x90/0x90 [ 1399.600183][T16703] ? lockdep_hardirqs_on+0x98/0x150 [ 1399.605417][T16703] do_syscall_64+0x55/0xb0 [ 1399.609856][T16703] ? clear_bhb_loop+0x40/0x90 [ 1399.614552][T16703] ? clear_bhb_loop+0x40/0x90 [ 1399.619260][T16703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1399.625181][T16703] RIP: 0033:0x7f4a5a39e1d9 [ 1399.629619][T16703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.649263][T16703] RSP: 002b:00007f4a5b19b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1399.657716][T16703] RAX: ffffffffffffffda RBX: 00007f4a5a625fa0 RCX: 00007f4a5a39e1d9 [ 1399.665718][T16703] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1399.673707][T16703] RBP: 00007f4a5a435888 R08: 0000000000000000 R09: 0000000000000000 [ 1399.681681][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.689653][T16703] R13: 00007f4a5a626038 R14: 00007f4a5a625fa0 R15: 00007fff66f92b48 [ 1399.697638][T16703] [ 1399.741359][T16703] debugfs: out of free dentries, can not create directory 'sched' [ 1399.819205][T16712] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1399.870765][T16712] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1399.898269][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.936152][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.253317][T16650] team0: Port device team_slave_0 added [ 1400.275135][T16650] team0: Port device team_slave_1 added [ 1400.309520][T13708] Bluetooth: hci3: command tx timeout [ 1400.372349][T16743] tipc: Enabled bearer , priority 0 [ 1400.402383][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.409792][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.443300][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.455041][T16725] syzkaller0: entered promiscuous mode [ 1400.460877][T16725] syzkaller0: entered allmulticast mode [ 1400.516284][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.545878][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.574254][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.601346][T16725] tipc: Resetting bearer [ 1400.661092][T16720] tipc: Resetting bearer [ 1400.690251][T16720] tipc: Disabling bearer [ 1400.833028][T16650] hsr_slave_0: entered promiscuous mode [ 1401.719874][T16650] hsr_slave_1: entered promiscuous mode [ 1401.778662][T16752] gadgetfs: bound to dummy_udc driver [ 1401.818662][T16650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.849191][T16650] Cannot create hsr debugfs directory [ 1402.390307][T13708] Bluetooth: hci3: command tx timeout [ 1403.341657][ T2967] hsr_slave_0: left promiscuous mode [ 1403.480469][ T2967] hsr_slave_1: left promiscuous mode [ 1403.621156][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.739442][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.748033][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.755700][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.770262][ T2967] bridge_slave_1: left allmulticast mode [ 1403.776139][ T2967] bridge_slave_1: left promiscuous mode [ 1403.782266][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.802930][ T2967] bridge_slave_0: left allmulticast mode [ 1403.808781][ T2967] bridge_slave_0: left promiscuous mode [ 1403.815144][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.889920][ T2967] veth1_macvtap: left promiscuous mode [ 1403.895519][ T2967] veth0_macvtap: left promiscuous mode [ 1403.917180][ T2967] veth1_vlan: left promiscuous mode [ 1403.926965][ T2967] veth0_vlan: left promiscuous mode [ 1404.254289][ T2967] b (unregistering): Released all slaves [ 1404.285871][ T2967] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1404.479588][T13708] Bluetooth: hci3: command tx timeout [ 1404.852616][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 1404.921392][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 1404.970842][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.032017][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1405.455526][ T2967] bond0 (unregistering): Released all slaves [ 1405.636989][T16803] tipc: Enabled bearer , priority 0 [ 1405.662140][T16804] syzkaller0: entered promiscuous mode [ 1405.677997][T16804] syzkaller0: entered allmulticast mode [ 1405.840071][T16814] ip_tables: iptables: counters copy to user failed while replacing table [ 1407.129224][T16821] gadgetfs: bound to dummy_udc driver [ 1407.369242][ T5782] tipc: Node number set to 1132518857 [ 1407.428876][ T2967] IPVS: stop unused estimator thread 0... [ 1407.429050][T16837] tipc: Enabled bearer , priority 0 [ 1407.766936][T16837] syzkaller0: entered promiscuous mode [ 1407.804666][T16837] syzkaller0: entered allmulticast mode [ 1408.053416][T16845] tipc: Resetting bearer [ 1408.429173][T16836] tipc: Resetting bearer [ 1408.513767][T16836] tipc: Disabling bearer [ 1408.832656][T16650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1408.868956][T16650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1408.905735][T16650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1408.943159][T16650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1409.299041][T16865] fuse: Bad value for 'group_id' [ 1409.911692][T16866] gadgetfs: bound to dummy_udc driver [ 1410.115377][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.194421][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.289698][T16634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.296876][T16634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.328403][T16634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.335647][T16634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.186979][T16650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1411.235398][T16650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1411.443247][T16884] tipc: Enabled bearer , priority 0 [ 1411.459734][T16884] syzkaller0: entered promiscuous mode [ 1411.469737][T16884] syzkaller0: entered allmulticast mode [ 1411.499327][T16883] tipc: Resetting bearer [ 1411.609955][T16883] tipc: Disabling bearer [ 1411.796089][T13708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1411.806272][T13708] CPU: 0 PID: 13708 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1411.813955][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1411.824034][T13708] Workqueue: hci2 hci_rx_work [ 1411.828754][T13708] Call Trace: [ 1411.832055][T13708] [ 1411.835004][T13708] dump_stack_lvl+0x18c/0x250 [ 1411.839706][T13708] ? show_regs_print_info+0x20/0x20 [ 1411.844927][T13708] ? load_image+0x420/0x420 [ 1411.849481][T13708] sysfs_create_dir_ns+0x26e/0x2a0 [ 1411.854618][T13708] ? __lock_acquire+0x7eb0/0x7eb0 [ 1411.859668][T13708] ? sysfs_warn_dup+0xa0/0xa0 [ 