last executing test programs: 14.2476536s ago: executing program 1 (id=2000): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xfffffffd, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.124802208s ago: executing program 1 (id=2002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) clock_settime(0xfffffffc, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x18) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 12.87559885s ago: executing program 1 (id=2005): close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x31, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRES64], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x21, 0x2c, 0x3, 0x1c, 0x7, 0x4, 0x3, 0xd3, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.505877825s ago: executing program 3 (id=2006): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) 4.835577831s ago: executing program 2 (id=2007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$xdp(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, 0x1, 0x0, 0x12}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x24008084}, 0x20044080) 4.829587912s ago: executing program 3 (id=2008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 4.755400997s ago: executing program 0 (id=2009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000340)="d8", 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x93d, @dev={0xfe, 0x80, '\x00', 0x32}, 0xb}, 0x1c) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8, 0x1004, 0x9, 0xc595, 0x9, 0x8, 0xfffffffffffffffe, 0x8, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.478654975s ago: executing program 0 (id=2010): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 4.477981755s ago: executing program 1 (id=2011): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) 3.675606888s ago: executing program 1 (id=2012): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 3.675420508s ago: executing program 0 (id=2013): syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="93", 0x1, 0x4000014, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a91831178f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aae", 0xc9}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c00100008000140040000", 0x57}], 0x1) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 3.629522941s ago: executing program 2 (id=2014): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000640)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000000000", 0x9f}, {&(0x7f0000000a80)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87c9be2814365f3f1962ee9db85d8ba8968bfee00e27db96abc49c734aefd019fc756e8d14e1f0f3ce6d6e0163d7367f0672c1b07dc28d6bd3ab5f7b33dc0d79dae55f626904ce60a091126aeee026", 0x146}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d5668105a9b0aa", 0xdf}], 0x7}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a4efaa8c147dcb1786d9df723186ccebd489ff7b0d86d247eb95a1ce6271bfd0baa34a8beb3f3544dc367d98ca10aa2616b0a86b3b74c1ccc883a01a822c4f3dec83dcca4d2ca0b4b34949eda70a71c837abb5d41d7fe1c9dec9ff63b6bc684ed642f8e1e75742a9065b17f2649e0e9845847f28b3561dd41c4c56f61c3c5e985b8c83f6cebc82a7c2eb8da77c9eb", 0x91}, {&(0x7f0000000c40)="b4207053c783840adc326e2741bc6c65e3919d5e55654dfcda9a29ac1b4471c4c4b3abb892014f7662790cb7849641ad1d3a01849be69193d20050a5b905e8bf5c47172b04121ccc6b1f2ecc12117cd31209dddadd0c15a72756942821ef59b4efd374d49fec7b535aa2265c2e0421dc257f8ac230fb1e9a3baf4c2a32711e8a3d4a6b1cfacbbc61e92e10e66dab7fb6e055417b507e5aacb638a486a4f15385f4b5471dd7afadb8d265", 0xaa}, {&(0x7f0000000d00)="ad082895a37f54f03b61403288ac3956661144804fe3ae3144823d971367dc96946d372fb35cc2ce336756dc8adeb4b05b211f70b481954d03643bf38dfcc0c3904627f112dab177bfa63a5aa244c5c81f47b20c0bb35b808821f5143c27d116a9ac92d1e064e63f98523883bbabfba1d501ddc0fd07b6376b28ad5e0f285b65ba61fc3b6e3f69fe0ce095c0c0aaf9e05adedc0da7e0c36086f86ee3115f4ad2f1d165cb81f6a2c11d2ada6d0bae3026b308c32ad654c7e8bcb0221f031982fd41b374189eba04a31fff8b55ca9ed6921999b66e72688c9c5e021c0a56b91eb329a915d4bdaa44281634ce043f6022a8f4da211ef52b7f79770608", 0xfb}, {&(0x7f00000027c0)="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", 0x392}], 0x4) 3.48503193s ago: executing program 2 (id=2015): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) 1.559491988s ago: executing program 2 (id=2016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.485957532s ago: executing program 0 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) clock_settime(0xfffffffc, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x18) 1.356786541s ago: executing program 1 (id=2018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000340)="d8", 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x93d, @dev={0xfe, 0x80, '\x00', 0x32}, 0xb}, 0x1c) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8, 0x1004, 0x9, 0xc595, 0x9, 0x8, 0xfffffffffffffffe, 0x8, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.198494242s ago: executing program 3 (id=2019): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1}, 0x0) 1.111452317s ago: executing program 2 (id=2020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 1.06679872s ago: executing program 3 (id=2021): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e1406", 0x1b}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x1008, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 229.862235ms ago: executing program 0 (id=2022): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x10, 0x5}, {0x6, 0xffff}}}, 0x24}}, 0x0) 229.615345ms ago: executing program 3 (id=2023): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000640)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000000000", 0x9f}, {&(0x7f0000000a80)="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", 0x146}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d5668105a9b0aa", 0xdf}], 0x7}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a4efaa8c147dcb1786d9df723186ccebd489ff7b0d86d247eb95a1ce6271bfd0baa34a8beb3f3544dc367d98ca10aa2616b0a86b3b74c1ccc883a01a822c4f3dec83dcca4d2ca0b4b34949eda70a71c837abb5d41d7fe1c9dec9ff63b6bc684ed642f8e1e75742a9065b17f2649e0e9845847f28b3561dd41c4c56f61c3c5e985b8c83f6cebc82a7c2eb8da77c9eb", 0x91}, {&(0x7f0000000c40)="b4207053c783840adc326e2741bc6c65e3919d5e55654dfcda9a29ac1b4471c4c4b3abb892014f7662790cb7849641ad1d3a01849be69193d20050a5b905e8bf5c47172b04121ccc6b1f2ecc12117cd31209dddadd0c15a72756942821ef59b4efd374d49fec7b535aa2265c2e0421dc257f8ac230fb1e9a3baf4c2a32711e8a3d4a6b1cfacbbc61e92e10e66dab7fb6e055417b507e5aacb638a486a4f15385f4b5471dd7afadb8d265", 0xaa}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f00000027c0)="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", 0x392}], 0x4) 127.500712ms ago: executing program 2 (id=2024): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) 10.71863ms ago: executing program 3 (id=2025): syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="93", 0x1, 0x4000014, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a91831178f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aae", 0xc9}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c00100008000140040000", 0x57}], 0x1) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 0 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): up: Unknown subsys name 'net' [ 95.724305][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.594774][ T28] cfg80211: failed to load regulatory.db [ 97.762578][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.624288][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.635390][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.651798][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.665672][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.693078][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.712349][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.721601][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.732568][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.742616][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.752257][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.752468][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.761445][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.769172][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.778044][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.788981][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.798030][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.804251][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.814583][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.827465][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.847143][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.855719][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.866414][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.874801][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.875710][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.486588][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 100.512142][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 100.715670][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.723180][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.732179][ T5798] bridge_slave_0: entered allmulticast mode [ 100.740609][ T5798] bridge_slave_0: entered promiscuous mode [ 100.751831][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 100.767915][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 100.779217][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.787802][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.796982][ T5793] bridge_slave_0: entered allmulticast mode [ 100.805274][ T5793] bridge_slave_0: entered promiscuous mode [ 100.815852][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.824574][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.835349][ T5793] bridge_slave_1: entered allmulticast mode [ 100.844669][ T5793] bridge_slave_1: entered promiscuous mode [ 100.854496][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.865404][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.873684][ T5798] bridge_slave_1: entered allmulticast mode [ 100.881108][ T5798] bridge_slave_1: entered promiscuous mode [ 100.993350][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.007726][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.047760][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.061685][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.129746][ T5798] team0: Port device team_slave_0 added [ 101.170252][ T5798] team0: Port device team_slave_1 added [ 101.224075][ T5793] team0: Port device team_slave_0 added [ 101.230858][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.238651][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.247090][ T5796] bridge_slave_0: entered allmulticast mode [ 101.256227][ T5796] bridge_slave_0: entered promiscuous mode [ 101.296337][ T5793] team0: Port device team_slave_1 added [ 101.319006][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.330568][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.339798][ T5796] bridge_slave_1: entered allmulticast mode [ 101.349795][ T5796] bridge_slave_1: entered promiscuous mode [ 101.395475][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.404152][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.412506][ T5797] bridge_slave_0: entered allmulticast mode [ 101.420927][ T5797] bridge_slave_0: entered promiscuous mode [ 101.471707][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.480276][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.515657][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.535351][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.545876][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.579756][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.593865][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.602830][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.612533][ T5797] bridge_slave_1: entered allmulticast mode [ 101.622286][ T5797] bridge_slave_1: entered promiscuous mode [ 101.631395][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.639673][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.672993][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.688774][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.698007][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.727724][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.743685][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.758329][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.846119][ T5796] team0: Port device team_slave_0 added [ 101.858585][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.876168][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.903588][ T5796] team0: Port device team_slave_1 added [ 101.912623][ T50] Bluetooth: hci3: command tx timeout [ 101.912851][ T5800] Bluetooth: hci2: command tx timeout [ 101.919324][ T50] Bluetooth: hci1: command tx timeout [ 101.926968][ T5804] Bluetooth: hci0: command tx timeout [ 102.031821][ T5798] hsr_slave_0: entered promiscuous mode [ 102.040791][ T5798] hsr_slave_1: entered promiscuous mode [ 102.054463][ T5797] team0: Port device team_slave_0 added [ 102.069236][ T5793] hsr_slave_0: entered promiscuous mode [ 102.078830][ T5793] hsr_slave_1: entered promiscuous mode [ 102.086675][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.095526][ T5793] Cannot create hsr debugfs directory [ 102.134706][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.143563][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.172138][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.191396][ T5797] team0: Port device team_slave_1 added [ 102.221834][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.229802][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.259516][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.395388][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.406210][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.440792][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.490647][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.499471][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.530767][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.616091][ T5796] hsr_slave_0: entered promiscuous mode [ 102.625453][ T5796] hsr_slave_1: entered