last executing test programs: 11m15.48714989s ago: executing program 2 (id=1651): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x9, 0x8, 0xfffffffffffffffc, 0x6, 0xffffffffffffffff}) sched_setscheduler(r1, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x74, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@generic="ecec35ba9a94e888f3dff41bfc2c812835c32223bdb350e5e2b30cebcc2ace5a0481aee8ba1ab6f8cdc788090a9c82925aae1ff617b3f8afea8490cb30274289e9e271118466bfc9c4635c6d1c9f070c72", @nested={0x4, 0x4c}, @typed={0x8, 0x152, 0x0, 0x0, @fd=r2}]}, 0x74}}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r7, 0x0, 0x0) write(r4, &(0x7f0000000200)='usb1', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x24008080) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0xffffe000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000140)=0x6) 11m13.7244059s ago: executing program 2 (id=1655): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, &(0x7f0000001600)=0xfffffebf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 11m8.927342487s ago: executing program 2 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x588b}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 10m58.259885468s ago: executing program 2 (id=1684): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r3 = getpid() r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x1c3142, 0x0) dup2(0xffffffffffffffff, r5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000000)=[{0x0, 0x4, 0x7, 0x5ec}, {0x4, 0x7, 0x4, 0x7}, {0x4, 0x2, 0x5, 0x4}, {0x0, 0x7, 0x81, 0x4}, {0x4c, 0x89, 0x2, 0x5}, {0x81, 0x10, 0x5}, {0xe, 0x9e, 0xba, 0x10}, {0x7, 0x6, 0x90, 0x10}]}, 0x10) 10m55.393525092s ago: executing program 2 (id=1688): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@generic={0x23, "57815cdeea606aeb193b04509c20a908416a6894dbcdedc04f4d1740915255ea7a525fcd051c2baeb891b39db12ae77e3dfdd8c494ebcd1924887a8d717e043c45f092fef269b355c4b3e1e009c70eb8ba22fc3ea5c2b1cdc7d01c9a2b2014472ea26339286f4a71b524f572bb370fb8389d0305cd38f475d64c33b51d23"}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) clock_settime(0x8d71ca88fffffffd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b00010324bd8822ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 10m50.923882928s ago: executing program 2 (id=1695): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m34.759913444s ago: executing program 32 (id=1695): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.421115888s ago: executing program 3 (id=2930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, 0x0) 18.56049336s ago: executing program 0 (id=3009): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 17.767534993s ago: executing program 0 (id=3011): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x588b}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 17.751423568s ago: executing program 5 (id=3012): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 17.564274877s ago: executing program 1 (id=3013): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(0x0, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 15.097925185s ago: executing program 5 (id=3014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000040)={0x1bad1b0, &(0x7f00000000c0)=[{@fixed}]}) 14.288205239s ago: executing program 1 (id=3016): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0000000000080028"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x41) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91", 0x1}], 0x1}}], 0x1, 0x2090) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) write(r1, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e3", 0x222) 14.212693493s ago: executing program 3 (id=2944): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") ioctl(r6, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a") sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000081e04193f4000010203010902d70003011080220904000000010100000a240100803e000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000640)=@string={0x2}}]}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002000306010400eeff00001c000100ac9300007454e0c1aab936f1d1e89c47cd660dd56d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="f8153e6d54a31d47abc81a9ce047bcea11c6aed2aba74c7a955394f6c2362a5e6f67d889", 0x24}], 0x1}}], 0x1, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 14.190231662s ago: executing program 4 (id=3017): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x48401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x47, 0x0, @buffer={0x0, 0x5f, &(0x7f0000000100)=""/95}, &(0x7f00000001c0)="3bc914c2e99eb0e1b73b56365fbff01789ded00bdff2f7abd9f0934bf1512a012d0c0ab7e2cd22cee274fca4791ad16c27e6ba0929b562c68a522cdfd4eb0003745e0bcc51e8ec", 0x0, 0x3, 0x10017, 0x2, 0x0}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) 11.13895511s ago: executing program 5 (id=3018): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") ioctl(r6, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00"/164) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000081e04193f4000010203010902d70003011080220904000000010100000a240100803e000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000640)=@string={0x2}}]}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="f8153e6d54a31d47abc81a9ce047bcea11c6aed2aba74c7a955394f6c2362a5e6f67d889", 0x24}], 0x1}}], 0x1, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) 11.115350105s ago: executing program 4 (id=3019): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 10.987374881s ago: executing program 3 (id=3020): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) getsockname$tipc(r1, 0x0, &(0x7f0000000100)) 10.93280383s ago: executing program 1 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x0, 0x40000) fanotify_mark(r0, 0x441, 0x1002, r0, 0x0) r1 = timerfd_create(0x0, 0x80800) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000020c0)=""/4106, 0x100a}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xffffffffffffff3c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x204) r3 = socket$inet(0x2, 0x1, 0x6) bind(r3, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r3, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) write(r4, 0x0, 0x0) 10.553215383s ago: executing program 0 (id=3022): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 10.319595953s ago: executing program 3 (id=3023): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x48401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x44, 0x0, @buffer={0x0, 0x5f, &(0x7f0000000100)=""/95}, &(0x7f00000001c0)="3bc914c2e99eb0e1b73b56365fbff01789ded00bdff2f7abd9f0934bf1512a012d0c0ab7e2cd22cee274fca4791ad16c27e6ba0929b562c68a522cdfd4eb0003745e0bcc", 0x0, 0x3, 0x10017, 0x2, 0x0}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) 8.620631356s ago: executing program 0 (id=3024): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r6, 0x0, 0xb00) 7.86174726s ago: executing program 3 (id=3025): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(0x0, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 7.306641507s ago: executing program 1 (id=3026): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000500)={{0x3, 0x4, 0x8edf, 0x1, 'syz0\x00', 0x5}, 0x6, 0x4, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['\x16%*\\!!\'!}\':\x00'], 0xc}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) bind$bt_hci(r1, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) 7.175403642s ago: executing program 5 (id=3027): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r4 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001580)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r1, &(0x7f00000014c0)=0x80, &(0x7f0000001500)=@x25={0x9, @remote}, 0x0, 0x800, 0x0, {0x0, 0x0, 0x4}}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ff9000/0x4000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x82}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffff24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r6, 0x40046f41, &(0x7f0000000300)) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) openat(r7, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) 6.597857487s ago: executing program 0 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0xc}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0xaa3a6000) socket$xdp(0x2c, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000800)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\x8esl\xd1\r\xc3\x9fv]\xd5*\xd4\xaa\'\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r\x04\x00\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\x0eJ\x18\xf6\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v\xbaR\n/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\b|\x7f\xe3\xc4*Z 4\xe8S$\x04\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?o\x04\xaaim\xae\xfe\xd2f\xa3\x96\xd7\xb4c)r{\r#\xdd\x90\r\x00\x00\xec\xd4\xff\x9f\x136zR-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x9fJ\x8d\xa0&\xf9\xce\xb7j\x18\xec7(\x94}4\xf1\xfe\x86\x9e\xa9\xca8\xbc\xb9\xd8,Q;\x8a\xc2\xbf\x04\xa3Q\x1c\xfb\x00'/935, 0x7) fallocate(r3, 0x0, 0xb, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000412000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.387885391s ago: executing program 3 (id=3029): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="d60a0000010400006111a00000000000180000000000000000000000000000009500000000000000e5ecfc01e98f85094b6cd1405518506eaf0f3fbe93375a755491f5d9e031870aba42fd796acfeaa7730889bc43ae94ac94c739eb38a28d5005a88ef64cbe1c93daca75674795d1dbf1a3b393b12a09fe9eb8d1f982c04d9d67234d097470dff07e8499002bd0d754cfa81dda3929a80163731b1f5d6d543d4924d64906c54784368091114287579aacfe262960acaca86e25a747f068ec3cf3"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xcc94, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, 0x0, 0x81802) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000040)={0x0, 0x7, [0x7, 0x9, 0x8000, 0xfffffffffffffff7, 0x7ff, 0xea]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x64) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)}, 0x90) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f00000003c0)) 6.058170584s ago: executing program 4 (id=3030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="00000000000000009c02000014000000b70300000000000055090100000000009500000000000000bf91000000000000b702bb480f2f01"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xdc) 5.788560663s ago: executing program 5 (id=3031): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) 5.771573411s ago: executing program 1 (id=3032): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(0x0, 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='/e', 0x2) 5.631204212s ago: executing program 5 (id=3033): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x2}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)) 5.152900207s ago: executing program 4 (id=3034): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000ffa000/0x3000)=nil) 2.841082311s ago: executing program 4 (id=3035): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fremovexattr(r5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 2.69020404s ago: executing program 1 (id=3036): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c49") bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 2.549211895s ago: executing program 0 (id=3037): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d") ioctl(r6, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00"/164) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xa) syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000081e04193f4000010203010902d70003011080220904000000010100000a240100803e000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000640)=@string={0x2}}]}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmmsg$inet6(r3, 0x0, 0x0, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) 0s ago: executing program 4 (id=3038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50) iopl(0x3) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) kernel console output (not intermixed with test programs): to 40427 [ 484.799391][T10958] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 484.799416][T10958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 484.800424][T10958] F2FS-fs (loop4): Image doesn't support compression [ 484.835272][T10958] F2FS-fs (loop4): invalid crc value [ 485.067911][T10992] overlayfs: failed to resolve './file1': -2 [ 486.295271][T10958] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 486.344513][T10958] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 486.344565][T10958] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 486.344650][T10958] F2FS-fs (loop4): Start checkpoint disabled! [ 486.416430][T10958] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 489.295999][T11025] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 490.889393][ T5714] legousbtower 4-1:14.57: interrupt endpoints not found [ 490.946533][ T5714] usb 4-1: USB disconnect, device number 11 [ 491.276390][T11036] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 491.371238][T11037] bridge0: port 3(syz_tun) entered blocking state [ 491.371401][T11037] bridge0: port 3(syz_tun) entered disabled state [ 491.371531][T11037] syz_tun: entered allmulticast mode [ 491.372541][T11037] syz_tun: entered promiscuous mode [ 491.372861][T11037] bridge0: port 3(syz_tun) entered blocking state [ 491.372910][T11037] bridge0: port 3(syz_tun) entered forwarding state [ 493.239124][ T9] libceph: connect (1)[c::]:6789 error -22 [ 493.239287][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 493.497556][ T9] libceph: connect (1)[c::]:6789 error -22 [ 493.497726][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 494.017789][ T9] libceph: connect (1)[c::]:6789 error -22 [ 