1411.864381][T13708] ? do_raw_spin_unlock+0x121/0x230 [ 1411.869611][T13708] kobject_add_internal+0x617/0xc90 [ 1411.874843][T13708] kobject_add+0x164/0x240 [ 1411.879284][T13708] ? preempt_schedule_thunk+0x1a/0x30 [ 1411.884694][T13708] ? kobject_init+0x1d0/0x1d0 [ 1411.889401][T13708] ? get_device_parent+0x366/0x390 [ 1411.894581][T13708] device_add+0x3fa/0xc40 [ 1411.898946][T13708] hci_conn_add_sysfs+0xd5/0x1e0 [ 1411.903913][T13708] le_conn_complete_evt+0xe9a/0x1480 [ 1411.909240][T13708] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1411.915519][T13708] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1411.921186][T13708] ? mutex_unlock+0x10/0x10 [ 1411.925712][T13708] ? skb_pull_data+0xf0/0x1f0 [ 1411.930425][T13708] hci_le_conn_complete_evt+0x187/0x440 [ 1411.936008][T13708] ? hci_remote_host_features_evt+0x150/0x150 [ 1411.942099][T13708] hci_event_packet+0x7b4/0x1280 [ 1411.947066][T13708] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1411.952722][T13708] ? bis_list+0x290/0x290 [ 1411.957091][T13708] hci_rx_work+0x43a/0xd60 [ 1411.961548][T13708] ? process_scheduled_works+0x975/0x1600 [ 1411.967295][T13708] process_scheduled_works+0xa60/0x1600 [ 1411.972907][T13708] ? worker_attach_to_pool+0x370/0x370 [ 1411.978396][T13708] ? assign_work+0x3cc/0x5d0 [ 1411.983021][T13708] worker_thread+0xa5e/0xfe0 [ 1411.987656][T13708] ? _raw_spin_unlock+0x40/0x40 [ 1411.992530][T13708] ? __kthread_parkme+0x71/0x1c0 [ 1411.997500][T13708] kthread+0x2fa/0x390 [ 1412.001593][T13708] ? pr_cont_work+0x550/0x550 [ 1412.006295][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1412.010910][T13708] ret_from_fork+0x48/0x80 [ 1412.015358][T13708] ? kthread_blkcg+0xd0/0xd0 [ 1412.019968][T13708] ret_from_fork_asm+0x11/0x20 [ 1412.024776][T13708] [ 1412.086210][T13708] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1412.103419][T13708] Bluetooth: hci2: failed to register connection device [ 1412.387879][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.432631][T16920] overlayfs: failed to resolve './file0': -2 [ 1413.871346][T16916] gadgetfs: bound to dummy_udc driver [ 1414.716076][T16939] fuse: Bad value for 'group_id' [ 1415.358781][T16941] tipc: Enabling of bearer rejected, already enabled [ 1415.497206][T16650] veth0_vlan: entered promiscuous mode [ 1415.576844][T16650] veth1_vlan: entered promiscuous mode [ 1416.346972][T16650] veth0_macvtap: entered promiscuous mode [ 1416.391853][T16650] veth1_macvtap: entered promiscuous mode [ 1416.586520][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.628083][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.649650][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.676835][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.687355][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.698424][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.720258][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.747001][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.789630][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.799605][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.810176][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.820207][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.831542][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.853451][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.868103][T16650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.877008][T16650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.888167][T16650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.898321][T16650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.971851][T16981] tipc: Enabling of bearer rejected, already enabled [ 1418.173884][T14779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.189868][T16223] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1418.218596][T14779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.350704][T13708] Bluetooth: hci2: command 0x0405 tx timeout [ 1418.460225][T16633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.506270][T16633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.213410][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 1420.399460][T16283] Bluetooth: hci3: command 0x0405 tx timeout [ 1421.194639][T16283] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1423.275730][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.791984][T13708] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1426.689856][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2810'. [ 1427.087386][T17123] gadgetfs: bound to dummy_udc driver [ 1427.280094][T17095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1427.416220][ T7277] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1427.509413][ C1] gadgetfs: connected [ 1427.533798][ T7277] gadgetfs: disconnected [ 1427.790879][ C1] gadgetfs: connected [ 1427.818337][T17121] gadgetfs: suspended from state 3 [ 1427.823725][T17121] gadgetfs: disconnected [ 1427.885442][ T7277] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1427.910254][ T7277] usb 1-1: can't read configurations, error -71 [ 1427.968496][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 1428.932276][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 1430.843709][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1432.144547][T17176] syzkaller0: entered promiscuous mode [ 1432.150142][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'. [ 1432.160109][T17176] syzkaller0: entered allmulticast mode [ 1434.431425][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1435.458919][T17186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.787175][T13708] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1437.222813][T17250] loop2: detected capacity change from 0 to 128 [ 1439.094067][T17272] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1439.424265][T16283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1439.434764][T16283] CPU: 1 PID: 16283 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1439.442437][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1439.452514][T16283] Workqueue: hci0 hci_rx_work [ 1439.457230][T16283] Call Trace: [ 1439.460521][T16283] [ 1439.463463][T16283] dump_stack_lvl+0x18c/0x250 [ 1439.468164][T16283] ? show_regs_print_info+0x20/0x20 [ 1439.473383][T16283] ? load_image+0x420/0x420 [ 1439.477924][T16283] sysfs_create_dir_ns+0x26e/0x2a0 [ 1439.483060][T16283] ? __lock_acquire+0x7eb0/0x7eb0 [ 1439.488105][T16283] ? sysfs_warn_dup+0xa0/0xa0 [ 1439.492804][T16283] ? do_raw_spin_unlock+0x121/0x230 [ 1439.498032][T16283] kobject_add_internal+0x617/0xc90 [ 1439.503261][T16283] kobject_add+0x164/0x240 [ 