promiscuous mode [ 102.634562][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.645917][ T5796] Cannot create hsr debugfs directory [ 102.819361][ T5797] hsr_slave_0: entered promiscuous mode [ 102.828606][ T5797] hsr_slave_1: entered promiscuous mode [ 102.836462][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.845502][ T5797] Cannot create hsr debugfs directory [ 103.020210][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.060353][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.074690][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.115418][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.216155][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.251311][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.267215][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.311022][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.373540][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.393252][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.406729][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.426315][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.555872][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.568754][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.608245][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.638593][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.713272][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.783370][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.839288][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.853392][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.884467][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.894365][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.913976][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.951000][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.960034][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.981252][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.992258][ T5800] Bluetooth: hci0: command tx timeout [ 103.992288][ T5807] Bluetooth: hci2: command tx timeout [ 103.998995][ T5804] Bluetooth: hci1: command tx timeout [ 104.011426][ T50] Bluetooth: hci3: command tx timeout [ 104.044313][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.052258][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.068479][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.076476][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.109499][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.117492][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.134497][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.143680][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.175392][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.290044][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.330049][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.338153][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.386203][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.394153][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.927157][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.973825][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.074939][ T5793] veth0_vlan: entered promiscuous mode [ 105.104878][ T5793] veth1_vlan: entered promiscuous mode [ 105.136474][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.159770][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.241050][ T5798] veth0_vlan: entered promiscuous mode [ 105.260678][ T5793] veth0_macvtap: entered promiscuous mode [ 105.277913][ T5798] veth1_vlan: entered promiscuous mode [ 105.301543][ T5793] veth1_macvtap: entered promiscuous mode [ 105.360326][ T5796] veth0_vlan: entered promiscuous mode [ 105.379973][ T5797] veth0_vlan: entered promiscuous mode [ 105.393915][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.430647][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.449607][ T5796] veth1_vlan: entered promiscuous mode [ 105.465832][ T5797] veth1_vlan: entered promiscuous mode [ 105.488313][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.499941][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513448][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.525159][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.544978][ T5798] veth0_macvtap: entered promiscuous mode [ 105.558873][ T5798] veth1_macvtap: entered promiscuous mode [ 105.625133][ T5796] veth0_macvtap: entered promiscuous mode [ 105.658254][ T5796] veth1_macvtap: entered promiscuous mode [ 105.689251][ T5797] veth0_macvtap: entered promiscuous mode [ 105.710409][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.722282][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.734943][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.747692][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.760503][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.772846][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.802305][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.814552][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.826153][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.846315][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.858492][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.868205][ T5797] veth1_macvtap: entered promiscuous mode [ 105.877888][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.889424][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.899230][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.908730][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.971282][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.971346][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.998357][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.002286][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.019453][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.032186][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.044979][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.062115][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.071091][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.079630][ T50] Bluetooth: hci3: command tx timeout [ 106.081332][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.088383][ T50] Bluetooth: hci1: command tx timeout [ 106.097603][ T5804] Bluetooth: hci2: command tx timeout [ 106.108916][ T5807] Bluetooth: hci0: command tx timeout [ 106.110189][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.133410][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.145897][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.156685][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.169286][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.179309][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.190111][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.203030][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.254279][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.265094][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.275545][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.287657][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.304816][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.317996][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.332812][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.349767][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.359404][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.385985][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.407262][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.418483][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.427939][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.502924][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.523967][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.649051][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.673839][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.703642][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.725765][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.864274][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.903441][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.000270][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.028928][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.050447][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.071400][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.112445][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.630588][ T5900] syz.0.8[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 108.161423][ T50] Bluetooth: hci2: command tx timeout [ 108.168937][ T5807] Bluetooth: hci3: command tx timeout [ 108.168967][ T5800] Bluetooth: hci1: command tx timeout [ 108.177419][ T5804] Bluetooth: hci0: command tx timeout [ 112.046215][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 112.058155][ T5996] process 'syz.0.41' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 113.560959][ T6038] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.162139][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.381604][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 114.412027][ T28] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.438775][ T28] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.469387][ T28] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.501577][ T28] usb 2-1: config 250 has no interface number 0 [ 114.508058][ T28] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.541582][ T28] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.559310][ T28] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.572300][ T28] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.599507][ T28] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.652275][ T28] usb 2-1: config 250 interface 228 has no altsetting 0 [ 114.668075][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 114.681707][ T28] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 114.708394][ T28] usb 2-1: Product: syz [ 114.719555][ T28] usb 2-1: SerialNumber: syz [ 114.812703][ T28] hub 2-1:250.228: bad descriptor, ignoring hub [ 114.842137][ T28] hub: probe of 2-1:250.228 failed with error -5 [ 114.987768][ T28] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.387441][ T28] usb 2-1: USB disconnect, device number 2 [ 119.409075][ T28] usblp0: removed [ 119.761664][ T6131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.938196][ T6138] lo: entered promiscuous mode [ 119.952633][ T6137] lo: left promiscuous mode [ 120.451790][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.651668][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 120.685968][ T5776] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 120.701678][ T5776] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 120.731953][ T5776] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 120.768097][ T5776] usb 3-1: config 250 has no interface number 0 [ 120.788675][ T5776] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.788727][ T5776] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.788754][ T5776] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.788777][ T5776] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.788801][ T5776] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.788828][ T5776] usb 3-1: config 250 interface 228 has no altsetting 0 [ 120.797176][ T5776] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 120.797211][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 120.797233][ T5776] usb 3-1: Product: syz [ 120.797249][ T5776] usb 3-1: SerialNumber: syz [ 120.840657][ T5776] hub 3-1:250.228: bad descriptor, ignoring hub [ 120.840711][ T5776] hub: probe of 3-1:250.228 failed with error -5 [ 121.059083][ T5776] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 122.030532][ T6188] x_tables: ip_tables: osf match: only valid for protocol 6 [ 122.281235][ T6194] loop3: detected capacity change from 0 to 256 [ 122.444641][ T27] audit: type=1326 audit(1759845576.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.511200][ T27] audit: type=1326 audit(1759845576.211:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.556550][ T27] audit: type=1326 audit(1759845576.221:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.580308][ T27] audit: type=1326 audit(1759845576.221:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.605295][ T27] audit: type=1326 audit(1759845576.221:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.630521][ T27] audit: type=1326 audit(1759845576.221:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.656205][ T27] audit: type=1326 audit(1759845576.221:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.679506][ T27] audit: type=1326 audit(1759845576.221:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.703071][ T27] audit: type=1326 audit(1759845576.221:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.734821][ T27] audit: type=1326 audit(1759845576.