494.027041][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 494.098395][T11054] ceph: No mds server is up or the cluster is laggy [ 494.434546][T11046] loop1: detected capacity change from 0 to 40427 [ 494.466207][T11046] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 494.473986][T11046] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 494.483771][T11046] F2FS-fs (loop1): Image doesn't support compression [ 494.495324][T11046] F2FS-fs (loop1): invalid crc value [ 494.576507][T11046] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 494.593914][T11046] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 494.601728][T11046] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 494.612720][T11046] F2FS-fs (loop1): Start checkpoint disabled! [ 494.677383][T11046] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 494.678505][T11046] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 494.678530][T11046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 494.727976][T10907] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 494.986977][T10907] usb 5-1: Using ep0 maxpacket: 32 [ 495.417800][T10907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.417865][T10907] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 495.474631][T10907] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 495.483241][T10907] usb 5-1: config 14 has no interface number 0 [ 495.483610][T10907] usb 5-1: config 14 interface 57 has no altsetting 0 [ 495.710824][T10907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.710913][T10907] usb 5-1: Product: syz [ 495.711008][T10907] usb 5-1: Manufacturer: syz [ 495.711101][T10907] usb 5-1: SerialNumber: syz [ 495.804336][T10131] kworker/u8:17: attempt to access beyond end of device [ 495.804336][T10131] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 495.804433][T10131] CPU: 1 UID: 0 PID: 10131 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.804461][T10131] Tainted: [L]=SOFTLOCKUP [ 495.804468][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.804479][T10131] Workqueue: writeback wb_workfn (flush-7:1) [ 495.804514][T10131] Call Trace: [ 495.804521][T10131] [ 495.804529][T10131] dump_stack_lvl+0xe8/0x150 [ 495.804558][T10131] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 495.804587][T10131] f2fs_write_end_bio+0x1211/0x16e0 [ 495.804617][T10131] ? blkg_put+0x22/0x240 [ 495.804657][T10131] __submit_merged_bio+0x258/0x6a0 [ 495.804679][T10131] ? rcu_is_watching+0x15/0xb0 [ 495.804706][T10131] __submit_merged_write_cond+0x3c9/0x4e0 [ 495.804738][T10131] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 495.804785][T10131] f2fs_write_data_pages+0x2a27/0x36f0 [ 495.804845][T10131] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.804869][T10131] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.804902][T10131] ? do_raw_spin_unlock+0xf5/0x200 [ 495.804958][T10131] ? finish_task_switch+0x412/0xc60 [ 495.804992][T10131] ? __schedule+0x1b40/0x59a0 [ 495.805153][T10131] ? irqentry_exit+0x218/0x910 [ 495.805203][T10131] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.805230][T10131] do_writepages+0x338/0x560 [ 495.805261][T10131] ? writeback_sb_inodes+0x450/0x1b00 [ 495.805294][T10131] __writeback_single_inode+0x136/0x1220 [ 495.805330][T10131] writeback_sb_inodes+0x9de/0x1b00 [ 495.805355][T10131] ? __lock_acquire+0x6df/0x2e50 [ 495.805379][T10131] ? sched_clock_cpu+0x74/0x440 [ 495.805434][T10131] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 495.805502][T10131] ? rcu_is_watching+0x15/0xb0 [ 495.805522][T10131] ? queue_io+0x2d3/0x470 [ 495.805552][T10131] wb_writeback+0x41c/0xad0 [ 495.805581][T10131] ? queue_io+0x291/0x470 [ 495.805612][T10131] ? __pfx_wb_writeback+0x10/0x10 [ 495.805646][T10131] ? wb_workfn+0x414/0x10f0 [ 495.805676][T10131] wb_workfn+0x431/0x10f0 [ 495.805702][T10131] ? __lock_acquire+0x6df/0x2e50 [ 495.805731][T10131] ? __pfx_wb_workfn+0x10/0x10 [ 495.805771][T10131] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 495.805824][T10131] ? lockdep_hardirqs_on+0x7a/0x110 [ 495.805854][T10131] ? lock_acquire+0x115/0x350 [ 495.805880][T10131] ? rcu_is_watching+0x15/0xb0 [ 495.805903][T10131] ? process_scheduled_works+0x97e/0x1630 [ 495.805927][T10131] process_scheduled_works+0xc4e/0x1630 [ 495.805981][T10131] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.806012][T10131] ? assign_work+0x3cf/0x5d0 [ 495.806047][T10131] worker_thread+0xa47/0xfb0 [ 495.806083][T10131] ? __kthread_parkme+0x71/0x1f0 [ 495.806118][T10131] kthread+0x388/0x470 [ 495.806136][T10131] ? __pfx_worker_thread+0x10/0x10 [ 495.806157][T10131] ? __pfx_kthread+0x10/0x10 [ 495.806176][T10131] ret_from_fork+0x514/0xb70 [ 495.806207][T10131] ? __pfx_ret_from_fork+0x10/0x10 [ 495.806233][T10131] ? __switch_to+0xc89/0x1420 [ 495.806260][T10131] ? __pfx_kthread+0x10/0x10 [ 495.806279][T10131] ret_from_fork_asm+0x1a/0x30 [ 495.806323][T10131] [ 495.882497][T10131] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 496.146768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 496.374317][T10907] legousbtower 5-1:14.57: interrupt endpoints not found [ 496.603407][ T9] usb 5-1: USB disconnect, device number 17 [ 497.756645][T11096] overlayfs: failed to resolve './file1': -2 [ 499.489186][T11114] loop0: detected capacity change from 0 to 1024 [ 499.537546][T11114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.610368][T11114] overlayfs: failed to resolve './bus': -2 [ 500.465098][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.392371][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.399223][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.489147][T11128] loop2: detected capacity change from 0 to 40427 [ 502.496267][T11128] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 502.504445][T11128] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 502.518519][T11128] F2FS-fs (loop2): Image doesn't support compression [ 502.528048][T11128] F2FS-fs (loop2): invalid crc value [ 502.605163][T11128] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 502.614381][ T5714] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 502.627900][T11128] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 502.635702][T11128] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 502.657394][T11128] F2FS-fs (loop2): Start checkpoint disabled! [ 502.817595][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 502.951471][ T5714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 502.951541][ T5714] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 503.104695][ T5714] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 503.104823][ T5714] usb 4-1: config 14 has no interface number 0 [ 503.104863][ T5714] usb 4-1: config 14 interface 57 has no altsetting 0 [ 503.307422][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.307466][ T5714] usb 4-1: Product: syz [ 503.307495][ T5714] usb 4-1: Manufacturer: syz [ 503.307513][ T5714] usb 4-1: SerialNumber: syz [ 503.350297][T11128] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 503.359767][T11128] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 503.359801][T11128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 504.501429][T10133] kworker/u8:19: attempt to access beyond end of device [ 504.501429][T10133] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 504.501525][T10133] CPU: 1 UID: 0 PID: 10133 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.501552][T10133] Tainted: [L]=SOFTLOCKUP [ 504.501558][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.501569][T10133] Workqueue: writeback wb_workfn (flush-7:2) [ 504.501602][T10133] Call Trace: [ 504.501610][T10133] [ 504.501618][T10133] dump_stack_lvl+0xe8/0x150 [ 504.501647][T10133] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 504.501676][T10133] f2fs_write_end_bio+0x1211/0x16e0 [ 504.501714][T10133] ? blkg_put+0x22/0x240 [ 504.501752][T10133] __submit_merged_bio+0x258/0x6a0 [ 504.501773][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.501799][T10133] __submit_merged_write_cond+0x3c9/0x4e0 [ 504.501830][T10133] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 504.501877][T10133] f2fs_write_data_pages+0x2a27/0x36f0 [ 504.501937][T10133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.501976][T10133] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 504.502027][T10133] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 504.502171][T10133] ? __lock_acquire+0x6df/0x2e50 [ 504.502203][T10133] ? set_shrinker_bit+0x7c/0x350 [ 504.502229][T10133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.502257][T10133] do_writepages+0x338/0x560 [ 504.502286][T10133] ? reacquire_held_locks+0x117/0x1a0 [ 504.502306][T10133] ? writeback_sb_inodes+0x450/0x1b00 [ 504.502338][T10133] __writeback_single_inode+0x136/0x1220 [ 504.502368][T10133] ? do_raw_spin_unlock+0xf5/0x200 [ 504.502394][T10133] writeback_sb_inodes+0x9de/0x1b00 [ 504.502419][T10133] ? __lock_acquire+0x6df/0x2e50 [ 504.502452][T10133] ? lock_acquire+0x115/0x350 [ 504.502475][T10133] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 504.502543][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.502564][T10133] ? queue_io+0x2d3/0x470 [ 504.502593][T10133] wb_writeback+0x41c/0xad0 [ 504.502622][T10133] ? queue_io+0x291/0x470 [ 504.502654][T10133] ? __pfx_wb_writeback+0x10/0x10 [ 504.502677][T10133] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.502724][T10133] wb_workfn+0x431/0x10f0 [ 504.502768][T10133] ? __pfx_wb_workfn+0x10/0x10 [ 504.502804][T10133] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.502837][T10133] ? lock_acquire+0x115/0x350 [ 504.502863][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.502886][T10133] ? process_scheduled_works+0x97e/0x1630 [ 504.502909][T10133] process_scheduled_works+0xc4e/0x1630 [ 504.502961][T10133] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.502990][T10133] ? assign_work+0x3cf/0x5d0 [ 504.503018][T10133] worker_thread+0xa47/0xfb0 [ 504.503055][T10133] ? __kthread_parkme+0x71/0x1f0 [ 504.503090][T10133] kthread+0x388/0x470 [ 504.503107][T10133] ? __pfx_worker_thread+0x10/0x10 [ 504.503128][T10133] ? __pfx_kthread+0x10/0x10 [ 504.503147][T10133] ret_from_fork+0x514/0xb70 [ 504.503177][T10133] ? __pfx_ret_from_fork+0x10/0x10 [ 504.503203][T10133] ? __switch_to+0xc89/0x1420 [ 504.503230][T10133] ? __pfx_kthread+0x10/0x10 [ 504.503249][T10133] ret_from_fork_asm+0x1a/0x30 [ 504.503291][T10133] [ 504.705356][T10133] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 504.705651][T10133] CPU: 0 UID: 0 PID: 10133 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.705677][T10133] Tainted: [L]=SOFTLOCKUP [ 504.705683][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.705696][T10133] Workqueue: writeback wb_workfn (flush-7:2) [ 504.705735][T10133] Call Trace: [ 504.705742][T10133] [ 504.705750][T10133] dump_stack_lvl+0xe8/0x150 [ 504.705779][T10133] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 504.705809][T10133] f2fs_write_end_bio+0x1211/0x16e0 [ 504.705855][T10133] __submit_merged_bio+0x258/0x6a0 [ 504.705876][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.705901][T10133] __submit_merged_write_cond+0x3c9/0x4e0 [ 504.705930][T10133] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 504.705976][T10133] f2fs_write_data_pages+0x2a27/0x36f0 [ 504.706032][T10133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.706066][T10133] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 504.706114][T10133] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 504.706150][T10133] ? __lock_acquire+0x6df/0x2e50 [ 504.706181][T10133] ? set_shrinker_bit+0x7c/0x350 [ 504.706205][T10133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 504.706230][T10133] do_writepages+0x338/0x560 [ 504.706257][T10133] ? reacquire_held_locks+0x117/0x1a0 [ 504.706277][T10133] ? writeback_sb_inodes+0x450/0x1b00 [ 504.706306][T10133] __writeback_single_inode+0x136/0x1220 [ 504.706331][T10133] ? do_raw_spin_unlock+0xf5/0x200 [ 504.706357][T10133] writeback_sb_inodes+0x9de/0x1b00 [ 504.706379][T10133] ? __lock_acquire+0x6df/0x2e50 [ 504.706409][T10133] ? lock_acquire+0x115/0x350 [ 504.706431][T10133] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 504.706499][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.706518][T10133] ? queue_io+0x2d3/0x470 [ 504.706545][T10133] wb_writeback+0x41c/0xad0 [ 504.706571][T10133] ? queue_io+0x291/0x470 [ 504.706601][T10133] ? __pfx_wb_writeback+0x10/0x10 [ 504.706623][T10133] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.706662][T10133] wb_workfn+0x431/0x10f0 [ 504.706700][T10133] ? __pfx_wb_workfn+0x10/0x10 [ 504.706744][T10133] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.706775][T10133] ? lock_acquire+0x115/0x350 [ 504.706799][T10133] ? rcu_is_watching+0x15/0xb0 [ 504.706820][T10133] ? process_scheduled_works+0x97e/0x1630 [ 504.706844][T10133] process_scheduled_works+0xc4e/0x1630 [ 504.706895][T10133] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.706923][T10133] ? assign_work+0x3cf/0x5d0 [ 504.706949][T10133] worker_thread+0xa47/0xfb0 [ 504.706985][T10133] ? __kthread_parkme+0x71/0x1f0 [ 504.707018][T10133] kthread+0x388/0x470 [ 504.707035][T10133] ? __pfx_worker_thread+0x10/0x10 [ 504.707054][T10133] ? __pfx_kthread+0x10/0x10 [ 504.707072][T10133] ret_from_fork+0x514/0xb70 [ 504.707100][T10133] ? __pfx_ret_from_fork+0x10/0x10 [ 504.707125][T10133] ? __switch_to+0xc89/0x1420 [ 504.707151][T10133] ? __pfx_kthread+0x10/0x10 [ 504.707169][T10133] ret_from_fork_asm+0x1a/0x30 [ 504.707209][T10133] [ 504.714930][ T5714] legousbtower 4-1:14.57: interrupt endpoints not found [ 504.722939][T10133] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 505.203692][ T5714] usb 4-1: USB disconnect, device number 12 [ 509.599087][T11193] device-mapper: table: 248:0: too large device [ 