1439.507703][T16283] ? preempt_schedule_thunk+0x1a/0x30 [ 1439.513103][T16283] ? kobject_init+0x1d0/0x1d0 [ 1439.517814][T16283] ? get_device_parent+0x366/0x390 [ 1439.522956][T16283] device_add+0x3fa/0xc40 [ 1439.527316][T16283] hci_conn_add_sysfs+0xd5/0x1e0 [ 1439.532286][T16283] le_conn_complete_evt+0xe9a/0x1480 [ 1439.537611][T16283] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1439.543884][T16283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1439.549539][T16283] ? lockdep_hardirqs_on+0x98/0x150 [ 1439.554766][T16283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1439.560419][T16283] ? hci_remote_host_features_evt+0x150/0x150 [ 1439.566521][T16283] hci_le_conn_complete_evt+0x187/0x440 [ 1439.572110][T16283] ? hci_remote_host_features_evt+0x150/0x150 [ 1439.578198][T16283] hci_event_packet+0x7b4/0x1280 [ 1439.583162][T16283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1439.588815][T16283] ? bis_list+0x290/0x290 [ 1439.593172][T16283] ? kcov_remote_start+0x1b7/0x810 [ 1439.598309][T16283] ? hci_send_to_monitor+0xd7/0x4f0 [ 1439.603527][T16283] hci_rx_work+0x43a/0xd60 [ 1439.607987][T16283] ? process_scheduled_works+0x975/0x1600 [ 1439.613729][T16283] process_scheduled_works+0xa60/0x1600 [ 1439.619335][T16283] ? worker_attach_to_pool+0x370/0x370 [ 1439.624820][T16283] ? assign_work+0x3cc/0x5d0 [ 1439.629439][T16283] worker_thread+0xa5e/0xfe0 [ 1439.634174][T16283] ? _raw_spin_unlock+0x40/0x40 [ 1439.639065][T16283] ? __kthread_parkme+0x71/0x1c0 [ 1439.644053][T16283] kthread+0x2fa/0x390 [ 1439.648150][T16283] ? pr_cont_work+0x550/0x550 [ 1439.652859][T16283] ? kthread_blkcg+0xd0/0xd0 [ 1439.657472][T16283] ret_from_fork+0x48/0x80 [ 1439.661913][T16283] ? kthread_blkcg+0xd0/0xd0 [ 1439.666519][T16283] ret_from_fork_asm+0x11/0x20 [ 1439.671326][T16283] [ 1439.684225][T16283] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1439.698612][T16283] Bluetooth: hci0: failed to register connection device [ 1439.885686][T17280] gadgetfs: bound to dummy_udc driver [ 1440.531189][ T7277] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1440.584790][ C1] gadgetfs: connected [ 1440.597706][ T7277] gadgetfs: disconnected [ 1442.467738][T13708] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1443.930522][T17314] gadgetfs: bound to dummy_udc driver [ 1443.931765][T16283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1445.999548][T16283] Bluetooth: hci0: command 0x0406 tx timeout [ 1447.239527][T16283] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1448.090493][T17345] gadgetfs: bound to dummy_udc driver [ 1448.100616][T13708] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1452.940844][T16283] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1453.552464][T17414] gadgetfs: bound to dummy_udc driver [ 1455.667819][T17415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1456.297486][T17451] gadgetfs: bound to dummy_udc driver [ 1456.621805][ T7277] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1456.686126][ C1] gadgetfs: connected [ 1456.698584][ T7277] gadgetfs: disconnected [ 1456.960331][ C1] gadgetfs: connected [ 1456.984794][ T7277] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1457.038512][T17448] gadgetfs: suspended from state 3 [ 1457.043882][T17448] gadgetfs: disconnected [ 1457.073325][ T7277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1457.770070][ T7277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.010910][ T7277] usb 1-1: can't set config #1, error -71 [ 1458.024857][ T7277] usb 1-1: USB disconnect, device number 59 [ 1458.037826][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2910'. [ 1459.125861][T17480] netlink: 'syz.2.2920': attribute type 2 has an invalid length. [ 1459.481013][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1459.795651][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.807135][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.819565][ T9] usb 1-1: Product: syz [ 1459.823773][ T9] usb 1-1: Manufacturer: syz [ 1459.839180][ T9] usb 1-1: SerialNumber: syz [ 1460.060523][T14942] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1460.319725][T17476] netlink: 'syz.0.2917': attribute type 21 has an invalid length. [ 1460.359807][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1460.385170][T17476] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1460.633029][T17514] fuse: Bad value for 'fd' [ 1460.856705][T16983] usb 1-1: USB disconnect, device number 60 [ 1461.123389][T14942] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1461.243221][T14942] ath9k_htc: Failed to initialize the device [ 1461.368664][T16983] usb 1-1: ath9k_htc: USB layer deinitialized [ 1467.293413][T17579] vlan0: entered promiscuous mode [ 1467.525110][T17579] team0: Port device vlan0 added [ 1468.024848][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 1470.241198][T17605] loop2: detected capacity change from 0 to 8 [ 1470.406814][T17610] loop4: detected capacity change from 0 to 512 [ 1470.455991][T17610] EXT4-fs: Ignoring removed oldalloc option [ 1470.481545][T17610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1470.529121][T17605] SQUASHFS error: Failed to read block 0x4de: -5 [ 1470.553859][T16983] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1470.591157][T17605] SQUASHFS error: Failed to read block 0x4de: -5 [ 1470.616299][T17610] EXT4-fs (loop4): 1 truncate cleaned up [ 1470.623614][T17610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.683755][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1470.683770][ T28] audit: type=1800 audit(1791631456.262:134): pid=17605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2946" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1470.700370][T17605] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1470.724311][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1470.733548][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1470.750620][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1470.756893][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1470.771883][T16650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.796108][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1470.807793][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1470.815236][T16983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.826423][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1470.843277][T16983] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1470.849440][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1470.870500][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1470.897817][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1470.900483][T16983] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1470.912470][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1470.950346][T16983] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1470.962061][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1470.968338][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1470.969404][T16983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.999409][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.007064][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.029938][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.069794][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.077348][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.086962][T13708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1471.098085][T13708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1471.108134][T13708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1471.111683][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.139705][T13708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1471.150805][T13708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1471.151654][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.166969][T13708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1471.228516][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.319746][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.356123][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.385984][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.418881][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.448676][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.458488][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.469609][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.476964][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1471.629639][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1471.775187][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1471.963770][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.036648][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.046712][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.059460][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.138482][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.167191][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.174631][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.199480][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.214869][T16983] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 1472.225526][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.233372][T16983] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1472.233394][T16983] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1472.251339][T16983] cxacru: probe of 1-1:1.0 failed with error -71 [ 1472.266404][T16983] usb 1-1: USB disconnect, device number 61 [ 1472.274993][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.284745][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.297885][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.323801][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.343009][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.352798][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.369454][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.404441][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.610694][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1472.697436][T17622] chnl_net:caif_netlink_parms(): no params data found [ 1472.747544][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1472.844108][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1472.930581][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.034210][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.051256][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.057531][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.065393][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.072579][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.078869][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.086668][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.095041][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.102420][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.115190][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.122262][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.142655][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.169534][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.196847][T13708] Bluetooth: hci1: command tx timeout [ 1473.235431][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.261800][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.268979][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.284901][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.292355][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.299213][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.313484][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.321089][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.330346][T17622] bridge_slave_0: entered allmulticast mode [ 1473.332509][T17622] bridge_slave_0: entered promiscuous mode [ 1473.339545][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.339623][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.339638][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.339688][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.339745][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.339758][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.339816][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.339877][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.339890][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.340574][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.341690][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.341884][T17622] bridge_slave_1: entered allmulticast mode [ 1473.343227][T17622] bridge_slave_1: entered promiscuous mode [ 1473.344539][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.391872][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.449601][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.473083][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.565001][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.565070][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.565141][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.565154][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.565203][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.565268][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.565280][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.565399][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.565464][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.565476][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.565521][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.670146][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.729521][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.729911][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.731867][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.731924][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1473.764202][T17605] SQUASHFS