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 122.883657][ T6207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.973617][ T6209] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 123.217205][ T6213] loop0: detected capacity change from 0 to 1764 [ 125.551585][ T5835] usb 3-1: USB disconnect, device number 2 [ 125.580990][ T5835] usblp0: removed [ 125.645667][ T6265] loop5: detected capacity change from 0 to 7 [ 125.709718][ T6265] Dev loop5: unable to read RDB block 7 [ 125.729978][ T6265] loop5: unable to read partition table [ 125.747819][ T6265] loop5: partition table beyond EOD, truncated [ 125.781014][ T6265] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 126.079677][ T6276] block device autoloading is deprecated and will be removed. [ 126.132193][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 126.217566][ T6278] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 126.472817][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.665067][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 126.675024][ T5835] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 126.687247][ T5835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.697976][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.701885][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.710998][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.730225][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.777397][ T5835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.792455][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.932521][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 126.946654][ T23] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 126.964999][ T23] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 126.984713][ T23] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 126.994643][ T23] usb 2-1: config 250 has no interface number 0 [ 127.001243][ T23] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 127.015888][ T23] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 127.033567][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.040835][ T5835] usb 1-1: usb_control_msg returned -32 [ 127.044186][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.058816][ T23] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.062663][ T5835] usbtmc 1-1:16.0: can't read capabilities [ 127.077213][ T6298] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 127.090696][ T23] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.109786][ T6298] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 127.131905][ T23] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 127.145067][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.158722][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.172051][ T23] usb 2-1: config 250 interface 228 has no altsetting 0 [ 127.177849][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.193062][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 127.207924][ T23] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 127.229103][ T23] usb 2-1: Product: syz [ 127.234435][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.234449][ T23] usb 2-1: SerialNumber: syz [ 127.266789][ T23] hub 2-1:250.228: bad descriptor, ignoring hub [ 127.280162][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.290511][ T23] hub: probe of 2-1:250.228 failed with error -5 [ 127.298848][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.480155][ T23] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 127.852596][ T23] usb 2-1: USB disconnect, device number 3 [ 128.021991][ T6318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.669475][ T6327] loop3: detected capacity change from 0 to 256 [ 128.949554][ T6333] fuse: Bad value for 'fd' [ 130.826666][ T6362] fuse: Bad value for 'fd' [ 132.392662][ T6280] usbtmc 1-1:16.0: stb usb_control_msg returned -110 [ 132.431556][ T23] usblp1: removed [ 132.464526][ T787] usb 1-1: USB disconnect, device number 2 [ 132.741992][ T6389] fuse: Unknown parameter '00000000000000000003' [ 133.217716][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 133.276901][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.190'. [ 133.436256][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.439748][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.446619][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.633782][ T6419] fuse: Unknown parameter '00000000000000000003' [ 133.642100][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 133.656113][ T787] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 133.681842][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.705746][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.731713][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.765085][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.787556][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.798665][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.038251][ T787] usb 3-1: usb_control_msg returned -32 [ 134.046179][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.063108][ T787] usbtmc 3-1:16.0: can't read capabilities [ 134.085680][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.128300][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.139356][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.157258][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.168741][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.193721][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.209823][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.461000][ T6438] fuse: Unknown parameter '00000000000000000003' [ 135.258657][ T6464] fuse: Unknown parameter '00000000000000000003' [ 135.951918][ T6480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.146842][ T6486] fuse: Unknown parameter '00000000000000000003' [ 136.861871][ T6510] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.906713][ T6513] fuse: Unknown parameter '00000000000000000003' [ 137.780595][ T6535] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 137.797231][ T6535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 137.942880][ T6537] fuse: Unknown parameter 'fd00000000000000000003' [ 138.041686][ T6541] loop3: detected capacity change from 0 to 256 [ 138.670474][ T6562] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 138.684544][ T6562] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 138.788787][ T6564] fuse: Unknown parameter 'fd00000000000000000003' [ 138.905261][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 139.284871][ T6406] usbtmc 3-1:16.0: stb usb_control_msg returned -110 [ 139.387624][ T23] usb 3-1: USB disconnect, device number 3 [ 139.557966][ T6584] loop5: detected capacity change from 0 to 7 [ 139.565548][ T6585] fuse: Unknown parameter 'fd00000000000000000003' [ 139.582270][ T6584] Dev loop5: unable to read RDB block 7 [ 139.603436][ T6584] loop5: AHDI p1 p2 p3 [ 139.616966][ T6584] loop5: partition table partially beyond EOD, truncated [ 139.641796][ T6584] loop5: p1 start 1601398130 is beyond EOD, truncated [ 139.659223][ T6584] loop5: p2 start 1702059890 is beyond EOD, truncated [ 139.833550][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'. [ 140.108738][ T6603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.562872][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.782042][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 140.796280][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 140.818425][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.834427][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.850186][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.884189][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.936779][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.950837][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.216021][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.224916][ T23] usb 1-1: usb_control_msg returned -32 [ 141.230559][ T23] usbtmc 1-1:16.0: can't read capabilities [ 141.240625][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.299214][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.327667][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.375385][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.409663][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.433759][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.466207][ T6641] loop5: detected capacity change from 0 to 7 [ 141.481969][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.495453][ T6641] Dev loop5: unable to read RDB block 7 [ 141.515325][ T6641] loop5: unable to read partition table [ 141.528950][ T6641] loop5: partition table beyond EOD, truncated [ 141.546721][ T6641] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 142.359682][ T6662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.638584][ T6669] loop5: detected capacity change from 0 to 7 [ 142.652177][ T6669] Dev loop5: unable to read RDB block 7 [ 142.660208][ T6669] loop5: unable to read partition table [ 142.667152][ T6669] loop5: partition table beyond EOD, truncated [ 142.687104][ T6669] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 144.378625][ T6688] loop2: detected capacity change from 0 to 2048 [ 144.530537][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.632750][ T6688] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.388915][ T6697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.561781][ T6610] usbtmc 1-1:16.0: stb usb_control_msg returned -110 [ 146.637669][ T23] usb 1-1: USB disconnect, device number 3 [ 147.553744][ T6714] loop5: detected capacity change from 0 to 7 [ 147.578557][ T5783] Dev loop5: unable to read RDB block 7 [ 147.607753][ T5783] loop5: unable to read partition table [ 147.621810][ T5783] loop5: partition table beyond EOD, truncated [ 147.651342][ T6714] Dev loop5: unable to read RDB block 7 [ 147.671895][ T6714] loop5: unable to read partition table [ 147.688617][ T6714] loop5: partition table beyond EOD, truncated [ 147.702090][ T6714] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 148.070689][ T6718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.409437][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.631954][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.821640][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 148.846559][ T787] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 148.871740][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.901581][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.931663][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.971579][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.001625][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.021700][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.261694][ T787] usb 2-1: usb_control_msg returned -32 [ 149.268519][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.291388][ T787] usbtmc 2-1:16.0: can't read capabilities [ 149.312278][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.372137][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.432920][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.477757][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.508753][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.528282][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.557201][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.163694][ T23] usb 2-1: USB disconnect, device number 4 [ 151.024790][ T6745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.368196][ T6780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.831405][ T6797] overlayfs: failed to decode file handle (len=8, type=8, flags=0, err=-22) [ 153.273558][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.482186][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 153.498297][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 153.521593][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.538977][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.551325][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.580441][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.595103][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.605529][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.804511][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.347'. [ 153.816370][ T6823] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 153.854601][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.857512][ T23] usb 4-1: usb_control_msg returned -32 [ 153.871137][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.885302][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.890572][ T23] usbtmc 4-1:16.0: can't read capabilities [ 153.914454][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.005369][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.029190][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.047318][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.060476][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.734301][ T787] usb 4-1: USB disconnect, device number 2 [ 154.777937][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 154.897734][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 155.885483][ T6867] loop0: detected capacity change from 0 to 1764 [ 156.361887][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.591693][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 156.603110][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 156.626913][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.647365][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.659914][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.675831][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.691788][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.707701][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.775772][ T6895] loop0: detected capacity change from 0 to 1764 [ 156.950856][ T23] usb 4-1: usb_control_msg returned -32 [ 156.958774][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.986600][ T23] usbtmc 4-1:16.0: can't read capabilities [ 157.002022][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.051293][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.062286][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.077574][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.118293][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.131839][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.142180][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.747025][ T23] usb 4-1: USB disconnect, device number 3 [ 158.203321][ T6929] loop2: detected capacity change from 0 to 1764 [ 158.470968][ T6935] capability: warning: `syz.2.392' uses deprecated v2 capabilities in a way that may be insecure [ 159.351780][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.450781][ T6959] loop3: detected capacity change from 0 to 1764 [ 159.571803][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 159.586141][ T5835] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 159.605542][ T5835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.642610][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.660518][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.677566][ T5835] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.692888][ T5835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.717477][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.916236][ T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.955830][ T5835] usb 3-1: usb_control_msg returned -32 [ 159.955937][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.969134][ T5835] usbtmc 3-1:16.0: can't read capabilities [ 159.974944][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.038860][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.061914][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.086424][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.100533][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.110930][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 160.119370][ T28] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 160.133994][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.145080][ T28] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 160.153334][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.154335][ T28] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 160.173736][ T28] usb 4-1: config 250 has no interface number 0 [ 160.180268][ T28] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 160.196323][ T28] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 160.208083][ T28] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.219684][ T28] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.230477][ T28] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 160.244999][ T28] usb 4-1: config 250 interface 228 has no altsetting 0 [ 160.256348][ T28] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 160.266575][ T28] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 160.275959][ T28] usb 4-1: Product: syz [ 160.280281][ T28] usb 4-1: SerialNumber: syz [ 160.301776][ T28] hub 4-1:250.228: bad descriptor, ignoring hub [ 160.308318][ T28] hub: probe of 4-1:250.228 failed with error -5 [ 160.518241][ T28] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 160.564400][ T28] usb 4-1: USB disconnect, device number 4 [ 160.575551][ T28] usblp1: removed [ 160.709614][ T6989] loop0: detected capacity change from 0 to 256 [ 160.759607][ T5835] usb 3-1: USB disconnect, device number 4 [ 161.091838][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.301589][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 161.321169][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.349013][ T28] usb 4-1: no configurations [ 161.369127][ T28] usb 4-1: can't read configurations, error -22 [ 162.368271][ T7041] loop3: detected capacity change from 0 to 256 [ 162.987437][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 163.247204][ T7076] loop2: detected capacity change from 0 to 256 [ 163.412170][ T5835] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.601788][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 163.616633][ T5835] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 163.630158][ T5835] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.654847][ T5835] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.689019][ T5835] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.718572][ T5835] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.737793][ T5835] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.749423][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.015109][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.025476][ T5835] usb 4-1: usb_control_msg returned -32 [ 164.046840][ T5835] usbtmc 4-1:16.0: can't read capabilities [ 164.052264][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.123918][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.154561][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.167823][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.180024][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.198934][ T7104] fuse: Bad value for 'fd' [ 164.216332][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.230120][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.737708][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.751143][ T7125] overlayfs: failed to clone upperpath [ 164.818613][ T28] usb 4-1: USB disconnect, device number 7 [ 165.042040][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 165.049946][ T5835] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 165.059154][ T5835] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 165.068460][ T5835] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 165.079163][ T5835] usb 3-1: config 250 has no interface number 0 [ 165.086299][ T5835] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 165.104833][ T5835] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 165.116886][ T5835] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.128960][ T5835] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.141682][ T5835] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 165.157394][ T5835] usb 3-1: config 250 interface 228 has no altsetting 0 [ 165.168438][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 165.178144][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 165.186669][ T5835] usb 3-1: Product: syz [ 165.191070][ T5835] usb 3-1: SerialNumber: syz [ 165.202852][ T5835] hub 3-1:250.228: bad descriptor, ignoring hub [ 165.209922][ T5835] hub: probe of 3-1:250.228 failed with error -5 [ 165.441788][ T5835] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 165.513028][ T5835] usb 3-1: USB disconnect, device number 5 [ 165.530086][ T5835] usblp0: removed [ 165.699280][ T7135] fuse: Bad value for 'fd' [ 166.066090][ T5835] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.271913][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 166.292842][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.314150][ T5835] usb 3-1: no configurations [ 166.319397][ T5835] usb 3-1: can't read configurations, error -22 [ 166.370402][ T7156] overlayfs: failed to resolve './file0': -2 [ 166.381675][ T7156] overlayfs: failed to resolve './file0/file0': -2 [ 166.520948][ T7161] Illegal XDP return value 4294967274 on prog (id 27) dev syz_tun, expect packet loss! [ 166.967720][ T7177] overlayfs: failed to resolve './file0': -2 [ 166.984053][ T7177] overlayfs: failed to resolve './file0/file0': -2 [ 167.589457][ T7199] overlayfs: failed to resolve './file0': -2 [ 167.600585][ T7199] overlayfs: failed to resolve './file0/file0': -2 [ 167.701278][ T7202] fuse: Bad value for 'fd' [ 167.710301][ T7203] fuse: Bad value for 'fd' [ 167.863221][ T7207] loop2: detected capacity change from 0 to 1764 [ 168.012434][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.221699][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 168.236237][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.260692][ T28] usb 1-1: no configurations [ 168.282214][ T28] usb 1-1: can't read configurations, error -22 [ 168.658431][ T7235] overlayfs: failed to clone upperpath [ 169.165020][ T7253] fuse: Bad value for 'fd' [ 169.891045][ T7270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.466161][ T7289] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 170.487534][ T7289] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.056632][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 171.873711][ T7319] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 171.888524][ T7319] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 172.571103][ T7348] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 172.588049][ T7348] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 172.867453][ T7356] sch_tbf: peakrate 7 is lower than or equals to rate 16 ! [ 173.029094][ T7362] Zero length message leads to an empty skb [ 173.487265][ T7367] loop3: detected capacity change from 0 to 2048 [ 173.805690][ T7367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.823188][ T7367] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.678189][ T7376] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 174.740676][ T7376] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 174.921488][ C0] sched: RT throttling activated [ 175.521408][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.102190][ T7404] overlayfs: failed to clone upperpath [ 176.283602][ T7408] overlayfs: failed to clone upperpath [ 176.316262][ T7408] overlayfs: failed to clone upperpath [ 176.391640][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.581893][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 176.605770][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.634033][ T787] usb 4-1: no configurations [ 176.639571][ T787] usb 4-1: can't read configurations, error -22 [ 176.805288][ T7424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.017318][ T7432] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 177.031136][ T7432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.659434][ T7453] loop5: detected capacity change from 0 to 7 [ 177.682683][ T7453] Dev loop5: unable to read RDB block 7 [ 177.708024][ T7453] loop5: unable to read partition table [ 177.724776][ T7453] loop5: partition table beyond EOD, truncated [ 177.741716][ T7453] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 177.769318][ T7450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.800925][ T7457] overlayfs: failed to resolve './file0/file0': -2 [ 178.769205][ T7484] overlayfs: failed to resolve './file0/file0': -2 [ 179.536790][ T7514] overlayfs: failed to resolve './file0/file0': -2 [ 179.691712][ T787] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.692644][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 180.093485][ T787] usb 4-1: device descriptor read/64, error -71 [ 180.352904][ T7527] loop0: detected capacity change from 0 to 2048 [ 180.729717][ T7527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.745717][ T7527] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.237843][ T7547] overlayfs: failed to resolve './file1': -2 [ 182.260723][ T7547] overlayfs: failed to resolve './file1': -2 [ 182.480955][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.541590][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.003387][ T7569] overlayfs: failed to resolve './file1': -2 [ 183.052669][ T7570] overlayfs: failed to resolve './file1': -2 [ 183.754986][ T7583] loop2: detected capacity change from 0 to 2048 [ 183.992383][ T7583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.007900][ T7583] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.326157][ T7604] overlayfs: failed to resolve './file1': -2 [ 185.367140][ T7604] overlayfs: failed to resolve './file1': -2 [ 185.859496][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.210003][ T7626] overlayfs: failed to clone upperpath [ 187.418004][ T7660] loop5: detected capacity change from 0 to 7 [ 187.433214][ T7660] Dev loop5: unable to read RDB block 7 [ 187.440133][ T7660] loop5: unable to read partition table [ 187.454781][ T7662] overlayfs: failed to clone upperpath [ 187.455597][ T7660] loop5: partition table beyond EOD, truncated [ 187.481516][ T7660] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 188.117025][ T7678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.200547][ T7710] loop5: detected capacity change from 0 to 7 [ 189.214114][ T7710] Dev loop5: unable to read RDB block 7 [ 189.228306][ T7710] loop5: unable to read partition table [ 189.238014][ T7710] loop5: partition table beyond EOD, truncated [ 189.251666][ T7710] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 189.591921][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.704'. [ 190.657075][ T7749] loop3: detected capacity change from 0 to 2048 [ 190.909035][ T7749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.927438][ T7749] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.911082][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 191.929480][ T7765] bridge_slave_1: left allmulticast mode [ 191.947046][ T7765] bridge_slave_1: left promiscuous mode [ 191.971064][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.007742][ T7765] bridge_slave_0: left allmulticast mode [ 192.019334][ T7765] bridge_slave_0: left promiscuous mode [ 192.026914][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.653448][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.492088][ T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.661714][ T787] usb 3-1: device descriptor read/64, error -71 [ 194.879387][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.898762][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.942298][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.103636][ T787] usb 3-1: device descriptor read/64, error -71 [ 195.252240][ T787] usb usb3-port1: attempt power cycle [ 195.702093][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.751740][ T787] usb 3-1: device descriptor read/8, error -71 [ 196.021572][ T787] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.071732][ T787] usb 3-1: device descriptor read/8, error -71 [ 196.128920][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 196.158305][ T7890] bridge_slave_1: left allmulticast mode [ 196.178874][ T7890] bridge_slave_1: left promiscuous mode [ 196.191906][ T787] usb usb3-port1: unable to enumerate USB device [ 196.198981][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.224677][ T7890] bridge_slave_0: left allmulticast mode [ 196.233264][ T7890] bridge_slave_0: left promiscuous mode [ 196.240775][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.150416][ T7916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.378904][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 197.406058][ T7924] bridge_slave_1: left allmulticast mode [ 197.420410][ T7924] bridge_slave_1: left promiscuous mode [ 197.434114][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.469087][ T7924] bridge_slave_0: left allmulticast mode [ 197.499341][ T7924] bridge_slave_0: left promiscuous mode [ 197.520011][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.624057][ T7926] loop0: detected capacity change from 0 to 1764 [ 197.690323][ T5783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.470246][ T7953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.608092][ T7961] overlayfs: failed to clone upperpath [ 198.784467][ T7966] loop3: detected capacity change from 0 to 164 [ 198.795813][ T7966] ======================================================= [ 198.795813][ T7966] WARNING: The mand mount option has been deprecated and [ 198.795813][ T7966] and is ignored by this kernel. Remove the mand [ 198.795813][ T7966] option from the mount to silence this warning. [ 198.795813][ T7966] ======================================================= [ 