509.599263][T11193] device-mapper: ioctl: error adding target to table [ 509.947107][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 510.120691][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 510.132027][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 510.160612][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.160815][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.189467][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 510.238154][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.247083][ T9] usb 2-1: Product: syz [ 510.247134][ T9] usb 2-1: Manufacturer: syz [ 510.247252][ T9] usb 2-1: SerialNumber: syz [ 512.625258][ T9] usb 2-1: 0:1 : does not exist [ 512.713009][ T9] usb 2-1: USB disconnect, device number 13 [ 512.790081][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.238743][T11234] bridge0: port 3(syz_tun) entered blocking state [ 515.247522][T11234] bridge0: port 3(syz_tun) entered disabled state [ 515.249459][T11234] syz_tun: entered allmulticast mode [ 515.282239][T11234] syz_tun: entered promiscuous mode [ 515.322472][T11234] bridge0: port 3(syz_tun) entered blocking state [ 515.322567][T11234] bridge0: port 3(syz_tun) entered forwarding state [ 518.376631][T11248] ceph: No mds server is up or the cluster is laggy [ 518.377427][ T5714] libceph: connect (1)[c::]:6789 error -22 [ 518.377589][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 519.344909][ T5714] libceph: connect (1)[c::]:6789 error -22 [ 519.345093][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 519.647749][T10907] libceph: connect (1)[c::]:6789 error -22 [ 519.654084][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 519.923670][T10907] libceph: connect (1)[c::]:6789 error -22 [ 519.929773][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 520.630293][T11256] ceph: No mds server is up or the cluster is laggy [ 521.742144][T10907] libceph: connect (1)[c::]:6789 error -22 [ 521.757121][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 523.953097][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 528.968648][T11313] loop0: detected capacity change from 0 to 1024 [ 529.272739][T11313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.306352][T11313] overlayfs: failed to resolve './bus': -2 [ 529.925817][T11324] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 531.070830][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.503831][T10907] libceph: connect (1)[c::]:6789 error -22 [ 536.504002][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 536.757182][T10907] libceph: connect (1)[c::]:6789 error -22 [ 536.757362][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 537.277319][T10907] libceph: connect (1)[c::]:6789 error -22 [ 537.278420][T10907] libceph: mon0 (1)[c::]:6789 connect error [ 537.325542][T11359] ceph: No mds server is up or the cluster is laggy [ 537.368589][T11373] random: crng reseeded on system resumption [ 541.497980][T11396] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 542.453009][T11398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.470900][T11398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.480222][T11398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.489537][T11398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.501223][T11398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.224037][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 543.525945][ T9] libceph: connect (1)[c::]:6789 error -22 [ 543.526066][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 543.544699][ T5613] syz_tun (unregistering): left allmulticast mode [ 543.554322][ T5613] syz_tun (unregistering): left promiscuous mode [ 543.554441][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 543.622944][T11411] ceph: No mds server is up or the cluster is laggy [ 543.780013][ T9] libceph: connect (1)[c::]:6789 error -22 [ 543.791721][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 544.299524][ T5714] libceph: connect (1)[c::]:6789 error -22 [ 544.307296][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 544.597156][T11398] Bluetooth: hci5: command tx timeout [ 545.012795][T11425] syzkaller0: entered promiscuous mode [ 545.012840][T11425] syzkaller0: entered allmulticast mode [ 545.032433][T11425] tipc: Enabled bearer , priority 0 [ 545.049018][T11425] tipc: Resetting bearer [ 545.077843][T11424] tipc: Resetting bearer [ 545.197197][T11435] overlayfs: failed to resolve './file0': -2 [ 545.696985][T11424] tipc: Disabling bearer [ 546.722436][T11398] Bluetooth: hci5: command tx timeout [ 548.826852][T11398] Bluetooth: hci5: command tx timeout [ 549.251507][T11452] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 550.617540][T11461] device-mapper: table: 248:0: too large device [ 550.617617][T11461] device-mapper: ioctl: error adding target to table [ 550.911664][T11398] Bluetooth: hci5: command tx timeout [ 551.007628][ T1233] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 551.169835][ T1233] usb 4-1: not running at top speed; connect to a high speed hub [ 551.178315][ T1233] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 551.231651][ T1233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.242645][ T1233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.260479][ T1233] usb 4-1: language id specifier not provided by device, defaulting to English [ 551.298231][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.298274][ T1233] usb 4-1: Product: syz [ 551.306544][ T1233] usb 4-1: Manufacturer: syz [ 551.306632][ T1233] usb 4-1: SerialNumber: syz [ 552.510639][T11468] loop4: detected capacity change from 0 to 1024 [ 553.435234][T11468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.634592][ T1233] usb 4-1: 0:1 : does not exist [ 554.785675][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.078358][ T1233] usb 4-1: USB disconnect, device number 13 [ 555.233004][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.228696][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.236587][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.244477][T11397] bridge_slave_0: entered allmulticast mode [ 556.252678][T11397] bridge_slave_0: entered promiscuous mode [ 556.262320][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.270616][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.279424][T11397] bridge_slave_1: entered allmulticast mode [ 556.289910][T11397] bridge_slave_1: entered promiscuous mode [ 556.377506][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.393265][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.509541][T11397] team0: Port device team_slave_0 added [ 556.520852][T11397] team0: Port device team_slave_1 added [ 556.802505][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.802540][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.848627][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.860858][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.860881][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.860922][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.003569][T11510] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 557.028377][ T30] audit: type=1800 audit(1786469230.423:45): pid=11510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1749" name="file0" dev="overlay" ino=2034 res=0 errno=0 [ 558.145102][T11397] hsr_slave_0: entered promiscuous mode [ 558.146049][T11397] hsr_slave_1: entered promiscuous mode [ 558.146878][T11397] debugfs: 'hsr0' already exists in 'hsr' [ 558.146897][T11397] Cannot create hsr debugfs directory [ 558.577149][ T5807] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 558.807146][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 559.034367][ T5807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 559.043270][ T5807] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 559.067456][ T5807] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 559.067496][ T5807] usb 4-1: config 14 has no interface number 0 [ 559.067549][ T5807] usb 4-1: config 14 interface 57 has no altsetting 0 [ 559.105061][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.105104][ T5807] usb 4-1: Product: syz [ 559.105305][ T5807] usb 4-1: Manufacturer: syz [ 559.105324][ T5807] usb 4-1: SerialNumber: syz [ 559.181459][T11397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 559.204142][T11397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.223605][T11397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 559.331623][T11397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.339482][T11397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 559.395878][T11397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.403545][T11397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 559.412975][T11397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.399974][ T5807] legousbtower 4-1:14.57: interrupt endpoints not found [ 560.628031][ T1233] usb 4-1: USB disconnect, device number 14 [ 560.854352][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.911142][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.925995][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.926107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.939807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.939901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.161287][T11567] overlayfs: failed to resolve './file1': -2 [ 562.831566][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.831642][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.760897][T11615] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 564.976833][ T5807] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 565.156820][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 565.165708][ T5807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.165782][ T5807] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 565.184875][ T5807] usb 2-1: config 14 has an invalid interface number: 57 but max is 0 [ 565.184903][ T5807] usb 2-1: config 14 has no interface number 0 [ 565.184944][ T5807] usb 2-1: config 14 interface 57 has no altsetting 0 [ 565.209817][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.209851][ T5807] usb 2-1: Product: syz [ 565.209870][ T5807] usb 2-1: Manufacturer: syz [ 565.209888][ T5807] usb 2-1: SerialNumber: syz [ 565.713318][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.746945][ T5807] legousbtower 2-1:14.57: interrupt endpoints not found [ 565.952252][ T5714] usb 2-1: USB disconnect, device number 14 [ 566.479278][T11397] veth0_vlan: entered promiscuous mode [ 566.780917][T11397] veth1_vlan: entered promiscuous mode [ 567.329630][T11397] veth0_macvtap: entered promiscuous mode [ 567.344522][T11397] veth1_macvtap: entered promiscuous mode [ 567.405688][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.446173][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.532595][T10133] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.648164][ T4203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.688868][ T4203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.730191][ T906] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.290306][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.299170][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.001817][ T4203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.001861][ T4203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.256599][T11699] ALSA: mixer_oss: invalid OSS volume 'lo' [ 573.280598][ T30] audit: type=1800 audit(1786469246.673:46): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1788" name="file0" dev="overlay" ino=2028 res=0 errno=0 [ 574.860535][T11712] fuse: Bad value for 'fd' [ 577.300272][T11734] syzkaller1: entered promiscuous mode [ 577.307474][T11734] syzkaller1: entered allmulticast mode [ 578.127865][T11750] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 579.566573][T11752] udc dummy_udc.0: failed to start g1: -19 [ 579.571505][T11752] UDC core: g1: couldn't find an available UDC or it's busy [ 581.608353][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 581.966770][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 582.065756][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 582.065824][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 582.375536][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 582.375641][ T9] usb 5-1: config 14 has no interface number 0 [ 582.375685][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 582.558854][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.558901][ T9] usb 5-1: Product: syz [ 582.558932][ T9] usb 5-1: Manufacturer: syz [ 582.558950][ T9] usb 5-1: SerialNumber: syz [ 582.885408][T11778] fuse: Unknown parameter '0x0000000000000003' [ 584.082802][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 584.091369][ T9] usb 5-1: USB disconnect, device number 18 [ 589.369648][T11814] udc dummy_udc.0: failed to start g1: -19 [ 589.381973][T11814] UDC core: g1: couldn't find an available UDC or it's busy [ 592.777781][ T1233] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 592.956948][ T1233] usb 5-1: Using ep0 maxpacket: 32 [ 593.005252][ T1233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.009940][ T1233] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 593.032561][ T1233] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 593.033394][ T1233] usb 5-1: config 14 has no interface number 0 [ 593.036065][ T1233] usb 5-1: config 14 interface 57 has no altsetting 0 [ 593.058656][ T1233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.059004][ T1233] usb 5-1: Product: syz [ 593.059264][ T1233] usb 5-1: Manufacturer: syz [ 593.059485][ T1233] usb 5-1: SerialNumber: syz [ 593.886721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 597.333788][ T1233] legousbtower 5-1:14.57: interrupt endpoints not found [ 597.362244][ T1233] usb 5-1: USB disconnect, device number 19 [ 597.563711][T11840] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 597.574777][ T30] audit: type=1800 audit(1786469270.963:47): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1829" name="file0" dev="overlay" ino=2361 res=0 errno=0 [ 598.966268][T11867] fuse: Unknown parameter '0x0000000000000003' [ 600.141159][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1840'. [ 600.309385][T11874] ALSA: mixer_oss: invalid OSS volume 'lo' [ 600.339197][ T30] audit: type=1800 audit(1786469273.733:48): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1839" name="file0" dev="overlay" ino=2095 res=0 errno=0 [ 605.055765][ T5621] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 605.249599][ T5621] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 605.251334][ T5621] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 605.251357][ T5621] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 605.251377][ T5621] usb 5-1: config 220 has no interface number 2 [ 605.251431][ T5621] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 605.251457][ T5621] usb 5-1: config 220 interface 0 has no altsetting 0 [ 605.251474][ T5621] usb 5-1: config 220 interface 76 has no altsetting 0 [ 605.251491][ T5621] usb 5-1: config 220 interface 1 has no altsetting 0 [ 605.256099][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.256122][ T5621] usb 5-1: Product: syz [ 605.256135][ T5621] usb 5-1: Manufacturer: syz [ 605.256148][ T5621] usb 5-1: SerialNumber: syz [ 605.576398][T11918] fuse: Unknown parameter '0x0000000000000003' [ 605.772152][ T5621] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 605.772202][ T5621] uvcvideo 5-1:220.0: No valid video chain found. [ 605.772749][ T5621] usb 5-1: selecting invalid altsetting 0 [ 605.792668][ T5621] usb 5-1: selecting invalid altsetting 0 [ 605.792695][ T5621] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 606.724631][ T5621] usb 5-1: USB disconnect, device number 20 [ 608.095212][T11934] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 608.122411][ T30] audit: type=1800 audit(1786469281.483:49): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1858" name="file0" dev="overlay" ino=2143 res=0 errno=0 [ 612.506266][T11976] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 612.667203][ T5742] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 612.954199][ T5742] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 613.015140][T11972] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 613.341027][ T5742] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 613.349906][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 613.361463][ T5742] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.375583][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 613.387143][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 613.400979][ T5742] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 613.409023][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 613.409055][ T5742] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.409081][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 613.409107][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 613.457944][ T5742] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 613.465501][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 613.479441][ T5742] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.479499][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 613.479530][ T5742] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 613.890530][ T5742] usb 6-1: string descriptor 0 read error: -22 [ 613.890666][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.478139][ T5742] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 616.904727][T11996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.030291][ T1233] usb 6-1: USB disconnect, device number 2 [ 624.070867][T12066] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 624.377146][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.377280][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.758959][T12071] xt_l2tp: invalid flags combination: c [ 625.949540][T12081] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 626.324396][T12080] ima: Unable to open file: /e (-2) [ 626.693106][T12072] ima: policy update failed [ 626.695273][ T30] audit: type=1802 audit(1786469300.083:50): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1896" res=0 errno=0 [ 628.019389][T12096] dummy0: entered promiscuous mode [ 628.019649][T12096] dummy0: entered allmulticast mode [ 628.813331][T12112] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 628.845852][ T30] audit: type=1800 audit(1786469302.233:51): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1904" name="file0" dev="overlay" ino=2451 res=0 errno=0 [ 632.291624][T12131] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 632.299029][ T30] audit: type=1800 audit(1786469305.693:52): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1909" name="file0" dev="overlay" ino=2465 res=0 errno=0 [ 636.263868][T12158] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 636.278959][ T30] audit: type=1800 audit(1786469309.673:53): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1918" name="file0" dev="overlay" ino=138 res=0 errno=0 [ 636.776261][T12159] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 636.790436][ T30] audit: type=1800 audit(1786469310.183:54): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1917" name="file0" dev="overlay" ino=2212 res=0 errno=0 [ 639.207407][T12164] overlayfs: failed to resolve './file1': -2 [ 644.026322][T12189] random: crng reseeded on system resumption [ 647.510203][T12218] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 647.523231][ T30] audit: type=1800 audit(1786469320.913:55): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1937" name="file0" dev="overlay" ino=2251 res=0 errno=0 [ 653.648788][T12258] udc dummy_udc.0: failed to start g1: -19 [ 653.653795][T12258] UDC core: g1: couldn't find an available UDC or it's busy [ 654.673928][T12259] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 655.611243][ T30] audit: type=1800 audit(1786469328.083:56): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1948" name="file0" dev="overlay" ino=2505 res=0 errno=0 [ 655.827503][T11398] Bluetooth: hci1: Malformed Event: 0x2f [ 656.205090][T12275] device-mapper: table: 248:0: too large device [ 656.205118][T12275] device-mapper: ioctl: error adding target to table [ 656.496993][ T5742] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 656.669475][ T5742] usb 5-1: not running at top speed; connect to a high speed hub [ 656.678013][ T5742] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 656.714889][ T5742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.714955][ T5742] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.744737][ T5742] usb 5-1: language id specifier not provided by device, defaulting to English [ 656.766496][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.774852][ T5742] usb 5-1: Product: syz [ 656.774941][ T5742] usb 5-1: Manufacturer: syz [ 656.774989][ T5742] usb 5-1: SerialNumber: syz [ 658.662080][T12269] binder: 12261:12269 ioctl 4018620d 0 returned -22 [ 659.081049][T12281] xt_l2tp: invalid flags combination: c [ 660.906144][T12296] overlayfs: failed to resolve './file0': -2 [ 661.344605][ T5742] usb 5-1: 0:1 : does not exist [ 661.648829][ T5742] usb 5-1: USB disconnect, device number 21 [ 661.674037][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.003499][T12335] device-mapper: table: 248:0: too large device [ 666.003570][T12335] device-mapper: ioctl: error adding target to table [ 667.504832][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 667.846783][T11398] Bluetooth: hci5: command 0x0406 tx timeout [ 668.073812][T12360] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 668.073899][T12360] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 668.074330][T12360] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 668.074389][T12360] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 669.354911][T12368] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 669.381595][T12368] binder: 12366:12368 ioctl c0306201 0 returned -14 [ 669.429853][T12365] overlayfs: failed to resolve './file0': -2 [ 669.590744][T12368] gadgetfs: bound to dummy_udc driver [ 672.234767][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'. [ 672.525084][T12414] random: crng reseeded on system resumption [ 675.902874][T12429] tipc: Enabling of bearer rejected, failed to enable media [ 675.948458][T12429] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 678.257850][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 679.945884][T12459] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 680.206700][T12470] tipc: Enabling of bearer rejected, failed to enable media [ 680.224994][T12470] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 683.282838][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'. [ 685.710576][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.717953][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.432203][T12511] loop0: detected capacity change from 0 to 1024 [ 686.619262][T12511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.864296][T12522] overlayfs: missing 'lowerdir' [ 688.902558][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 688.981475][ T5615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.163468][T12561] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 692.693124][T12576] tipc: Enabling of bearer rejected, failed to enable media [ 692.704484][T12576] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 694.556855][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 700.050431][T12624] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 702.670321][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 703.026848][ T5807] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 703.299967][ T5807] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 703.308356][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 703.308719][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 703.308822][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.308895][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 703.308964][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 703.323822][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 703.324037][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 703.324121][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.324190][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 703.324257][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 703.505379][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 703.505440][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 703.505463][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.505487][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 703.505520][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 703.522689][ T5807] usb 5-1: string descriptor 0 read error: -22 [ 703.522815][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.573202][ T5807] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 705.504270][T12660] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 705.524872][T12660] binder: 12655:12660 ioctl c0306201 0 returned -14 [ 705.563168][T12660] gadgetfs: bound to dummy_udc driver [ 708.832546][ T5807] usb 5-1: USB disconnect, device number 22 [ 711.385531][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2067'. [ 711.485447][T12692] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 711.549869][ T30] audit: type=1800 audit(1786469384.893:57): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2066" name="file0" dev="overlay" ino=2634 res=0 errno=0 [ 718.798072][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 720.106474][T12763] device-mapper: table: 248:0: too large device [ 720.106503][T12763] device-mapper: ioctl: error adding target to table [ 720.391947][ T1233] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 720.591037][ T1233] usb 4-1: not running at top speed; connect to a high speed hub [ 720.601085][ T1233] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 720.666304][ T1233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.681099][ T1233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.696178][ T1233] usb 4-1: language id specifier not provided by device, defaulting to English [ 720.721240][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.731581][ T1233] usb 4-1: Product: syz [ 720.737422][ T1233] usb 4-1: Manufacturer: syz [ 720.737489][ T1233] usb 4-1: SerialNumber: syz [ 723.061014][ T1233] usb 4-1: 0:1 : does not exist [ 724.042811][T12786] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.042841][T12786] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 724.042903][T12786] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.042916][T12786] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 724.340765][ T1233] usb 4-1: USB disconnect, device number 15 [ 724.803026][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 728.172350][T12826] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 728.189872][ T30] audit: type=1800 audit(1786469401.583:58): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2104" name="file0" dev="overlay" ino=338 res=0 errno=0 [ 729.108033][T12823] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 732.237983][T12862] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 732.238027][T12862] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 732.238136][T12862] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 