error: Failed to read block 0x0: -5 [ 1473.781697][T17605] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1473.781755][T17605] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1474.281153][T17622] team0: Port device team_slave_0 added [ 1474.322419][T17622] team0: Port device team_slave_1 added [ 1474.510089][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.517083][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.569090][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.782483][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.789845][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.826004][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.060805][T16983] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1475.270592][T13708] Bluetooth: hci1: command tx timeout [ 1475.316353][T16983] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.469797][T16983] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1475.540222][T16983] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1475.554999][T17622] hsr_slave_0: entered promiscuous mode [ 1475.579601][T16983] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1475.593463][T17622] hsr_slave_1: entered promiscuous mode [ 1475.604798][T16983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.539452][T17622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1476.547081][T17622] Cannot create hsr debugfs directory [ 1477.349621][T13708] Bluetooth: hci1: command tx timeout [ 1477.679521][T16983] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1477.691957][T16983] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1477.699852][T16983] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1477.713231][T16983] cxacru: probe of 3-1:1.0 failed with error -71 [ 1477.739960][T16983] usb 3-1: USB disconnect, device number 49 [ 1477.801174][T17622] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.902615][T17622] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.994052][T17622] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.105545][T17622] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.114431][T17710] loop0: detected capacity change from 0 to 512 [ 1478.127962][T17710] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1478.146369][T17710] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1478.156216][T17710] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1478.185438][T17710] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1478.222182][T17710] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1478.294310][T17710] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1478.337714][T17710] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1478.412390][T17710] EXT4-fs (loop0): Remounting filesystem read-only [ 1478.419121][T17710] EXT4-fs (loop0): 1 truncate cleaned up [ 1478.483038][T17710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1479.052448][T17622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1479.086871][T17622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1479.087512][T15540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.130413][T17622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1479.147213][T17622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1479.429685][T13708] Bluetooth: hci1: command tx timeout [ 1480.548658][T17622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.593551][T17622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.634420][T14779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.641670][T14779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.657481][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1480.676616][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2974'. [ 1480.721753][T14779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.728931][T14779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.413676][T13708] Bluetooth: Unexpected continuation frame (len 18) [ 1481.911215][T17622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.114757][T17622] veth0_vlan: entered promiscuous mode [ 1482.134407][T17622] veth1_vlan: entered promiscuous mode [ 1482.165671][T17622] veth0_macvtap: entered promiscuous mode [ 1482.176174][T17622] veth1_macvtap: entered promiscuous mode [ 1482.190045][T10744] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1482.193197][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.208309][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.218190][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.229131][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.241262][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.252160][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.262262][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.272778][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.284229][T17622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.297167][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.308457][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.318474][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.329496][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.339597][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.350750][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.360620][T17622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.371082][T17622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.382396][T17622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.403328][T17622] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.418211][T17622] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.427815][T17622] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.437093][T17622] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.468164][T10744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.478898][T10744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1482.500225][T10744] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1482.534925][T10744] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1482.560020][T10744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.582612][T16634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.611546][T16634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.701503][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.716276][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.996616][T17760] FAULT_INJECTION: forcing a failure. [ 1482.996616][T17760] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1483.009943][T10744] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 1483.014149][T17760] CPU: 0 PID: 17760 Comm: syz.0.2980 Not tainted syzkaller #0 [ 1483.016131][T10744] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1483.023576][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1483.023591][T17760] Call Trace: [ 1483.023601][T17760] [ 1483.023609][T17760] dump_stack_lvl+0x18c/0x250 [ 1483.023636][T17760] ? show_regs_print_info+0x20/0x20 [ 1483.023655][T17760] ? load_image+0x420/0x420 [ 1483.023682][T17760] ? __lock_acquire+0x7eb0/0x7eb0 [ 1483.023704][T17760] ? __kasan_slab_alloc+0x6c/0x80 [ 1483.023732][T17760] should_fail_ex+0x394/0x4c0 [ 1483.023762][T17760] strncpy_from_user+0x36/0x2f0 [ 1483.023787][T17760] getname_flags+0xf6/0x500 [ 1483.023813][T17760] user_path_at_empty+0x2c/0x60 [ 1483.023834][T17760] __se_sys_mount+0x2a8/0x3d0 [ 1483.023861][T17760] ? __x64_sys_mount+0xc0/0xc0 [ 1483.023887][T17760] ? lockdep_hardirqs_on+0x98/0x150 [ 1483.023910][T17760] ? __x64_sys_mount+0x20/0xc0 [ 1483.023934][T17760] do_syscall_64+0x55/0xb0 [ 1483.023952][T17760] ? clear_bhb_loop+0x40/0x90 [ 1483.023972][T17760] ? clear_bhb_loop+0x40/0x90 [ 1483.023995][T17760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1483.024025][T17760] RIP: 0033:0x7f1fdcd9e1d9 [ 1483.024043][T17760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.024061][T17760] RSP: 002b:00007f1fddc75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1483.024083][T17760] RAX: ffffffffffffffda RBX: 00007f1fdd025fa0 RCX: 00007f1fdcd9e1d9 [ 1483.024099][T17760] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.024113][T17760] RBP: 00007f1fdce35888 R08: 0000200000000340 R09: 0000000000000000 [ 1483.024128][T17760] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 1483.024141][T17760] R13: 00007f1fdd026038 R14: 00007f1fdd025fa0 R15: 00007fff288e6058 [ 1483.024173][T17760] [ 1483.216953][T10744] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1483.235040][T10744] cxacru: probe of 3-1:1.0 failed with error -71 [ 1483.276433][T10744] usb 3-1: USB disconnect, device number 50 [ 1483.826606][T17768] loop4: detected capacity change from 0 to 256 [ 1483.996169][T17773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2981'. [ 1484.743673][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.846207][T17779] loop5: detected capacity change from 0 to 512 [ 1484.858577][T17779] EXT4-fs: Ignoring removed oldalloc option [ 1484.874697][T17779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1485.652247][T17779] EXT4-fs (loop5): 1 truncate cleaned up [ 1485.697509][T17782] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1485.720470][T17782] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1485.731002][T17779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.851570][T17782] gadgetfs: bound to dummy_udc driver [ 1486.054545][T17622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.103282][T17792] FAULT_INJECTION: forcing a failure. [ 1486.103282][T17792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.116573][T17792] CPU: 1 PID: 17792 Comm: syz.0.2989 Not tainted syzkaller #0 [ 1486.124077][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1486.134162][T17792] Call Trace: [ 1486.137470][T17792] [ 1486.140423][T17792] dump_stack_lvl+0x18c/0x250 [ 1486.145135][T17792] ? show_regs_print_info+0x20/0x20 [ 1486.150376][T17792] ? load_image+0x420/0x420 [ 1486.154921][T17792] ? __might_fault+0xaa/0x120 [ 1486.159629][T17792] ? __lock_acquire+0x7eb0/0x7eb0 [ 1486.164686][T17792] should_fail_ex+0x394/0x4c0 [ 1486.169399][T17792] _copy_from_user+0x2f/0xe0 [ 1486.174017][T17792] __se_sys_mount+0x179/0x3d0 [ 1486.178707][T17792] ? __x64_sys_mount+0xc0/0xc0 [ 1486.183476][T17792] ? lockdep_hardirqs_on+0x98/0x150 [ 1486.188677][T17792] ? __x64_sys_mount+0x20/0xc0 [ 1486.193443][T17792] do_syscall_64+0x55/0xb0 [ 1486.197857][T17792] ? clear_bhb_loop+0x40/0x90 [ 1486.202528][T17792] ? clear_bhb_loop+0x40/0x90 [ 1486.207203][T17792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.213106][T17792] RIP: 0033:0x7f1fdcd9e1d9 [ 1486.217523][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.237139][T17792] RSP: 002b:00007f1fddc75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1486.245564][T17792] RAX: ffffffffffffffda RBX: 00007f1fdd025fa0 RCX: 00007f1fdcd9e1d9 [ 1486.253537][T17792] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1486.261506][T17792] RBP: 00007f1fdce35888 R08: 0000200000000340 R09: 0000000000000000 [ 1486.269481][T17792] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 1486.277468][T17792] R13: 00007f1fdd026038 R14: 00007f1fdd025fa0 R15: 00007fff288e6058 [ 1486.285461][T17792] [ 1486.543514][T17803] loop2: detected capacity change from 0 to 128 [ 1487.009939][T17803] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1487.151619][T17803] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.368609][T14796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1487.410697][ T27] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1487.556849][T17820] loop2: detected capacity change from 0 to 4096 [ 1487.581564][T17818] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1487.590341][T17818] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1487.611842][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.662843][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1487.721995][T17822] gadgetfs: bound to dummy_udc driver [ 1487.831525][ T27] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1488.045844][ T27] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1488.106482][T10744] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1488.176345][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.209420][ C1] gadgetfs: connected [ 1488.215401][T10744] gadgetfs: disconnected [ 1488.365281][T17817] gadgetfs: suspended from state 2 [ 1488.468124][T17826] loop5: detected capacity change from 0 to 512 [ 1488.478108][T17826] EXT4-fs: Ignoring removed oldalloc option [ 1488.491626][T17826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1488.504908][T17820] EXT4-fs: Ignoring removed orlov option [ 1488.520067][T17820] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1488.547623][T17826] EXT4-fs (loop5): 1 truncate