198.913639][ T7969] loop2: detected capacity change from 0 to 1764 [ 198.990503][ T5783] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.760772][ T7994] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.090868][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 200.287752][ T8015] loop0: detected capacity change from 0 to 1764 [ 200.912317][ T8031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.260404][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 201.490626][ T8053] loop3: detected capacity change from 0 to 1764 [ 201.559015][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.833798][ T8062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.938187][ T8071] overlayfs: failed to clone upperpath [ 202.171764][ T8078] loop5: detected capacity change from 0 to 7 [ 202.200825][ T8078] Dev loop5: unable to read RDB block 7 [ 202.214931][ T8078] loop5: unable to read partition table [ 202.224845][ T8078] loop5: partition table beyond EOD, truncated [ 202.251649][ T8078] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 202.472912][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 202.489642][ T8084] bridge_slave_1: left allmulticast mode [ 202.496913][ T8084] bridge_slave_1: left promiscuous mode [ 202.509721][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.537645][ T8084] bridge_slave_0: left allmulticast mode [ 202.550332][ T8084] bridge_slave_0: left promiscuous mode [ 202.560689][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.990469][ T8098] loop0: detected capacity change from 0 to 1764 [ 204.185446][ T8136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.195100][ T8136] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 204.213846][ T8136] overlayfs: failed to clone upperpath [ 204.537054][ T8137] loop2: detected capacity change from 0 to 2048 [ 204.707499][ T8137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.723735][ T8137] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.480008][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.776176][ T8175] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.801888][ T8175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.376638][ T8200] loop5: detected capacity change from 0 to 7 [ 207.386609][ T5783] Dev loop5: unable to read RDB block 7 [ 207.393430][ T5783] loop5: unable to read partition table [ 207.404036][ T5783] loop5: partition table beyond EOD, truncated [ 207.417157][ T8200] Dev loop5: unable to read RDB block 7 [ 207.425953][ T8200] loop5: unable to read partition table [ 207.436984][ T8200] loop5: partition table beyond EOD, truncated [ 207.447326][ T8200] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 207.530045][ T8202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.776306][ T8209] overlayfs: failed to clone upperpath [ 207.854859][ T8211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 207.894330][ T8211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.501074][ T8235] loop5: detected capacity change from 0 to 7 [ 208.515909][ T8235] Dev loop5: unable to read RDB block 7 [ 208.527641][ T8235] loop5: unable to read partition table [ 208.563345][ T8235] loop5: partition table beyond EOD, truncated [ 208.580610][ T8235] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 208.969077][ T8246] overlayfs: missing 'lowerdir' [ 209.927893][ T8282] overlayfs: missing 'lowerdir' [ 210.297188][ T8268] syz.3.892 (8268) used greatest stack depth: 20872 bytes left [ 211.599273][ T8323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.953211][ T8333] loop2: detected capacity change from 0 to 2048 [ 212.354915][ T8333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.369108][ T8333] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.741765][ T8348] loop0: detected capacity change from 0 to 256 [ 214.010009][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.888407][ T8371] loop3: detected capacity change from 0 to 1764 [ 214.990835][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.693311][ T8409] loop3: detected capacity change from 0 to 1764 [ 217.549160][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.953'. [ 217.559671][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 220.687270][ T8538] overlayfs: failed to clone upperpath [ 221.019305][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 221.228646][ T8551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.031717][ T8583] overlayfs: failed to clone upperpath [ 222.468270][ T8593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.555718][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 222.556824][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 222.563846][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 222.580407][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 223.623855][ T8631] overlayfs: missing 'lowerdir' [ 225.130094][ T8683] loop5: detected capacity change from 0 to 7 [ 225.139339][ T8683] Dev loop5: unable to read RDB block 7 [ 225.151717][ T8683] loop5: unable to read partition table [ 225.158152][ T8683] loop5: partition table beyond EOD, truncated [ 225.164653][ T8683] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 225.234197][ T8687] overlayfs: failed to clone upperpath [ 225.505720][ T8693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.112290][ T8712] loop5: detected capacity change from 0 to 7 [ 226.140088][ T5783] Dev loop5: unable to read RDB block 7 [ 226.154507][ T5783] loop5: unable to read partition table [ 226.160645][ T5783] loop5: partition table beyond EOD, truncated [ 226.174510][ T8712] Dev loop5: unable to read RDB block 7 [ 226.183079][ T8712] loop5: unable to read partition table [ 226.202078][ T8712] loop5: partition table beyond EOD, truncated [ 226.211996][ T8712] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 226.890514][ T8733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.935694][ T8768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.974959][ T8809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.312251][ T8857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.886990][ T8912] loop2: detected capacity change from 0 to 2048 [ 232.029770][ T8912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.044044][ T8912] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.431332][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1121'. [ 233.775826][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.899761][ T8977] loop5: detected capacity change from 0 to 7 [ 234.926621][ T8977] Dev loop5: unable to read RDB block 7 [ 234.960211][ T8977] loop5: unable to read partition table [ 234.970572][ T8977] loop5: partition table beyond EOD, truncated [ 234.992338][ T8977] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 235.555976][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.938918][ T9007] fuse: Unknown parameter 'grou00000000000000000000' [ 235.966940][ T9005] loop5: detected capacity change from 0 to 7 [ 235.977966][ T9005] Dev loop5: unable to read RDB block 7 [ 235.996007][ T9005] loop5: unable to read partition table [ 236.017266][ T9005] loop5: partition table beyond EOD, truncated [ 236.036035][ T9005] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 236.332569][ T9014] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 236.361618][ T9014] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.283040][ T9043] fuse: Unknown parameter 'grou00000000000000000000' [ 237.296555][ T9042] loop5: detected capacity change from 0 to 7 [ 237.316043][ T9042] Dev loop5: unable to read RDB block 7 [ 237.342461][ T9042] loop5: unable to read partition table [ 237.348702][ T9042] loop5: partition table beyond EOD, truncated [ 237.397399][ T9042] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 237.443555][ T9046] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 237.463798][ T9046] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.201893][ T9060] loop2: detected capacity change from 0 to 2048 [ 238.496313][ T9060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.510287][ T9060] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.936533][ T9075] fuse: Unknown parameter 'grou00000000000000000000' [ 240.215237][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.559137][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559324][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559454][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559581][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559727][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559860][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.559986][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.619893][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.620037][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 240.620166][ T9087] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 241.959756][ T9121] loop3: detected capacity change from 0 to 2048 [ 242.198478][ T9121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.212087][ T9121] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.031022][ T27] kauditd_printk_skb: 107 callbacks suppressed [ 243.031039][ T27] audit: type=1326 audit(1759845696.801:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 243.159910][ T27] audit: type=1326 audit(1759845696.851:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 243.287955][ T27] audit: type=1326 audit(1759845696.871:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 243.461716][ T27] audit: type=1326 audit(1759845696.871:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9129 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdf78eec9 code=0x7ffc0000 [ 243.966682][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.564621][ T9176] netlink: 'syz.0.1214': attribute type 15 has an invalid length. [ 247.092466][ T9205] netlink: 'syz.1.1226': attribute type 15 has an invalid length. [ 247.665135][ T9225] loop7: detected capacity change from 0 to 7 [ 247.676121][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.686771][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.697249][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.706775][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.716119][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.725819][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.737166][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.748718][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.760216][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.770232][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.780297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.790226][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.800101][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.810677][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.820300][ T5783] ldm_validate_partition_table(): Disk read failed. [ 247.858105][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.868303][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.877596][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.887544][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.898337][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.907643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.916407][ T5783] Dev loop7: unable to read RDB block 0 [ 247.939400][ T5783] loop7: unable to read partition table [ 247.950196][ T5783] loop7: partition table beyond EOD, truncated [ 247.987478][ T9225] ldm_validate_partition_table(): Disk read failed. [ 248.044666][ T9225] Dev loop7: unable to read RDB block 0 [ 248.073453][ T9225] loop7: unable to read partition table [ 248.080049][ T9225] loop7: partition table beyond EOD, truncated [ 248.120279][ T9225] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 250.492782][ T9321] fuse: Bad value for 'fd' [ 251.285439][ T9350] fuse: Bad value for 'fd' [ 251.363693][ T9353] loop2: detected capacity change from 0 to 128 [ 251.432633][ T9353] FAT-fs (loop2): Directory bread(block 414) failed [ 251.460956][ T9353] FAT-fs (loop2): Directory bread(block 415) failed [ 251.491579][ T9353] FAT-fs (loop2): Directory bread(block 416) failed [ 251.521819][ T9353] FAT-fs (loop2): Directory bread(block 417) failed [ 251.529588][ T9353] FAT-fs (loop2): Directory bread(block 418) failed [ 251.581508][ T9353] FAT-fs (loop2): Directory bread(block 419) failed [ 251.607367][ T9353] FAT-fs (loop2): Directory bread(block 420) failed [ 251.633138][ T9353] FAT-fs (loop2): Directory bread(block 421) failed [ 251.739437][ T9353] FAT-fs (loop2): FAT read failed (blocknr 128) [ 251.858030][ T9367] fuse: Bad value for 'fd' [ 252.094300][ T9375] fuse: Bad value for 'fd' [ 252.727087][ T9400] fuse: Bad value for 'fd' [ 253.596943][ T9424] fuse: Bad value for 'fd' [ 254.292369][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 254.563536][ T9455] fuse: Bad value for 'fd' [ 255.745137][ T9483] fuse: Bad value for 'fd' [ 256.316645][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.324928][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.405522][ T9501] loop5: detected capacity change from 0 to 7 [ 256.441347][ T9501] Dev loop5: unable to read RDB block 7 [ 256.478654][ T9501] loop5: unable to read partition table [ 256.509529][ T9501] loop5: partition table beyond EOD, truncated [ 256.541696][ T9501] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 256.637097][ T9511] fuse: Invalid rootmode [ 257.703343][ T9544] loop5: detected capacity change from 0 to 7 [ 257.732865][ T9544] Dev loop5: unable to read RDB block 7 [ 257.739164][ T9544] loop5: unable to read partition table [ 257.760301][ T9544] loop5: partition table beyond EOD, truncated [ 257.781057][ T9544] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 259.363884][ T9601] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1386'. [ 259.374357][ T9601] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1386'. [ 259.511330][ T9602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.568720][ T9633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.629807][ T9785] loop3: detected capacity change from 0 to 128 [ 264.688159][ T9785] FAT-fs (loop3): Directory bread(block 414) failed [ 264.726897][ T9785] FAT-fs (loop3): Directory bread(block 415) failed [ 264.752768][ T9785] FAT-fs (loop3): Directory bread(block 416) failed [ 264.759858][ T9785] FAT-fs (loop3): Directory bread(block 417) failed [ 264.827441][ T9785] FAT-fs (loop3): Directory bread(block 418) failed [ 264.842217][ T9785] FAT-fs (loop3): Directory bread(block 419) failed [ 264.849733][ T9785] FAT-fs (loop3): Directory bread(block 420) failed [ 264.858999][ T9785] FAT-fs (loop3): Directory bread(block 421) failed [ 265.309557][ T9809] overlayfs: disabling nfs_export due to verity=on [ 265.327185][ T9809] overlayfs: conflicting options: userxattr,redirect_dir=on [ 265.701228][ T9824] loop0: detected capacity change from 0 to 128 [ 265.730410][ T9824] FAT-fs (loop0): Directory bread(block 414) failed [ 265.761589][ T9824] FAT-fs (loop0): Directory bread(block 415) failed [ 265.770952][ T9824] FAT-fs (loop0): Directory bread(block 416) failed [ 265.800354][ T9824] FAT-fs (loop0): Directory bread(block 417) failed [ 265.810492][ T9824] FAT-fs (loop0): Directory bread(block 418) failed [ 265.832502][ T9824] FAT-fs (loop0): Directory bread(block 419) failed [ 265.839929][ T9824] FAT-fs (loop0): Directory bread(block 420) failed [ 265.861855][ T9824] FAT-fs (loop0): Directory bread(block 421) failed [ 266.057439][ T9831] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.934058][ T9858] loop5: detected capacity change from 0 to 7 [ 266.961894][ T9858] Dev loop5: unable to read RDB block 7 [ 266.972496][ T9858] loop5: unable to read partition table [ 266.979551][ T9858] loop5: partition table beyond EOD, truncated [ 267.051691][ T9858] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 267.391329][ T9868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.191295][ T9983] loop2: detected capacity change from 0 to 128 [ 271.214683][ T9983] FAT-fs (loop2): Directory bread(block 414) failed [ 271.233008][ T9983] FAT-fs (loop2): Directory bread(block 415) failed [ 271.240714][ T9983] FAT-fs (loop2): Directory bread(block 416) failed [ 271.249115][ T9983] FAT-fs (loop2): Directory bread(block 417) failed [ 271.272543][ T9983] FAT-fs (loop2): Directory bread(block 418) failed [ 271.291611][ T9983] FAT-fs (loop2): Directory bread(block 419) failed [ 271.320253][ T9983] FAT-fs (loop2): Directory bread(block 420) failed [ 271.352527][ T9983] FAT-fs (loop2): Directory bread(block 421) failed [ 271.427457][ T9983] FAT-fs (loop2): FAT read failed (blocknr 128) [ 271.931571][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.131721][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 272.151935][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 272.178994][ T5879] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 272.208000][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.233762][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.249270][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.278066][ T5879] usbtmc 3-1:16.0: bulk endpoints not found [ 273.070977][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 273.352174][T10032] overlayfs: missing 'lowerdir' [ 273.463499][T10036] loop0: detected capacity change from 0 to 256 [ 274.080662][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 274.729366][ T5835] usb 3-1: USB disconnect, device number 12 [ 274.926228][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 275.042981][T10077] overlayfs: missing 'lowerdir' [ 275.095869][T10080] overlayfs: failed to resolve './file0': -2 [ 276.288522][T10104] overlayfs: failed to resolve './file0': -2 [ 276.473075][T10106] loop0: detected capacity change from 0 to 1764 [ 276.616540][T10114] fuse: Unknown parameter '0x0000000000000003' [ 276.900322][T10122] overlayfs: missing 'lowerdir' [ 277.300020][T10131] overlayfs: failed to resolve './file0': -2 [ 278.433926][T10157] overlayfs: failed to resolve './file0': -2 [ 280.331099][T10211] loop5: detected capacity change from 0 to 7 [ 280.358309][T10211] Dev loop5: unable to read RDB block 7 [ 280.376507][T10211] loop5: AHDI p1 p2 p3 [ 280.384907][T10211] loop5: partition table partially beyond EOD, truncated [ 280.404122][T10211] loop5: p1 start 1601398130 is beyond EOD, truncated [ 280.431651][T10211] loop5: p2 start 1702059890 is beyond EOD, truncated [ 281.111703][ T5835] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 281.324386][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 281.344318][ T5835] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 281.369279][ T5835] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 281.396230][ T5835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.458458][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.482781][ T5835] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.508523][ T5835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 281.522057][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.555414][ T5835] usbtmc 3-1:16.0: bulk endpoints not found [ 281.628636][T10243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.074588][T10255] fuse: Bad value for 'fd' [ 282.206095][T10245] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1631'. [ 282.227857][T10245] gretap0: entered promiscuous mode [ 282.810576][T10276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.965894][T10282] fuse: Bad value for 'fd' [ 283.471772][ T5776] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.702743][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 283.721130][ T5776] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 283.749021][ T5776] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.786507][ T5776] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.818279][ T5776] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 283.858121][ T5776] usb 1-1: config 7 interface 0 has no altsetting 0 [ 283.872285][ T5776] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 283.908182][ T28] usb 3-1: USB disconnect, device number 13 [ 283.922934][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.427469][ T5776] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input5 [ 284.461384][T10308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.605132][ T5776] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 284.869748][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.893138][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.942003][ T23] usb 1-1: USB disconnect, device number 6 [ 285.611633][ T5776] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.853706][T10335] loop2: detected capacity change from 0 to 2048 [ 286.087450][T10335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.103987][T10335] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.372337][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 286.419711][ T5776] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 286.501336][ T5776] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 286.574715][ T5776] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.662746][ T5776] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.761511][ T5776] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.846247][ T5776] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.897448][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.988406][ T5776] usbtmc 4-1:16.0: bulk endpoints not found [ 287.800966][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.030591][T10362] loop5: detected capacity change from 0 to 7 [ 288.052369][ T7130] Dev loop5: unable to read RDB block 7 [ 288.068060][ T7130] loop5: AHDI p1 p2 p3 [ 288.073824][ T7130] loop5: partition table partially beyond EOD, truncated [ 288.086299][ T7130] loop5: p1 start 1601398130 is beyond EOD, truncated [ 288.097742][ T7130] loop5: p2 start 1702059890 is beyond EOD, truncated [ 288.110470][T10362] Dev loop5: unable to read RDB block 7 [ 288.124460][T10362] loop5: AHDI p1 p2 p3 [ 288.131913][T10362] loop5: partition table partially beyond EOD, truncated [ 288.150494][T10362] loop5: p1 start 1601398130 is beyond EOD, truncated [ 288.173254][T10362] loop5: p2 start 1702059890 is beyond EOD, truncated [ 288.521785][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 288.732694][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 288.754300][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.776702][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 288.789572][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.804747][ T5835] usb 1-1: Product: syz [ 288.813809][ T5835] usb 1-1: Manufacturer: syz [ 288.819290][ T5835] usb 1-1: SerialNumber: syz [ 288.846500][ T5835] usb 1-1: config 0 descriptor?? [ 289.004307][ T23] usb 4-1: USB disconnect, device number 12 [ 289.090248][ T5835] usb 1-1: USB disconnect, device number 7 [ 289.425268][T10405] netlink: 679 bytes leftover after parsing attributes in process `syz.1.1689'. [ 289.698144][T10413] tipc: Can't bind to reserved service type 0 [ 289.863609][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 290.101688][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 290.116098][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 290.130855][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.149543][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.187269][ T23] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 290.211667][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.242270][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.253560][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.281646][ T23] usbtmc 4-1:16.0: bulk endpoints not found [ 290.926096][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 291.980666][T10478] netlink: 'syz.0.1721': attribute type 12 has an invalid length. [ 292.633059][ T28] usb 4-1: USB disconnect, device number 13 [ 292.856332][T10513] overlayfs: missing 'lowerdir' [ 293.388796][T10533] overlayfs: missing 'lowerdir' [ 293.457218][T10504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.466701][T10504] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 293.492550][T10504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.499966][T10504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 293.515890][T10504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.530153][T10504] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 293.548144][T10504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.559138][T10504] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 293.774125][T10540] GUP no longer grows the stack in syz.2.1748 (10540): 200000001000-200000c01000 (200000000000) [ 293.800766][T10540] CPU: 0 PID: 10540 Comm: syz.2.1748 Not tainted syzkaller #0 [ 293.809208][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.822832][T10540] Call Trace: [ 293.827655][T10540] [ 293.832707][T10540] dump_stack_lvl+0x16c/0x230 [ 293.837843][T10540] ? show_regs_print_info+0x20/0x20 [ 293.844768][T10540] ? load_image+0x3b0/0x3b0 [ 293.849819][T10540] ? find_vma+0x12e/0x1b0 [ 293.854935][T10540] __get_user_pages+0xfb9/0x1470 [ 293.860202][T10540] ? populate_vma_page_range+0x370/0x370 [ 293.867231][T10540] ? __gup_longterm_locked+0x20e8/0x2b80 [ 293.873134][T10540] ? down_read_killable+0x1d0/0x340 [ 293.879421][T10540] __gup_longterm_locked+0x2247/0x2b80 [ 293.886095][T10540] ? deref_stack_reg+0x131/0x240 [ 293.892535][T10540] ? pin_user_pages_remote+0x210/0x210 [ 293.898335][T10540] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 293.905903][T10540] ? lock_chain_count+0x20/0x20 [ 293.911354][T10540] ? internal_get_user_pages_fast+0x1fa2/0x2730 [ 293.917945][T10540] internal_get_user_pages_fast+0x217f/0x2730 [ 293.925287][T10540] ? get_user_pages_fast_only+0xa0/0xa0 [ 293.931596][T10540] get_futex_key+0x19f/0x1020 [ 293.936941][T10540] ? futex_setup_timer+0xc0/0xc0 [ 293.942645][T10540] futex_lock_pi+0x16f/0x8d0 [ 293.948618][T10540] ? futex_wait_queue+0x138/0x1b0 [ 293.954838][T10540] ? fixup_pi_state_owner+0x5c0/0x5c0 [ 293.961518][T10540] ? up_read+0x20/0x20 [ 293.966725][T10540] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 293.974115][T10540] do_futex+0x23d/0x3e0 [ 293.979916][T10540] ? __ia32_sys_get_robust_list+0x90/0x90 [ 293.988512][T10540] __se_sys_futex+0x36f/0x3f0 [ 293.993379][T10540] ? __x64_sys_futex+0xf0/0xf0 [ 294.000045][T10540] ? __x64_sys_futex+0x21/0xf0 [ 294.005327][T10540] do_syscall_64+0x55/0xb0 [ 294.010796][T10540] ? clear_bhb_loop+0x40/0x90 [ 294.016714][T10540] ? clear_bhb_loop+0x40/0x90 [ 294.022638][T10540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.030123][T10540] RIP: 0033:0x7f1a4fb8eec9 [ 294.036453][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.059865][T10540] RSP: 002b:00007f1a50a1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.069527][T10540] RAX: ffffffffffffffda RBX: 00007f1a4fde5fa0 RCX: 00007f1a4fb8eec9 [ 294.080035][T10540] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 294.093755][T10540] RBP: 00007f1a4fc11f91 R08: 0000000000000000 R09: 0000000000000002 [ 294.105400][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.115026][T10540] R13: 00007f1a4fde6038 R14: 00007f1a4fde5fa0 R15: 00007ffee6734d38 [ 294.124231][T10540] [ 294.334087][T10556] overlayfs: missing 'lowerdir' [ 294.489861][T10560] binder: 10559:10560 ioctl 80189439 0 returned -22 [ 294.791991][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 295.858915][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 295.862749][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 295.873669][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 296.366044][T10603] overlayfs: missing 'lowerdir' [ 296.739429][T10616] netlink: 'syz.1.1779': attribute type 27 has an invalid length. [ 296.761573][T10616] lo: entered promiscuous mode [ 296.783704][T10616] lo: entered allmulticast mode [ 296.803518][T10616] tunl0: entered promiscuous mode [ 296.809920][T10616] tunl0: entered allmulticast mode [ 296.833380][T10616] gre0: entered promiscuous mode [ 296.839174][T10616] gre0: entered allmulticast mode [ 296.846389][T10616] gretap0: entered allmulticast mode [ 296.857341][T10616] erspan0: entered promiscuous mode [ 296.863589][T10616] erspan0: entered allmulticast mode [ 296.873549][T10616] ip_vti0: entered promiscuous mode [ 296.876892][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 296.881615][T10616] ip_vti0: entered allmulticast mode [ 296.917976][T10616] ip6_vti0: entered promiscuous mode [ 296.944305][T10616] ip6_vti0: entered allmulticast mode [ 296.975628][T10616] sit0: entered promiscuous mode [ 296.981280][T10616] sit0: entered allmulticast mode [ 296.988636][T10616] ip6tnl0: entered promiscuous mode [ 296.997499][T10616] ip6tnl0: entered allmulticast mode [ 297.005713][T10616] ip6gre0: entered promiscuous mode [ 297.011707][T10616] ip6gre0: entered allmulticast mode [ 297.019905][T10616] syz_tun: entered promiscuous mode [ 297.026566][T10616] syz_tun: entered allmulticast mode [ 297.038315][T10616] ip6gretap0: entered promiscuous mode [ 297.054846][T10616] ip6gretap0: entered allmulticast mode [ 297.070856][T10616] vcan0: entered promiscuous mode [ 297.076983][T10616] vcan0: entered allmulticast mode [ 297.083538][T10616] bond0: entered promiscuous mode [ 297.091631][T10616] bond_slave_0: entered promiscuous mode [ 297.099527][T10616] bond_slave_1: entered promiscuous mode [ 297.131259][T10616] bond0: entered allmulticast mode [ 297.141801][T10616] bond_slave_0: entered allmulticast mode [ 297.148359][T10616] bond_slave_1: entered allmulticast mode [ 297.158803][T10616] team0: entered promiscuous mode [ 297.166011][T10616] team_slave_0: entered promiscuous mode [ 297.173499][T10616] team_slave_1: entered promiscuous mode [ 297.179953][T10616] team0: entered allmulticast mode [ 297.186569][T10616] team_slave_0: entered allmulticast mode [ 297.199370][T10616] team_slave_1: entered allmulticast mode [ 297.228712][T10616] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.254582][T10616] dummy0: entered promiscuous mode [ 297.266032][T10616] dummy0: entered allmulticast mode [ 297.278772][T10616] nlmon0: entered promiscuous mode [ 297.297916][T10616] nlmon0: entered allmulticast mode [ 297.320246][T10616] caif0: entered promiscuous mode [ 297.334399][T10616] caif0: entered allmulticast mode [ 297.352912][T10616] net_ratelimit: 44 callbacks suppressed [ 297.352930][T10616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.953234][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 297.961032][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 297.971940][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 298.850658][T10645] loop3: detected capacity change from 0 to 1024 [ 298.878351][T10649] overlayfs: missing 'workdir' [ 298.883015][T10645] EXT4-fs: inline encryption not supported [ 298.901229][T10645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.915834][T10645] ext4: Unknown parameter 'fowner' [ 300.509649][T10665] loop3: detected capacity change from 0 to 256 [ 301.112877][T10673] random: crng reseeded on system resumption [ 301.834927][T10672] can: request_module (can-proto-0) failed. [ 302.854521][T10685] overlayfs: missing 'workdir' [ 307.291254][T10710] loop3: detected capacity change from 0 to 256 [ 308.072985][T10722] random: crng reseeded on system resumption [ 309.076764][T10726] overlayfs: missing 'workdir' [ 309.939121][T10720] can: request_module (can-proto-0) failed. [ 310.415079][T10734] loop3: detected capacity change from 0 to 256 [ 310.477503][T10734] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.522879][T10734] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 310.578407][T10734] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 313.910822][T10769] overlayfs: failed to clone upperpath [ 316.521638][ T5835] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 316.727620][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 316.759908][ T5835] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 316.801603][ T5835] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 316.821292][ T5835] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 316.845064][ T5835] usb 4-1: config 250 has no interface number 0 [ 316.854786][ T5835] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 316.883684][ T5835] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.941166][ T5835] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.981502][ T5835] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.020238][ T5835] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 317.079239][ T5835] usb 4-1: config 250 interface 228 has no altsetting 0 [ 317.119440][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 317.132159][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 317.160063][ T5835] usb 4-1: Product: syz [ 317.188824][ T5835] usb 4-1: SerialNumber: syz [ 317.228959][ T5835] hub 4-1:250.228: bad descriptor, ignoring hub [ 317.257646][ T5835] hub: probe of 4-1:250.228 failed with error -5 [ 317.465415][ T5835] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 317.507333][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.527386][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.543834][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.551686][ T5835] usb 4-1: USB disconnect, device number 14 [ 317.593313][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.594885][ T5835] usblp0: removed [ 317.625155][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.639973][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.752324][T10802] overlayfs: failed to clone upperpath [ 317.762585][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.770514][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.785381][ T5798] syz-executor (5798) used greatest stack depth: 20552 bytes left [ 318.071757][ T5835] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 318.168838][T10808] overlayfs: disabling nfs_export due to verity=on [ 318.177702][T10808] overlayfs: conflicting options: userxattr,verity=on [ 318.295466][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.313759][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 318.420726][T10798] chnl_net:caif_netlink_parms(): no params data found [ 318.454528][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.515580][ T5835] usb 4-1: no configurations [ 318.545501][ T5835] usb 4-1: can't read configurations, error -22 [ 318.598069][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.766384][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.034210][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.051232][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.051624][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.051962][T10798] bridge_slave_0: entered allmulticast mode [ 319.053526][T10798] bridge_slave_0: entered promiscuous mode [ 319.060501][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.078633][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.078859][T10798] bridge_slave_1: entered allmulticast mode [ 319.080446][T10798] bridge_slave_1: entered promiscuous mode [ 319.206005][T10822] loop5: detected capacity change from 0 to 7 [ 319.207897][ T5783] Dev loop5: unable to read RDB block 7 [ 319.207941][ T5783] loop5: unable to read partition table [ 319.208199][ T5783] loop5: partition table beyond EOD, truncated [ 319.224855][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.225011][T10822] Dev loop5: unable to read RDB block 7 [ 319.225053][T10822] loop5: unable to read partition table [ 319.225293][T10822] loop5: partition table beyond EOD, truncated [ 319.225329][T10822] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 319.235010][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.368813][T10798] team0: Port device team_slave_0 added [ 319.387240][T10798] team0: Port device team_slave_1 added [ 319.555411][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.555430][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.555455][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.557908][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.557926][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.557951][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.753465][ T5800] Bluetooth: hci4: command tx timeout [ 319.984188][T10798] hsr_slave_0: entered promiscuous mode [ 320.026456][T10798] hsr_slave_1: entered promiscuous mode [ 320.050916][T10798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.075001][T10798] Cannot create hsr debugfs directory [ 320.389627][T10839] overlayfs: disabling nfs_export due to verity=on [ 320.422973][T10839] overlayfs: conflicting options: userxattr,verity=on [ 321.195623][ T28] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 321.942253][ T5800] Bluetooth: hci4: command tx timeout [ 322.182052][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 322.212699][ T28] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 322.232018][ T28] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 322.251975][ T28] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 322.285534][ T28] usb 3-1: config 250 has no interface number 0 [ 322.297122][ T28] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 322.330774][ T28] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 322.361701][ T28] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.394438][ T28] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.471579][ T28] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 322.512858][ T28] usb 3-1: config 250 interface 228 has no altsetting 0 [ 322.548308][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 322.581753][ T28] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 322.631887][ T28] usb 3-1: Product: syz [ 322.636245][ T28] usb 3-1: SerialNumber: syz [ 322.664073][ T28] hub 3-1:250.228: bad descriptor, ignoring hub [ 322.688374][ T28] hub: probe of 3-1:250.228 failed with error -5 [ 322.902682][ T28] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 322.984612][ T28] usb 3-1: USB disconnect, device number 14 [ 322.989650][T10876] overlayfs: disabling nfs_export due to verity=on [ 323.011228][ T28] usblp0: removed [ 323.016941][T10876] overlayfs: conflicting options: userxattr,verity=on [ 323.374310][T10883] loop3: detected capacity change from 0 to 1024 [ 323.406244][T10883] EXT4-fs: inline encryption not supported [ 323.461720][T10883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.517594][T10883] ext4: Unknown parameter 'fowner' [ 323.531732][ T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 323.618911][ T1094] hsr_slave_0: left promiscuous mode [ 323.637271][ T1094] hsr_slave_1: left promiscuous mode [ 323.661121][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.701646][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.732951][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.762342][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.828291][ T1094] veth1_macvtap: left promiscuous mode [ 323.836733][ T1094] veth0_macvtap: left promiscuous mode [ 323.843659][ T1094] veth1_vlan: left promiscuous mode [ 323.851811][ T1094] veth0_vlan: left promiscuous mode [ 323.859979][ T5783] blk_print_req_error: 25 callbacks suppressed [ 323.859998][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.070691][ T5800] Bluetooth: hci4: command tx timeout [ 324.192392][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 325.657152][ T28] usb 3-1: device descriptor read/all, error -71 [ 326.154060][ T5800] Bluetooth: hci4: command tx timeout [ 326.863636][ T1094] team_slave_1 (unregistering): left promiscuous mode [ 326.875348][ T1094] team_slave_1 (unregistering): left allmulticast mode [ 326.901634][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 326.985681][ T1094] team_slave_0 (unregistering): left promiscuous mode [ 326.995685][ T1094] team_slave_0 (unregistering): left allmulticast mode [ 327.008938][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 327.075055][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.087078][ T1094] bond_slave_1 (unregistering): left promiscuous mode [ 327.096896][ T1094] bond_slave_1 (unregistering): left allmulticast mode [ 327.193540][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.207778][ T1094] bond_slave_0 (unregistering): left promiscuous mode [ 327.216576][ T1094] bond_slave_0 (unregistering): left allmulticast mode [ 327.219634][T10929] overlayfs: conflicting options: userxattr,redirect_dir=on [ 327.981660][ T5835] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.006403][ T1094] bond0 (unregistering): Released all slaves [ 328.059703][T10798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.139258][T10798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.166840][T10798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.184377][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 328.197340][ T5835] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 328.231501][ T5835] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 328.251934][ T5835] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 328.276841][T10798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.285698][ T5835] usb 4-1: config 250 has no interface number 0 [ 328.294470][ T5835] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 328.326204][ T5835] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 328.341251][ T5835] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.368263][ T5835] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 328.400491][ T5835] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 328.427816][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 328.432059][ T5835] usb 4-1: config 250 interface 228 has no altsetting 0 [ 328.464994][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 328.476627][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 328.493949][ T5835] usb 4-1: Product: syz [ 328.499290][ T5835] usb 4-1: SerialNumber: syz [ 328.544535][ T5835] hub 4-1:250.228: bad descriptor, ignoring hub [ 328.585913][ T5835] hub: probe of 4-1:250.228 failed with error -5 [ 328.775179][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.798535][ T5835] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 329.903744][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.059300][T10951] wg2: entered promiscuous mode [ 330.064721][T10951] wg2: entered allmulticast mode [ 330.166326][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.175332][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.278787][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.287493][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.966590][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.167305][T10798] veth0_vlan: entered promiscuous mode [ 331.228114][T10798] veth1_vlan: entered promiscuous mode [ 331.393959][T10798] veth0_macvtap: entered promiscuous mode [ 331.446397][T10798] veth1_macvtap: entered