732.238159][T12862] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 736.159987][T12897] random: crng reseeded on system resumption [ 737.953198][T12920] syzkaller1: entered promiscuous mode [ 737.959572][T12920] syzkaller1: entered allmulticast mode [ 741.894310][ T5742] libceph: connect (1)[c::]:6789 error -22 [ 741.894472][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 741.895915][ T5742] libceph: connect (1)[c::]:6789 error -22 [ 741.896052][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 742.013586][T12951] ceph: No mds server is up or the cluster is laggy [ 742.148184][ T5742] libceph: connect (1)[c::]:6789 error -22 [ 742.160716][T12959] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 742.597904][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 742.984627][ T5619] Bluetooth: hci2: Malformed Event: 0x2f [ 746.023567][T12993] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 746.098912][ T30] audit: type=1800 audit(1786469419.443:59): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2156" name="file0" dev="overlay" ino=2726 res=0 errno=0 [ 747.158497][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.158569][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.937617][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 755.150693][T13069] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 755.226866][ T30] audit: type=1800 audit(1786469428.553:60): pid=13069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2173" name="file0" dev="overlay" ino=2538 res=0 errno=0 [ 761.621671][T13095] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 763.115493][T13102] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 763.125965][T13102] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 766.341500][T13140] se_dev->se_dev_ptr already set for storage object [ 766.344810][T13140] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 766.344834][T13140] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 766.507737][T13143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 767.135908][T13145] loop0: detected capacity change from 0 to 8192 [ 767.153575][T13145] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 768.352061][T13145] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 768.352113][T13145] FAT-fs (loop0): Filesystem has been set read-only [ 771.487712][T13170] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 771.509032][ T30] audit: type=1800 audit(1786469444.893:61): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2203" name="file0" dev="overlay" ino=2595 res=0 errno=0 [ 773.766296][T13183] loop1: detected capacity change from 0 to 1024 [ 773.781484][T13181] se_dev->se_dev_ptr already set for storage object [ 773.842813][T13183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.035043][T13191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.415031][T13193] overlayfs: missing 'workdir' [ 780.272063][T13231] se_dev->se_dev_ptr already set for storage object [ 781.166199][T13225] loop0: detected capacity change from 0 to 8192 [ 781.182926][T13225] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.222885][T13225] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 781.222942][T13225] FAT-fs (loop0): Filesystem has been set read-only [ 781.294018][T13241] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 781.294062][T13241] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 781.393503][T13245] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.497120][ T5619] Bluetooth: hci4: Malformed Event: 0x2f [ 781.692650][T13247] binder: 13246:13247 ioctl c0306201 0 returned -14 [ 782.977237][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.097463][T13285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 786.596136][T13296] udc dummy_udc.0: failed to start g1: -19 [ 786.601719][T13296] UDC core: g1: couldn't find an available UDC or it's busy [ 788.277179][T13302] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 788.309755][ T30] audit: type=1800 audit(1786469461.683:62): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2240" name="file0" dev="overlay" ino=512 res=0 errno=0 [ 788.524600][T13298] loop3: detected capacity change from 0 to 8192 [ 788.669426][T13298] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.157714][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.157760][T13298] FAT-fs (loop3): Filesystem has been set read-only [ 789.157791][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.157813][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.157833][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.157885][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.158086][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.158107][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.158128][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.158148][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.158170][T13298] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 789.258247][ T30] audit: type=1800 audit(1786469462.653:63): pid=13298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2241" name="file2" dev="loop3" ino=1048702 res=0 errno=0 [ 790.883787][T13316] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 791.539198][T13321] loop1: detected capacity change from 0 to 1024 [ 791.854821][T13324] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 791.887581][ T30] audit: type=1800 audit(1786469465.253:64): pid=13324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2245" name="file0" dev="overlay" ino=2794 res=0 errno=0 [ 792.323575][T13321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.704718][T13321] overlayfs: missing 'workdir' [ 793.853478][T13352] binder: 13347:13352 ioctl c0306201 0 returned -14 [ 793.926148][T13352] gadgetfs: bound to dummy_udc driver [ 794.602422][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.697437][T13354] overlayfs: failed to resolve './file0': -2 [ 797.458103][T13379] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 797.551106][T13374] loop1: detected capacity change from 0 to 8192 [ 797.632250][T13374] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.722443][T13387] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 797.722486][T13387] FAT-fs (loop1): Filesystem has been set read-only [ 802.095967][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 802.096126][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 802.288682][T13410] ceph: No mds server is up or the cluster is laggy [ 802.870209][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 802.877738][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 803.258173][T13424] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 803.285913][ T30] audit: type=1800 audit(1786469476.663:65): pid=13424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2270" name="file0" dev="overlay" ino=573 res=0 errno=0 [ 806.713116][T13449] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 806.777993][T13442] loop1: detected capacity change from 0 to 8192 [ 806.791838][T13442] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 806.814791][T13442] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 806.826953][T13442] FAT-fs (loop1): Filesystem has been set read-only [ 808.631246][T13471] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 808.667523][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.674300][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.784235][T13493] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 810.967368][T13494] binder: 13490:13494 ioctl c0306201 200000000040 returned -22 [ 813.624244][T13516] device-mapper: table: 248:0: too large device [ 813.624444][T13516] device-mapper: ioctl: error adding target to table [ 814.347153][ T1233] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 814.602676][ T1233] usb 5-1: not running at top speed; connect to a high speed hub [ 814.611831][ T1233] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 814.647022][ T1233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.658942][ T1233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.677362][ T1233] usb 5-1: language id specifier not provided by device, defaulting to English [ 814.742465][ T1233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.742524][ T1233] usb 5-1: Product: syz [ 814.742554][ T1233] usb 5-1: Manufacturer: syz [ 814.742572][ T1233] usb 5-1: SerialNumber: syz [ 815.806962][T13525] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 817.942865][ T1233] usb 5-1: 0:1 : does not exist [ 819.678637][T13540] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 819.897738][ T1233] usb 5-1: USB disconnect, device number 23 [ 822.387936][T13574] overlayfs: failed to resolve './file1': -2 [ 826.444543][T13612] random: crng reseeded on system resumption [ 827.720293][T13617] tipc: Enabling of bearer rejected, failed to enable media [ 828.256985][T13617] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 829.858531][ T30] audit: type=1800 audit(1786469502.933:66): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2332" name="active" dev="configfs" ino=42301 res=0 errno=0 [ 831.368285][ T5619] Bluetooth: hci5: Malformed Event: 0x2f [ 831.739373][T13667] device-mapper: table: 248:0: too large device [ 831.739410][T13667] device-mapper: ioctl: error adding target to table [ 832.047060][ T25] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 832.209359][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 832.217590][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 832.237501][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.252841][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.287474][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 832.324145][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.324185][ T25] usb 5-1: Product: syz [ 832.334385][ T25] usb 5-1: Manufacturer: syz [ 832.334403][ T25] usb 5-1: SerialNumber: syz [ 834.761648][T13681] tipc: Enabling of bearer rejected, failed to enable media [ 834.835044][ T25] usb 5-1: 0:1 : does not exist [ 835.172457][ T25] usb 5-1: USB disconnect, device number 24 [ 836.212943][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.606672][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 837.348588][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 837.359099][ T25] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 837.376396][ T25] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 837.388746][ T25] usb 5-1: config 220 has no interface number 2 [ 837.388841][ T25] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 837.388871][ T25] usb 5-1: config 220 interface 0 has no altsetting 0 [ 837.388893][ T25] usb 5-1: config 220 interface 76 has no altsetting 0 [ 837.388922][ T25] usb 5-1: config 220 interface 1 has no altsetting 0 [ 837.435584][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.435629][ T25] usb 5-1: Product: syz [ 837.435659][ T25] usb 5-1: Manufacturer: syz [ 837.435678][ T25] usb 5-1: SerialNumber: syz [ 837.780267][ T30] audit: type=1800 audit(1786469511.173:67): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2348" name="active" dev="configfs" ino=41167 res=0 errno=0 [ 838.592193][ T25] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 838.592294][ T25] uvcvideo 5-1:220.0: No valid video chain found. [ 838.592716][ T25] usb 5-1: selecting invalid altsetting 0 [ 838.706082][T13706] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 838.738991][ T30] audit: type=1800 audit(1786469512.113:68): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2349" name="file0" dev="overlay" ino=2915 res=0 errno=0 [ 838.785902][ T25] usb 5-1: selecting invalid altsetting 0 [ 838.786043][ T25] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 838.864622][ T25] usb 5-1: USB disconnect, device number 25 [ 841.631306][T13722] tipc: Enabling of bearer rejected, failed to enable media [ 841.680339][T13721] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 841.798497][ T25] libceph: connect (1)[c::]:6789 error -22 [ 841.804632][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 842.030355][T13730] ceph: No mds server is up or the cluster is laggy [ 842.067690][ T25] libceph: connect (1)[c::]:6789 error -22 [ 842.081715][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 845.237089][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 845.237239][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 845.393546][T13762] ceph: No mds server is up or the cluster is laggy [ 845.499384][T11668] libceph: connect (1)[c::]:6789 error -101 [ 845.500117][T11668] libceph: mon0 (1)[c::]:6789 connect error [ 845.600757][T13772] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 848.276427][T13780] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 850.626721][T13803] ALSA: mixer_oss: invalid OSS volume 'lo' [ 850.661601][ T30] audit: type=1800 audit(1786469524.043:69): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2377" name="file0" dev="overlay" ino=2673 res=0 errno=0 [ 851.864651][T13814] loop1: detected capacity change from 0 to 1024 [ 852.293218][T13814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.716498][T13825] device-mapper: table: 248:0: too large device [ 852.737375][T13825] device-mapper: ioctl: error adding target to table [ 858.658618][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.021567][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 861.430058][T13892] ima: Unable to open file: /e (-2) [ 861.430388][T13891] ima: policy update failed [ 861.431760][ T30] audit: type=1802 audit(1786469534.823:70): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2401" res=0 errno=0 [ 862.495418][ T5619] Bluetooth: hci5: Malformed Event: 0x2f [ 863.136740][ T5742] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 