cleaned up [ 1488.564805][T17820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1488.579082][T17826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1488.629560][T10744] usb 1-1: device not accepting address 62, error -71 [ 1488.755159][T17622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.846806][T17820] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1488.975451][T14796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.003672][ T27] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 1489.032767][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1489.089462][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1489.348377][ T27] cxacru: probe of 5-1:1.0 failed with error -71 [ 1489.724658][ T27] usb 5-1: USB disconnect, device number 31 [ 1491.095358][T17873] loop0: detected capacity change from 0 to 512 [ 1491.110411][T17873] EXT4-fs: Ignoring removed oldalloc option [ 1491.143012][T17873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1491.188481][T17873] EXT4-fs (loop0): 1 truncate cleaned up [ 1491.210302][T17873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.273236][T15540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.611717][T17879] loop4: detected capacity change from 0 to 512 [ 1491.627249][T17879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1491.680175][T16983] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1491.700654][T17879] EXT4-fs (loop4): 1 truncate cleaned up [ 1491.717811][T17879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.916918][T16983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.917125][T16983] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1491.917200][T16983] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1491.917419][T16983] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1491.917491][T16983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.561029][T17879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1493.448190][T16983] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 1493.448251][T16983] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1493.448268][T16983] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1493.723554][T16983] cxacru: probe of 1-1:1.0 failed with error -71 [ 1494.066806][T16983] usb 1-1: USB disconnect, device number 64 [ 1494.385548][T17913] loop4: detected capacity change from 0 to 512 [ 1494.436479][T17913] EXT4-fs: Ignoring removed oldalloc option [ 1494.477157][T17913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1494.524546][T17913] EXT4-fs (loop4): 1 truncate cleaned up [ 1494.547632][T17913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.500036][T16650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.109472][ T7277] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1496.369166][ T7277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.464241][ T7277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1496.567065][ T7277] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1496.704475][ T7277] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1496.791965][ T7277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.046910][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1497.137242][T17946] loop2: detected capacity change from 0 to 512 [ 1497.158798][T17946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c01c, mo2=0002] [ 1497.173117][T17946] System zones: 1-12 [ 1497.194138][T17946] ------------[ cut here ]------------ [ 1497.200605][T17946] EA inode 11 i_nlink=0 [ 1497.202636][T17946] WARNING: CPU: 0 PID: 17946 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.217493][T17946] Modules linked in: [ 1497.221914][T17946] CPU: 0 PID: 17946 Comm: syz.2.3034 Not tainted syzkaller #0 [ 1497.229983][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1497.240571][T17946] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.247206][T17946] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 1497.267188][T17946] RSP: 0018:ffffc90004a87360 EFLAGS: 00010246 [ 1497.273614][T17946] RAX: 0f291a32e644a700 RBX: ffff88807696f2a8 RCX: 0000000000080000 [ 1497.281679][T17946] RDX: ffffc90013f90000 RSI: 0000000000016d4b RDI: 0000000000016d4c [ 1497.289724][T17946] RBP: ffffc90004a87450 R08: ffffc90004a86f67 R09: 1ffff92000950dec [ 1497.298345][T17946] R10: dffffc0000000000 R11: fffff52000950ded R12: ffff88807696f100 [ 1497.306562][T17946] R13: ffffc90004a873c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1497.314625][T17946] FS: 00007f4a5b19b6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1497.323651][T17946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1497.330318][T17946] CR2: 00007f1fddb556c8 CR3: 00000000754be000 CR4: 00000000003506f0 [ 1497.338326][T17946] Call Trace: [ 1497.341670][T17946] [ 1497.345078][T17946] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1497.350934][T17946] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1497.357048][T17946] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1497.363256][T17946] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1497.368939][T17946] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1497.375216][T17946] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1497.380774][T17946] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1497.386898][T17946] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1497.392764][T17946] ext4_evict_inode+0xa88/0xe70 [ 1497.398273][T17946] ? evict+0x482/0x8a0 [ 1497.402560][T17946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1497.408510][T17946] ? do_raw_spin_unlock+0x121/0x230 [ 1497.413811][T17946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1497.419828][T17946] evict+0x4b7/0x8a0 [ 1497.423770][T17946] ? __lock_acquire+0x7eb0/0x7eb0 [ 1497.428844][T17946] ? proc_nr_inodes+0x230/0x230 [ 1497.433931][T17946] ? do_raw_spin_unlock+0x121/0x230 [ 1497.439172][T17946] ? _raw_spin_unlock+0x28/0x40 [ 1497.444109][T17946] ext4_orphan_cleanup+0xdff/0x1650 [ 1497.449397][T17946] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1497.455684][T17946] ? ext4_orphan_del+0xc90/0xc90 [ 1497.460719][T17946] ? ext4_register_li_request+0x182/0x930 [ 1497.466480][T17946] ? errseq_check_and_advance+0x66/0x120 [ 1497.472228][T17946] ext4_fill_super+0x5fb5/0x6870 [ 1497.477238][T17946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1497.483678][T17946] ? __might_sleep+0xe0/0xe0 [ 1497.488312][T17946] ? read_lock_is_recursive+0x20/0x20 [ 1497.493767][T17946] ? snprintf+0xe9/0x140 [ 1497.498670][T17946] ? down_read_killable+0x340/0x340 [ 1497.504067][T17946] ? setup_bdev_super+0x56b/0x660 [ 1497.509141][T17946] get_tree_bdev+0x3e5/0x520 [ 