promiscuous mode [ 331.478150][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.495825][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.511100][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.525332][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.564211][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.597969][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.618229][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.694600][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.740666][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.760132][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.789599][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.801255][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.815056][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.832898][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.889832][T10798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.921172][T10798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.960618][T10798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.983744][T10798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.173122][ T5835] usb 4-1: USB disconnect, device number 17 [ 332.209808][ T5835] usblp0: removed [ 332.318820][T10697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.351959][T10697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.454405][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.486185][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.228916][T11013] fuse: Bad value for 'fd' [ 333.712042][ T5835] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 334.701673][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 334.713297][ T5835] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 334.731280][ T5835] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 334.731312][ T5835] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 334.731335][ T5835] usb 3-1: config 250 has no interface number 0 [ 334.762810][ T5835] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 334.775644][ T5835] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 334.787469][ T5835] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.803357][ T5835] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.816120][ T5835] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 334.846436][ T5835] usb 3-1: config 250 interface 228 has no altsetting 0 [ 334.857627][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 334.880633][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 334.910655][ T5835] usb 3-1: Product: syz [ 334.937811][ T5835] usb 3-1: SerialNumber: syz [ 334.974048][ T5835] hub 3-1:250.228: bad descriptor, ignoring hub [ 335.025483][ T5835] hub: probe of 3-1:250.228 failed with error -5 [ 335.928101][ T5835] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 336.158852][ T5835] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 337.501543][ T5835] usb 3-1: device not accepting address 17, error -71 [ 337.976984][T11074] fuse: Bad value for 'fd' [ 338.343485][ T5835] usb 3-1: USB disconnect, device number 17 [ 338.414462][ T5835] usblp0: removed [ 338.582196][ T786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 338.864236][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 339.153581][ T786] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 339.182352][T11087] random: crng reseeded on system resumption [ 339.212596][ T786] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 339.312929][ T786] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 339.380004][ T786] usb 4-1: config 250 has no interface number 0 [ 339.423069][ T786] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 339.481094][ T786] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.517714][ T786] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.546059][ T786] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.591705][ T786] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 339.638431][ T786] usb 4-1: config 250 interface 228 has no altsetting 0 [ 339.662719][ T786] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 339.673380][ T786] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 339.696353][ T786] usb 4-1: Product: syz [ 339.711549][ T786] usb 4-1: SerialNumber: syz [ 339.770032][ T786] hub 4-1:250.228: bad descriptor, ignoring hub [ 339.789147][ T786] hub: probe of 4-1:250.228 failed with error -5 [ 339.960476][T11098] fuse: Bad value for 'fd' [ 339.978971][ T786] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 340.138056][T11100] loop1: detected capacity change from 0 to 256 [ 341.055237][T11113] can: request_module (can-proto-0) failed. [ 342.679121][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 343.011905][T11150] loop1: detected capacity change from 0 to 256 [ 343.419065][T11155] random: crng reseeded on system resumption [ 344.522353][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 344.534613][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 344.802691][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 344.826598][T11168] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 345.596572][ T28] usb 4-1: USB disconnect, device number 18 [ 345.769125][T11182] loop1: detected capacity change from 0 to 16 [ 346.047705][T11182] erofs: (device loop1): mounted with root inode @ nid 36. [ 346.255661][ T28] usblp0: removed [ 346.293985][T11181] can: request_module (can-proto-0) failed. [ 347.820701][T11214] loop1: detected capacity change from 0 to 256 [ 347.840194][T11212] loop2: detected capacity change from 0 to 1764 [ 348.144462][ T7130] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.380068][T11217] random: crng reseeded on system resumption [ 349.071954][T11216] can: request_module (can-proto-0) failed. [ 349.647480][T11223] fuse: root generation should be zero [ 350.527194][T11228] loop1: detected capacity change from 0 to 1024 [ 350.567477][T11228] EXT4-fs: inline encryption not supported [ 350.613093][T11228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.619813][T11228] ext4: Unknown parameter 'fowner' [ 350.914300][T11242] loop2: detected capacity change from 0 to 256 [ 351.020482][T11245] fuse: Bad value for 'fd' [ 351.640800][T11253] random: crng reseeded on system resumption [ 352.330116][T11251] can: request_module (can-proto-0) failed. [ 354.332452][T11283] fuse: Bad value for 'fd' [ 354.782874][T11297] loop1: detected capacity change from 0 to 1764 [ 354.819242][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.878214][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.895819][ T5783] buffer_io_error: 25 callbacks suppressed [ 354.895838][ T5783] Buffer I/O error on dev loop1, logical block 0, async page read [ 354.911783][ T5783] udevd: attempt to access beyond end of device [ 354.911783][ T5783] loop1: rw=0, sector=4, nr_sectors = 4 limit=0 [ 354.943352][ T5783] Buffer I/O error on dev loop1, logical block 1, async page read [ 357.660240][T11334] loop2: detected capacity change from 0 to 1764 [ 359.025695][T11352] fuse: Bad value for 'fd' [ 362.027644][T11384] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 369.519096][T11387] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 479.641351][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 479.648387][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11457/3:b..l [ 479.657093][ C1] rcu: (detected by 1, t=10503 jiffies, g=53253, q=189 ncpus=2) [ 479.664867][ C1] task:syz.3.2025 state:R running task stack:27016 pid:11457 ppid:5796 flags:0x00004000 [ 479.676764][ C1] Call Trace: [ 479.680092][ C1] [ 479.683059][ C1] __schedule+0x14d2/0x44d0 [ 479.687628][ C1] ? mark_lock+0x94/0x320 [ 479.692002][ C1] ? asan.module_dtor+0x20/0x20 [ 479.696921][ C1] ? preempt_schedule+0xab/0xc0 [ 479.701819][ C1] preempt_schedule_common+0x82/0xc0 [ 479.707153][ C1] preempt_schedule+0xab/0xc0 [ 479.711879][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 479.717565][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 479.722636][ C1] preempt_schedule_thunk+0x1a/0x30 [ 479.727888][ C1] _raw_spin_unlock+0x3a/0x40 [ 479.732600][ C1] filemap_map_pages+0x1069/0x1630 [ 479.737761][ C1] ? filemap_map_pages+0x154/0x1630 [ 479.743018][ C1] ? filemap_read_folio+0x760/0x760 [ 479.748277][ C1] handle_mm_fault+0x379b/0x4920 [ 479.753277][ C1] ? handle_mm_fault+0xd1/0x4920 [ 479.759673][ C1] ? lock_vma_under_rcu+0x526/0x650 [ 479.764937][ C1] ? numa_migrate_prep+0x350/0x350 [ 479.770122][ C1] ? do_user_addr_fault+0x1c3/0x12e0 [ 479.775460][ C1] do_user_addr_fault+0xad0/0x12e0 [ 479.780628][ C1] ? rcu_is_watching+0x15/0xb0 [ 479.785448][ C1] exc_page_fault+0x67/0x110 [ 479.790183][ C1] asm_exc_page_fault+0x26/0x30 [ 479.795065][ C1] RIP: 0033:0x7fa6e2e6f0cd [ 479.799512][ C1] RSP: 002b:00007fff08e86930 EFLAGS: 00010202 [ 479.805622][ C1] RAX: 000000110c2f0000 RBX: 00007fa6e3d15720 RCX: 0000000000000002 [ 479.813636][ C1] RDX: 00000000000006d1 RSI: 0000000000003a9b RDI: 0000000000000004 [ 479.821640][ C1] RBP: ffffffff817ea6d1 R08: 00007fa6e31e6038 R09: 00007fa6e31d2000 [ 479.829648][ C1] R10: 00007fa6e29ff008 R11: 0000000000000000 R12: 0000000000000000 [ 479.837660][ C1] R13: 0000000000000000 R14: ffffffff817eadf7 R15: 0000000000000138 [ 479.845669][ C1] ? cgroup_rstat_updated+0x27/0x360 [ 479.851020][ C1] ? cpuset_init_fs_context+0xd1/0x180 [ 479.856533][ C1] [ 479.859583][ C1] rcu: rcu_preempt kthread starved for 10523 jiffies! g53253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 479.870811][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 479.880807][ C1] rcu: RCU grace-period kthread stack dump: [ 479.886717][ C1] task:rcu_preempt state:R running task stack:27272 pid:17 ppid:2 flags:0x00004000 [ 479.897557][ C1] Call Trace: [ 479.900868][ C1] [ 479.903830][ C1] __schedule+0x14d2/0x44d0 [ 479.908397][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 479.914332][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 479.919583][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 479.925521][ C1] ? asan.module_dtor+0x20/0x20 [ 479.930421][ C1] ? enqueue_timer+0x225/0x530 [ 479.935259][ C1] ? __mod_timer+0x984/0xdb0 [ 479.939912][ C1] schedule+0xbd/0x170 [ 479.944043][ C1] schedule_timeout+0x160/0x280 [ 479.948930][ C1] ? console_conditional_schedule+0x40/0x40 [ 479.954862][ C1] ? update_process_times+0x1b0/0x1b0 [ 479.960286][ C1] ? prepare_to_swait_event+0x339/0x360 [ 479.965894][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 479.970788][ C1] ? rcu_gp_init+0x110e/0x1510 [ 479.975605][ C1] ? rcu_gp_kthread+0x380/0x380 [ 479.980499][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 479.986546][ C1] ? rcu_gp_init+0x1510/0x1510 [ 479.991441][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 479.996347][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.001586][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 480.006837][ C1] rcu_gp_kthread+0x99/0x380 [ 480.011486][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 480.016645][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 480.021625][ C1] ? __kthread_parkme+0x162/0x1c0 [ 480.026705][ C1] kthread+0x2fa/0x390 [ 480.030813][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 480.035980][ C1] ? kthread_blkcg+0xd0/0xd0 [ 480.040601][ C1] ret_from_fork+0x48/0x80 [ 480.045054][ C1] ? kthread_blkcg+0xd0/0xd0 [ 480.049673][ C1] ret_from_fork_asm+0x11/0x20 [ 480.054500][ C1] [ 480.057548][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 480.063896][ C1] CPU: 1 PID: 11452 Comm: syz.2.2024 Not tainted syzkaller #0 [ 480.071380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.081475][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90 [ 480.087503][ C1] Code: 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 32 9a 10 09 66 90 41 57 41 56 53 66 90 e8 94 42 1a 09 e8 8f 2f 2e 00 fb 5b <41> 5e 41 5f c3 f3 0f 1e fa 49 be 00 00 00 00 00 fc ff df 49 89 ff [ 480.107142][ C1] RSP: 0018:ffffc900039e78e8 EFLAGS: 00000282 [ 480.113283][ C1] RAX: 4b7c2e26b34ba200 RBX: ffff8880b8f3cf48 RCX: 4b7c2e26b34ba200 [ 480.121289][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc63c0 [ 480.129288][ C1] RBP: ffffc900039e7ae8 R08: ffffffff8e4a836f R09: 1ffffffff1c9506d [ 480.137291][ C1] R10: dffffc0000000000 R11: fffffbfff1c9506e R12: dffffc0000000000 [ 480.145296][ C1] R13: ffff8880b8f3c200 R14: ffff88802ce88000 R15: ffff88802ce88000 [ 480.153302][ C1] FS: 00007f1a50a1f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 480.162263][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.168876][ C1] CR2: 00007fa8471156c0 CR3: 000000007ba65000 CR4: 00000000003526e0 [ 480.176909][ C1] Call Trace: [ 480.180214][ C1] [ 480.183173][ C1] __schedule+0x171e/0x44d0 [ 480.187747][ C1] ? asan.module_dtor+0x20/0x20 [ 480.192643][ C1] ? futex_wait_queue+0x9d/0x1b0 [ 480.197629][ C1] ? plist_add+0x3d8/0x490 [ 480.202093][ C1] schedule+0xbd/0x170 [ 480.206217][ C1] ? futex_wait_queue+0x27/0x1b0 [ 480.211183][ C1] futex_wait_queue+0x138/0x1b0 [ 480.216075][ C1] futex_wait+0x19f/0x530 [ 480.220447][ C1] ? futex_wait_setup+0x260/0x260 [ 480.225541][ C1] do_futex+0x2ff/0x3e0 [ 480.229731][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 480.234529][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 480.240278][ C1] ? arch_do_signal_or_restart+0x2d1/0x780 [ 480.246158][ C1] __se_sys_futex+0x36f/0x3f0 [ 480.250869][ C1] ? bpf_trace_run2+0xde/0x3c0 [ 480.255674][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 480.260485][ C1] ? __x64_sys_futex+0x21/0xf0 [ 480.265283][ C1] do_syscall_64+0x55/0xb0 [ 480.269740][ C1] ? clear_bhb_loop+0x40/0x90 [ 480.274451][ C1] ? clear_bhb_loop+0x40/0x90 [ 480.279162][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.285092][ C1] RIP: 0033:0x7f1a4fb8eec9 [ 480.289537][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.309180][ C1] RSP: 002b:00007f1a50a1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 480.317633][ C1] RAX: ffffffffffffffda RBX: 00007f1a4fde5fa8 RCX: 00007f1a4fb8eec9 [ 480.325667][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a4fde5fa8 [ 480.333680][ C1] RBP: 00007f1a4fde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 480.341690][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.349716][ C1] R13: 00007f1a4fde6038 R14: 00007ffee6734c50 R15: 00007ffee6734d38 [ 480.357742][ C1]