863.220957][T13922] device-mapper: table: 248:0: too large device [ 863.220992][T13922] device-mapper: ioctl: error adding target to table [ 863.571664][ T5621] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 863.752606][ T5742] usb 5-1: Using ep0 maxpacket: 16 [ 863.778843][ T5621] usb 2-1: not running at top speed; connect to a high speed hub [ 863.789405][ T5621] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 863.838049][ T5742] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.847748][ T5621] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.847809][ T5621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.872957][ T5621] usb 2-1: language id specifier not provided by device, defaulting to English [ 863.910149][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.910434][ T5621] usb 2-1: Product: syz [ 863.910467][ T5621] usb 2-1: Manufacturer: syz [ 863.910486][ T5621] usb 2-1: SerialNumber: syz [ 863.984577][ T5742] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 863.984649][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.984696][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 863.984726][ T5742] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 863.984748][ T5742] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.118371][ T5742] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 864.118414][ T5742] usb 5-1: Manufacturer: syz [ 864.557422][ T5742] usb 5-1: config 0 descriptor?? [ 866.116743][ T5742] rc_core: IR keymap rc-hauppauge not found [ 866.116777][ T5742] Registered IR keymap rc-empty [ 866.117556][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.147153][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.193191][ T5742] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 866.206024][ T5742] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 866.224755][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.243879][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.258313][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.917336][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.927618][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.957851][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 866.987622][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 867.011617][T13934] tipc: Enabling of bearer rejected, failed to enable media [ 867.021694][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 867.039097][T13934] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 867.042170][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 867.064593][ T5742] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 867.149251][ T5742] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 867.149341][ T5742] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 867.214577][ T5742] usb 5-1: USB disconnect, device number 26 [ 867.327838][ T5621] usb 2-1: 0:1 : does not exist [ 868.856693][ T5621] usb 2-1: USB disconnect, device number 15 [ 868.915084][T13950] loop4: detected capacity change from 0 to 1024 [ 869.033929][T13950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.246506][T13967] random: crng reseeded on system resumption [ 869.343548][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.182785][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.189287][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.205237][T13986] tipc: Enabling of bearer rejected, failed to enable media [ 873.215506][T13986] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 873.271435][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.224729][T14012] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 877.792339][T14035] tipc: Enabling of bearer rejected, failed to enable media [ 878.038547][T14039] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 878.047810][T14039] binder: 14032:14039 ioctl c0306201 0 returned -14 [ 878.623791][T14035] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 880.343358][T14055] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 882.318865][T14080] tipc: Enabling of bearer rejected, failed to enable media [ 882.330364][T14080] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 882.677474][ T30] audit: type=1800 audit(1786469556.023:71): pid=14084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2453" name="local" dev="configfs" ino=50884 res=0 errno=0 [ 882.935897][ T30] audit: type=1800 audit(1786469556.323:72): pid=14084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2453" name="scan_secs" dev="configfs" ino=50889 res=0 errno=0 [ 883.958745][T14095] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 883.987645][T14095] binder: 14091:14095 ioctl c0306201 0 returned -14 [ 885.044465][T14101] syzkaller0: entered promiscuous mode [ 885.044493][T14101] syzkaller0: entered allmulticast mode [ 885.061615][T14101] tipc: Enabled bearer , priority 0 [ 885.273417][T14101] tipc: Resetting bearer [ 885.494897][T14100] tipc: Resetting bearer [ 885.542138][T14100] tipc: Disabling bearer [ 886.605447][T14124] tipc: Enabling of bearer rejected, failed to enable media [ 886.624977][T14124] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 886.872967][T14130] device-mapper: table: 248:0: too large device [ 886.873034][T14130] device-mapper: ioctl: error adding target to table [ 887.168815][ T5742] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 887.348022][ T5742] usb 4-1: not running at top speed; connect to a high speed hub [ 887.363372][ T5742] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 887.396293][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.407016][ T5742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.425184][ T5742] usb 4-1: language id specifier not provided by device, defaulting to English [ 887.478869][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.478914][ T5742] usb 4-1: Product: syz [ 887.488890][ T5742] usb 4-1: Manufacturer: syz [ 887.488923][ T5742] usb 4-1: SerialNumber: syz [ 887.710746][ T30] audit: type=1800 audit(1786469561.093:73): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2466" name="local" dev="configfs" ino=45929 res=0 errno=0 [ 888.164437][ T30] audit: type=1800 audit(1786469561.553:74): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2466" name="scan_secs" dev="configfs" ino=45934 res=0 errno=0 [ 888.712277][T14143] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 888.733021][T14143] binder: 14133:14143 ioctl c0306201 0 returned -14 [ 889.791856][T14144] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 890.453554][ T5742] usb 4-1: 0:1 : does not exist [ 890.549517][ T5742] usb 4-1: USB disconnect, device number 16 [ 890.590528][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.834215][T14156] syzkaller1: entered promiscuous mode [ 890.834258][T14156] syzkaller1: entered allmulticast mode [ 891.502997][T14172] tipc: Enabling of bearer rejected, failed to enable media [ 891.513560][T14172] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 892.621197][T14184] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 892.633953][T14184] binder: 14182:14184 ioctl c0306201 0 returned -14 [ 893.093207][ T30] audit: type=1800 audit(1786469566.483:75): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2481" name="local" dev="configfs" ino=51044 res=0 errno=0 [ 893.265862][ T30] audit: type=1800 audit(1786469566.653:76): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2481" name="scan_secs" dev="configfs" ino=51046 res=0 errno=0 [ 897.413429][T14212] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 903.090340][T14264] syzkaller1: entered promiscuous mode [ 903.096926][T14264] syzkaller1: entered allmulticast mode [ 905.856620][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 905.979173][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 906.136833][T14286] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 906.248488][T14292] ima: Unable to open file: /e (-2) [ 906.466125][T14284] tipc: Enabling of bearer rejected, failed to enable media [ 906.480906][T14296] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 906.483411][T14280] ima: policy update failed [ 906.491268][ T30] audit: type=1802 audit(1786469579.873:77): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2508" res=0 errno=0 [ 907.001547][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 908.477391][ T25] libceph: connect (1)[c::]:6789 error -22 [ 908.484554][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 908.491953][ T25] libceph: connect (1)[c::]:6789 error -22 [ 908.500216][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 908.595211][T14305] ceph: No mds server is up or the cluster is laggy [ 908.757084][ T5742] libceph: connect (1)[c::]:6789 error -22 [ 908.757254][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 909.924377][T14325] binder: 14316:14325 ioctl c0306201 0 returned -14 [ 909.946292][T14325] binder: 14316:14325 ioctl c0306201 200000000040 returned -22 [ 910.374425][T14333] tipc: Enabling of bearer rejected, failed to enable media [ 910.398878][T14333] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 911.213075][T14341] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 916.121975][T14378] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 916.163174][T14374] tipc: Enabling of bearer rejected, failed to enable media [ 916.173545][T14378] gadgetfs: bound to dummy_udc driver [ 916.213490][T14374] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 923.920886][ T5621] libceph: connect (1)[c::]:6789 error -22 [ 923.929247][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 923.939067][ T5621] libceph: connect (1)[c::]:6789 error -22 [ 923.945658][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 924.047779][T14431] ceph: No mds server is up or the cluster is laggy [ 924.251654][T14440] device-mapper: table: 248:0: too large device [ 924.251738][T14440] device-mapper: ioctl: error adding target to table [ 924.636933][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 924.804372][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 924.816862][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 924.850156][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.850205][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 924.883278][ T9] usb 6-1: language id specifier not provided by device, defaulting to English [ 924.926841][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.935950][ T9] usb 6-1: Product: syz [ 924.936253][ T9] usb 6-1: Manufacturer: syz [ 924.944666][ T9] usb 6-1: SerialNumber: syz [ 927.332114][ T9] usb 6-1: 0:1 : does not exist [ 927.464329][T14452] xt_l2tp: invalid flags combination: c [ 927.909588][ T9] usb 6-1: USB disconnect, device number 3 [ 929.955149][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.171720][T14477] random: crng reseeded on system resumption [ 931.479655][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.479740][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.748799][T14492] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 931.749889][T14492] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 931.809006][T14492] tipc: Enabled bearer , priority 0 [ 931.846236][T14492] tipc: Resetting bearer [ 933.204919][T14501] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 936.368539][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 936.578048][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 936.589468][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 936.647231][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.647299][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.682573][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 936.734079][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.734149][ T9] usb 4-1: Product: syz [ 936.734384][ T9] usb 4-1: Manufacturer: syz [ 936.734473][ T9] usb 4-1: SerialNumber: syz [ 938.274446][T14528] loop1: detected capacity change from 0 to 8192 [ 938.284088][T14528] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 938.288369][T14528] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 938.288392][T14528] FAT-fs (loop1): Filesystem has been set read-only [ 938.387708][ T9] usb 4-1: 0:1 : does not exist [ 938.526276][T14537] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 938.543817][T14537] binder: 14529:14537 ioctl c0306201 0 returned -14 [ 938.601817][T14537] gadgetfs: bound to dummy_udc driver [ 939.569303][ T9] usb 4-1: USB disconnect, device number 17 [ 939.702665][T11464] udevd[11464]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.644807][T14561] kAFS: Invalid Command on /proc/fs/afs/cells file [ 943.224845][T14576] overlayfs: failed to resolve './file1': -2 [ 943.239623][T14579] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 943.278112][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 943.430450][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 943.431591][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 943.431615][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 943.431633][ T9] usb 4-1: config 220 has no interface number 2 [ 943.431688][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 943.431713][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 943.431730][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 943.431746][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 943.438129][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.438152][ T9] usb 4-1: Product: syz [ 943.438166][ T9] usb 4-1: Manufacturer: syz [ 943.438180][ T9] usb 4-1: SerialNumber: syz [ 944.321436][T14587] bridge6: entered promiscuous mode [ 944.760536][T14583] ima: Unable to open file: /e (-2) [ 944.999880][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 944.999936][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 