1497.514220][T17946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1497.520601][T17946] ? setup_bdev_super+0x660/0x660 [ 1497.525666][T17946] ? apparmor_capable+0x137/0x1a0 [ 1497.530823][T17946] ? bpf_lsm_capable+0x9/0x10 [ 1497.535558][T17946] ? security_capable+0x89/0xb0 [ 1497.540512][T17946] vfs_get_tree+0x8c/0x280 [ 1497.544965][T17946] do_new_mount+0x24a/0xa40 [ 1497.549560][T17946] __se_sys_mount+0x2e7/0x3d0 [ 1497.554278][T17946] ? __x64_sys_mount+0xc0/0xc0 [ 1497.559070][T17946] ? lockdep_hardirqs_on+0x98/0x150 [ 1497.564358][T17946] ? __x64_sys_mount+0x20/0xc0 [ 1497.569160][T17946] do_syscall_64+0x55/0xb0 [ 1497.573651][T17946] ? clear_bhb_loop+0x40/0x90 [ 1497.578364][T17946] ? clear_bhb_loop+0x40/0x90 [ 1497.583120][T17946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.589662][T17946] RIP: 0033:0x7f4a5a39f44a [ 1497.594111][T17946] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.614424][T17946] RSP: 002b:00007f4a5b19ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1497.623061][T17946] RAX: ffffffffffffffda RBX: 00007f4a5b19aee0 RCX: 00007f4a5a39f44a [ 1497.631121][T17946] RDX: 0000200000002900 RSI: 0000200000002940 RDI: 00007f4a5b19aea0 [ 1497.639149][T17946] RBP: 0000200000002900 R08: 00007f4a5b19aee0 R09: 0000000000200700 [ 1497.647187][T17946] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000002940 [ 1497.655222][T17946] R13: 00007f4a5b19aea0 R14: 0000000000000488 R15: 0000200000002980 [ 1497.663276][T17946] [ 1497.666319][T17946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1497.673616][T17946] CPU: 0 PID: 17946 Comm: syz.2.3034 Not tainted syzkaller #0 [ 1497.681096][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1497.691174][T17946] Call Trace: [ 1497.694469][T17946] [ 1497.697412][T17946] dump_stack_lvl+0x18c/0x250 [ 1497.702117][T17946] ? show_regs_print_info+0x20/0x20 [ 1497.707354][T17946] ? load_image+0x420/0x420 [ 1497.711904][T17946] panic+0x2ca/0x720 [ 1497.715840][T17946] ? bpf_jit_dump+0xd0/0xd0 [ 1497.720394][T17946] __warn+0x2e0/0x470 [ 1497.724403][T17946] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.730407][T17946] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.736413][T17946] report_bug+0x2be/0x4f0 [ 1497.740776][T17946] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.746782][T17946] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.752779][T17946] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 1497.758763][T17946] handle_bug+0xcf/0x120 [ 1497.763013][T17946] exc_invalid_op+0x1a/0x50 [ 1497.767532][T17946] asm_exc_invalid_op+0x1a/0x20 [ 1497.772392][T17946] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 1497.778985][T17946] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 1497.798596][T17946] RSP: 0018:ffffc90004a87360 EFLAGS: 00010246 [ 1497.804678][T17946] RAX: 0f291a32e644a700 RBX: ffff88807696f2a8 RCX: 0000000000080000 [ 1497.812660][T17946] RDX: ffffc90013f90000 RSI: 0000000000016d4b RDI: 0000000000016d4c [ 1497.820631][T17946] RBP: ffffc90004a87450 R08: ffffc90004a86f67 R09: 1ffff92000950dec [ 1497.828602][T17946] R10: dffffc0000000000 R11: fffff52000950ded R12: ffff88807696f100 [ 1497.836576][T17946] R13: ffffc90004a873c0 R14: dffffc0000000000 R15: 0000000000000000 [ 1497.844574][T17946] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1497.850225][T17946] ? __ext4_journal_ensure_credits+0x30/0x450 [ 1497.856294][T17946] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 1497.862303][T17946] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 1497.867941][T17946] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1497.874103][T17946] ext4_xattr_delete_inode+0xb3b/0xd00 [ 1497.879581][T17946] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 1497.885657][T17946] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 1497.891338][T17946] ext4_evict_inode+0xa88/0xe70 [ 1497.896198][T17946] ? evict+0x482/0x8a0 [ 1497.900276][T17946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1497.906175][T17946] ? do_raw_spin_unlock+0x121/0x230 [ 1497.911387][T17946] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1497.917287][T17946] evict+0x4b7/0x8a0 [ 1497.921184][T17946] ? __lock_acquire+0x7eb0/0x7eb0 [ 1497.926218][T17946] ? proc_nr_inodes+0x230/0x230 [ 1497.931081][T17946] ? do_raw_spin_unlock+0x121/0x230 [ 1497.936294][T17946] ? _raw_spin_unlock+0x28/0x40 [ 1497.941174][T17946] ext4_orphan_cleanup+0xdff/0x1650 [ 1497.946388][T17946] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 1497.952643][T17946] ? ext4_orphan_del+0xc90/0xc90 [ 1497.957673][T17946] ? ext4_register_li_request+0x182/0x930 [ 1497.963394][T17946] ? errseq_check_and_advance+0x66/0x120 [ 1497.969034][T17946] ext4_fill_super+0x5fb5/0x6870 [ 1497.974012][T17946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1497.980273][T17946] ? __might_sleep+0xe0/0xe0 [ 1497.984869][T17946] ? read_lock_is_recursive+0x20/0x20 [ 1497.990242][T17946] ? snprintf+0xe9/0x140 [ 1497.994509][T17946] ? down_read_killable+0x340/0x340 [ 1497.999712][T17946] ? setup_bdev_super+0x56b/0x660 [ 1498.004743][T17946] get_tree_bdev+0x3e5/0x520 [ 1498.009331][T17946] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1498.015584][T17946] ? setup_bdev_super+0x660/0x660 [ 1498.020617][T17946] ? apparmor_capable+0x137/0x1a0 [ 1498.025651][T17946] ? bpf_lsm_capable+0x9/0x10 [ 1498.030332][T17946] ? security_capable+0x89/0xb0 [ 1498.035196][T17946] vfs_get_tree+0x8c/0x280 [ 1498.039622][T17946] do_new_mount+0x24a/0xa40 [ 1498.044129][T17946] __se_sys_mount+0x2e7/0x3d0 [ 1498.048815][T17946] ? __x64_sys_mount+0xc0/0xc0 [ 1498.053583][T17946] ? lockdep_hardirqs_on+0x98/0x150 [ 1498.058777][T17946] ? __x64_sys_mount+0x20/0xc0 [ 1498.063541][T17946] do_syscall_64+0x55/0xb0 [ 1498.067956][T17946] ? clear_bhb_loop+0x40/0x90 [ 1498.072648][T17946] ? clear_bhb_loop+0x40/0x90 [ 1498.077330][T17946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1498.083231][T17946] RIP: 0033:0x7f4a5a39f44a [ 1498.087647][T17946] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.107258][T17946] RSP: 002b:00007f4a5b19ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1498.115678][T17946] RAX: ffffffffffffffda RBX: 00007f4a5b19aee0 RCX: 00007f4a5a39f44a [ 1498.123651][T17946] RDX: 0000200000002900 RSI: 0000200000002940 RDI: 00007f4a5b19aea0 [ 1498.131647][T17946] RBP: 0000200000002900 R08: 00007f4a5b19aee0 R09: 0000000000200700 [ 1498.139617][T17946] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000002940 [ 1498.147588][T17946] R13: 00007f4a5b19aea0 R14: 0000000000000488 R15: 0000200000002980 [ 1498.155573][T17946] [ 1498.158829][T17946] Kernel Offset: disabled [ 1498.163225][T17946] Rebooting in 86400 seconds..