945.000008][ T9] usb 4-1: selecting invalid altsetting 0 [ 945.169500][T14580] ima: policy update failed [ 945.169921][ T30] audit: type=1802 audit(1786469618.563:78): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2589" res=0 errno=0 [ 945.959333][ T9] usb 4-1: selecting invalid altsetting 0 [ 945.959396][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 945.963454][ T9] usb 4-1: USB disconnect, device number 18 [ 948.996919][T14619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 949.734096][T14614] loop3: detected capacity change from 0 to 8192 [ 950.019041][T14614] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 950.131603][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.131647][T14624] FAT-fs (loop3): Filesystem has been set read-only [ 950.144285][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144339][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144364][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144456][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144679][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144702][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144724][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144746][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.144768][T14624] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 950.151421][ T30] audit: type=1800 audit(1786469623.543:79): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2600" name="file2" dev="loop3" ino=1048714 res=0 errno=0 [ 954.029473][T14659] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 955.331640][T14663] loop4: detected capacity change from 0 to 8192 [ 955.339027][T14663] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 955.350405][T14663] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 955.350444][T14663] FAT-fs (loop4): Filesystem has been set read-only [ 956.915907][T14675] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 960.399804][T14717] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 960.407472][ T30] audit: type=1800 audit(1786469633.803:80): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2631" name="file0" dev="overlay" ino=3246 res=0 errno=0 [ 964.415675][T14734] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 964.415705][T14734] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 964.415799][T14734] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 964.415812][T14734] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 967.389554][T14776] udc dummy_udc.0: failed to start g1: -19 [ 967.393901][T14776] UDC core: g1: couldn't find an available UDC or it's busy [ 968.532568][T14746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 968.853205][T14784] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 968.879887][T14784] binder: 14778:14784 ioctl c0306201 0 returned -14 [ 968.892688][T14784] binder: 14778:14784 ioctl c0306201 200000000040 returned -22 [ 975.433949][ T5619] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 977.530534][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 977.538911][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 977.661680][T14839] ceph: No mds server is up or the cluster is laggy [ 983.045847][T14872] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 983.082583][T14872] binder: 14870:14872 ioctl c0306201 0 returned -14 [ 985.570081][T14888] syzkaller1: entered promiscuous mode [ 985.579635][T14888] syzkaller1: entered allmulticast mode [ 986.716059][T14907] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 992.920175][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.920256][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.258611][T14942] ima: Unable to open file: /e (-2) [ 994.225158][T14939] ima: policy update failed [ 994.231930][ T30] audit: type=1802 audit(1786469667.623:81): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2695" res=0 errno=0 [ 1000.941213][T14984] xt_l2tp: invalid flags combination: c [ 1008.060232][T15056] syzkaller1: entered promiscuous mode [ 1008.060280][T15056] syzkaller1: entered allmulticast mode [ 1008.113247][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1008.189173][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1008.244237][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1011.319274][T15095] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.319321][T15095] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 1011.319444][T15095] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.319466][T15095] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 1011.407976][ T1233] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1011.567638][ T1233] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1011.579182][ T1233] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1011.579234][ T1233] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.579258][ T1233] usb 4-1: config 220 has no interface number 2 [ 1011.579321][ T1233] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1011.579359][ T1233] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1011.579381][ T1233] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1011.579402][ T1233] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1011.901569][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.901613][ T1233] usb 4-1: Product: syz [ 1011.901644][ T1233] usb 4-1: Manufacturer: syz [ 1011.901662][ T1233] usb 4-1: SerialNumber: syz [ 1012.204021][ T1233] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1012.212453][ T1233] uvcvideo 4-1:220.0: No valid video chain found. [ 1012.219872][ T1233] usb 4-1: selecting invalid altsetting 0 [ 1012.229447][T15097] ALSA: mixer_oss: invalid OSS volume 'lo' [ 1012.234117][ T30] audit: type=1800 audit(1786469685.623:82): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2745" name="file0" dev="overlay" ino=3049 res=0 errno=0 [ 1012.294521][ T1233] usb 4-1: selecting invalid altsetting 0 [ 1012.302345][ T1233] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1012.320862][ T1233] usb 4-1: USB disconnect, device number 19 [ 1012.445244][T14701] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1012.456931][T14701] CPU: 1 UID: 0 PID: 14701 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.456964][T14701] Tainted: [L]=SOFTLOCKUP [ 1012.456972][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1012.456986][T14701] Workqueue: hci1 hci_rx_work [ 1012.457134][T14701] Call Trace: [ 1012.457143][T14701] [ 1012.457154][T14701] dump_stack_lvl+0xe8/0x150 [ 1012.457190][T14701] sysfs_create_dir_ns+0x271/0x2a0 [ 1012.457234][T14701] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1012.457262][T14701] ? do_raw_spin_unlock+0xf5/0x200 [ 1012.457295][T14701] kobject_add_internal+0x622/0xcd0 [ 1012.457399][T14701] kobject_add+0x163/0x240 [ 1012.457421][T14701] ? preempt_schedule_thunk+0x16/0x40 [ 1012.457449][T14701] ? __pfx_kobject_add+0x10/0x10 [ 1012.457478][T14701] ? get_device_parent+0x366/0x3a0 [ 1012.457561][T14701] device_add+0x3fa/0xb80 [ 1012.457586][T14701] hci_conn_add_sysfs+0xd5/0x210 [ 1012.457675][T14701] le_conn_complete_evt+0xfb7/0x1690 [ 1012.457729][T14701] ? le_conn_complete_evt+0x190/0x1690 [ 1012.457755][T14701] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1012.457797][T14701] ? skb_pull_data+0xf0/0x200 [ 1012.457876][T14701] hci_le_conn_complete_evt+0x187/0x470 [ 1012.457907][T14701] hci_event_packet+0x67a/0xf10 [ 1012.457970][T14701] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1012.458028][T14701] ? __pfx_hci_event_packet+0x10/0x10 [ 1012.458064][T14701] ? audit_update_watch+0x2a0/0xee0 [ 1012.458110][T14701] ? hci_send_to_monitor+0xe2/0x590 [ 1012.458138][T14701] hci_rx_work+0x3ee/0x1020 [ 1012.458176][T14701] ? process_scheduled_works+0x97e/0x1630 [ 1012.458205][T14701] process_scheduled_works+0xc4e/0x1630 [ 1012.458264][T14701] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.458296][T14701] ? assign_work+0x3cf/0x5d0 [ 1012.458327][T14701] worker_thread+0xa47/0xfb0 [ 1012.458369][T14701] ? __kthread_parkme+0x71/0x1f0 [ 1012.458409][T14701] kthread+0x388/0x470 [ 1012.458430][T14701] ? __pfx_worker_thread+0x10/0x10 [ 1012.458455][T14701] ? __pfx_kthread+0x10/0x10 [ 1012.458476][T14701] ret_from_fork+0x514/0xb70 [ 1012.458512][T14701] ? __pfx_ret_from_fork+0x10/0x10 [ 1012.458544][T14701] ? __switch_to+0xc89/0x1420 [ 1012.458575][T14701] ? __pfx_kthread+0x10/0x10 [ 1012.458596][T14701] ret_from_fork_asm+0x1a/0x30 [ 1012.458643][T14701] [ 1012.460636][T14701] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1012.460789][T14701] Bluetooth: hci1: failed to register connection device [ 1013.078307][T15111] overlayfs: failed to resolve './file1': -2 [ 1014.506663][T14701] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.473982][T15130] ima: Unable to open file: /e (-2) [ 1016.391037][T15127] ima: policy update failed [ 1016.527789][ T30] audit: type=1802 audit(1786469689.783:83): pid=15127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2755" res=0 errno=0 [ 1016.586909][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 1016.948369][T15144] udc dummy_udc.0: failed to start g1: -19 [ 1016.952743][T15144] UDC core: g1: couldn't find an available UDC or it's busy [ 1017.660041][T15146] random: crng reseeded on system resumption [ 1025.248139][T15193] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1030.108412][T15227] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1033.724827][ T5621] libceph: connect (1)[c::]:6789 error -22 [ 1033.724942][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 1033.753167][T15263] ceph: No mds server is up or the cluster is laggy [ 1036.364697][T15288] device-mapper: table: 248:0: too large device [ 1036.364788][T15288] device-mapper: ioctl: error adding target to table [ 1040.649169][ T5621] libceph: connect (1)[c::]:6789 error -22 [ 1040.649314][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 1040.752731][T15313] ceph: No mds server is up or the cluster is laggy [ 1041.937575][ T5621] libceph: connect (1)[c::]:6789 error -22 [ 1041.937737][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 1042.265743][T15319] loop1: detected capacity change from 0 to 8192 [ 1042.323658][T15319] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1042.339488][T15319] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1042.339520][T15319] FAT-fs (loop1): Filesystem has been set read-only [ 1043.963748][T15337] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 1043.972679][ T30] audit: type=1800 audit(1786469717.363:84): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2809" name="file0" dev="overlay" ino=3173 res=0 errno=0 [ 1046.849262][T15363] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1046.868551][T15363] binder: 15360:15363 ioctl c0306201 0 returned -14 [ 1049.335709][T15369] loop3: detected capacity change from 0 to 8192 [ 1049.360427][T15369] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1049.385293][T15369] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1049.385326][T15369] FAT-fs (loop3): Filesystem has been set read-only [ 1054.415393][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.415490][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.419314][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 1057.412554][ T30] audit: type=1800 audit(1786469730.793:85): pid=15440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2837" name="active" dev="configfs" ino=56486 res=0 errno=0 [ 1058.202934][T15445] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1058.210089][ T30] audit: type=1800 audit(1786469731.603:86): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2839" name="file0" dev="overlay" ino=1280 res=0 errno=0 [ 1058.371089][T15442] loop3: detected capacity change from 0 to 8192 [ 1058.393086][T15442] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1058.409792][T15442] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1058.409824][T15442] FAT-fs (loop3): Filesystem has been set read-only [ 1058.984675][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.001882][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.012521][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.025959][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.034787][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.914131][ T4158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.146628][T14701] Bluetooth: hci0: command tx timeout [ 1061.875067][T15485] se_dev->se_dev_ptr already set for storage object [ 1063.092077][ T4158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.247862][T14701] Bluetooth: hci0: command tx timeout [ 1063.585988][T15454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.586798][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.586953][T15454] bridge_slave_0: entered allmulticast mode [ 1063.609078][T14136] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1063.645726][T15454] bridge_slave_0: entered promiscuous mode [ 1063.678881][T15454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.687434][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.695860][T15454] bridge_slave_1: entered allmulticast mode [ 1063.723040][T15454] bridge_slave_1: entered promiscuous mode [ 1063.743820][T15473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.088179][T14136] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1064.090938][T14136] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1064.090989][T14136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.091012][T14136] usb 5-1: config 0 has no interface number 0 [ 1064.091056][T14136] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1064.091082][T14136] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.091130][T14136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.095149][T14136] usb 5-1: config 0 descriptor?? [ 1064.112110][T14136] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1064.172597][T15454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.351570][ T4158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.392233][T15454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.423240][T14136] usb 5-1: USB disconnect, device number 27 [ 1064.613129][ T4158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.705514][T15510] overlayfs: failed to resolve './file1': -2 [ 1065.306627][T14701] Bluetooth: hci0: command tx timeout [ 1065.576714][T15454] team0: Port device team_slave_0 added [ 1065.687979][T15454] team0: Port device team_slave_1 added [ 1066.770283][T15454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.770400][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.772146][T15454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.969026][T15454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.969058][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.969100][T15454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.439897][T14701] Bluetooth: hci0: command tx timeout [ 1067.958707][ T1233] libceph: connect (1)[c::]:6789 error -101 [ 1067.958879][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 1068.062717][T15454] hsr_slave_0: entered promiscuous mode [ 1068.070894][T15454] hsr_slave_1: entered promiscuous mode [ 1068.083364][T15454] debugfs: 'hsr0' already exists in 'hsr' [ 1068.092370][T15454] Cannot create hsr debugfs directory [ 1068.144614][T15522] loop1: detected capacity change from 0 to 8192 [ 1068.173228][T15522] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1068.184723][T15530] ceph: No mds server is up or the cluster is laggy [ 1068.200456][T15521] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1068.200497][T15521] FAT-fs (loop1): Filesystem has been set read-only [ 1070.454155][T15550] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1070.472712][T15550] binder: 15548:15550 ioctl c0306201 0 returned -14 [ 1070.500315][T15550] gadgetfs: bound to dummy_udc driver [ 1071.902591][T15556] ALSA: mixer_oss: invalid OSS volume 'lo' [ 1071.909763][ T30] audit: type=1800 audit(1786469745.303:87): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2867" name="file0" dev="overlay" ino=3224 res=0 errno=0 [ 1072.176386][ T4158] bridge_slave_1: left allmulticast mode [ 1072.200017][ T4158] bridge_slave_1: left promiscuous mode [ 1072.202213][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.247605][ T4158] bridge_slave_0: left allmulticast mode [ 1072.255664][ T4158] bridge_slave_0: left promiscuous mode [ 1072.255950][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.074185][T15571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 1074.757707][T15589] ima: Unable to open file: /e (-2) [ 1075.620318][T15586] ima: policy update failed [ 1075.747263][ T30] audit: type=1802 audit(1786469749.013:88): pid=15586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2872" res=0 errno=0 [ 1075.808059][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.865943][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.887757][ T4158] bond0 (unregistering): Released all slaves [ 1076.020069][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1076.181081][ T4158] tipc: Disabling bearer [ 1076.181323][ T4158] tipc: Disabling bearer [ 1076.257519][ T4158] tipc: Left network mode [ 1079.271921][ T4158] IPVS: stopping backup sync thread 14296 ... [ 1081.052362][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1084.498026][T15663] overlayfs: failed to resolve './file1': -2 [ 1085.238792][T15666] ceph: No mds server is up or the cluster is laggy [ 1085.239480][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 1085.239632][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 1086.281528][T15688] overlayfs: failed to resolve './file1': -2 [ 1087.782764][ T4158] hsr_slave_0: left promiscuous mode [ 1087.791832][ T4158] hsr_slave_1: left promiscuous mode [ 1087.792719][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.792766][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.823114][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.823147][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.972777][ T4158] veth1_macvtap: left promiscuous mode [ 1087.979240][ T4158] veth0_macvtap: left promiscuous mode [ 1087.985301][ T4158] veth1_vlan: left promiscuous mode [ 1087.990837][ T4158] veth0_vlan: left promiscuous mode [ 1088.685150][ T4158] team0 (unregistering): Port device team_slave_1 removed [ 1088.695650][ T4158] team0 (unregistering): Port device team_slave_0 removed [ 1089.023810][T15700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 1090.923166][T15727] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1091.922520][T15749] Bluetooth: MGMT ver 1.23 [ 1093.147020][T15753] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1093.159168][ T30] audit: type=1800 audit(1786469766.553:89): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2905" name="file0" dev="overlay" ino=1401 res=0 errno=0 [ 1093.755982][T15718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.803961][T15454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1093.829437][T15454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.832562][T15454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1094.191733][T15454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.233590][T15454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1094.444799][T15454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.478606][T15454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1094.601915][T15454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.884056][T15784] xt_l2tp: invalid flags combination: c [ 1097.080080][T15454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.339613][T15454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.432216][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.432347][T14396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.593472][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.593594][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.270365][ T5621] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1100.805094][ T30] audit: type=1800 audit(1786469773.743:90): pid=15835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2920" name="active" dev="configfs" ino=59393 res=0 errno=0 [ 1100.880208][ T5621] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1100.891188][ T5621] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1100.891214][ T5621] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.891238][ T5621] usb 6-1: config 0 has no interface number 0 [ 1100.891278][ T5621] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1100.891304][ T5621] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.891345][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.976914][ T5621] usb 6-1: config 0 descriptor?? [ 1101.053852][ T5621] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1101.179363][T15840] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1101.242905][T15841] ima: Unable to open file: /e (-2) [ 1101.967775][T15837] ima: policy update failed [ 1102.017367][ T1233] usb 6-1: USB disconnect, device number 4 [ 1102.098358][ T30] audit: type=1802 audit(1786469775.363:91): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2921" res=0 errno=0 [ 1102.509770][T15847] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1104.552559][T15454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.144213][T15454] veth0_vlan: entered promiscuous mode [ 1106.172226][T15454] veth1_vlan: entered promiscuous mode [ 1106.421588][T15454] veth0_macvtap: entered promiscuous mode [ 1106.435894][T15454] veth1_macvtap: entered promiscuous mode [ 1106.457790][T15454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.519460][T15454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.538177][T15887] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999996 out of range (51000000..2150000000) [ 1106.586547][ T906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.587060][ T906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.587426][ T906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.607277][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.013741][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.013780][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.145024][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.154081][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.273914][T15898] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1111.544575][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1111.558947][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1111.560583][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1111.565778][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1111.929423][T15931] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1112.403628][T15945] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1112.447761][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1112.464089][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1112.472644][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1112.481219][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1112.493155][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.605849][ T5899] libceph: connect (1)[c::]:6789 error -22 [ 1112.613970][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1112.785124][T15946] ceph: No mds server is up or the cluster is laggy [ 1112.929804][T11670] libceph: connect (1)[c::]:6789 error -22 [ 1112.931465][T11670] libceph: mon0 (1)[c::]:6789 connect error [ 1115.064267][ T5619] Bluetooth: hci2: command tx timeout [ 1115.792003][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.792088][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.537817][ T5616] bridge0: port 3(syz_tun) entered disabled state [ 1116.891770][ T5616] syz_tun (unregistering): left allmulticast mode [ 1116.905020][ T5616] syz_tun (unregistering): left promiscuous mode [ 1116.920764][ T5616] bridge0: port 3(syz_tun) entered disabled state [ 1117.169321][ T5619] Bluetooth: hci2: command tx timeout [ 1119.178816][T15999] ima: Unable to open file: /e (-2) [ 1119.226636][ T5619] Bluetooth: hci2: command tx timeout [ 1120.020549][T15995] ima: policy update failed [ 1120.140463][ T30] audit: type=1802 audit(1786469793.413:92): pid=15995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2959" res=0 errno=0 [ 1121.306860][ T5619] Bluetooth: hci2: command tx timeout [ 1121.497077][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1121.779017][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.789880][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.797554][T15943] bridge_slave_0: entered allmulticast mode [ 1121.807029][T15943] bridge_slave_0: entered promiscuous mode [ 1121.817747][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.826618][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.835698][T15943] bridge_slave_1: entered allmulticast mode [ 1121.845241][T15943] bridge_slave_1: entered promiscuous mode [ 1121.924452][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.944271][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.042257][T15943] team0: Port device team_slave_0 added [ 1122.056290][T15943] team0: Port device team_slave_1 added [ 1122.130404][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.139138][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.165618][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.179166][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.247541][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.293816][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.388932][T15943] hsr_slave_0: entered promiscuous mode [ 1123.389965][T15943] hsr_slave_1: entered promiscuous mode [ 1123.390680][T15943] debugfs: 'hsr0' already exists in 'hsr' [ 1123.390698][T15943] Cannot create hsr debugfs directory [ 1124.407017][T16024] device-mapper: table: 248:0: zero-length target [ 1124.413705][T16024] device-mapper: ioctl: error adding target to table [ 1124.857776][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1125.180931][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 1125.190629][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1125.216980][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.230862][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.246139][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 1125.374241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.383981][ T9] usb 5-1: Product: syz [ 1125.384232][ T9] usb 5-1: Manufacturer: syz [ 1125.391353][ T9] usb 5-1: SerialNumber: syz [ 1127.968810][T15943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.249829][ T9] usb 5-1: 0:1 : does not exist [ 1128.422393][ T9] usb 5-1: USB disconnect, device number 28 [ 1128.534933][T15943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.486068][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.539024][T16034] xt_l2tp: invalid flags combination: c [ 1130.244207][T15943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.174623][T15943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.244442][T16058] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1133.412205][T16074] device-mapper: table: 248:0: zero-length target [ 1133.412448][T16074] device-mapper: ioctl: error adding target to table [ 1136.389719][ T30] audit: type=1800 audit(1786469809.773:93): pid=16081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2978" name="active" dev="configfs" ino=59074 res=0 errno=0 [ 1137.002216][T15943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1137.202794][T15943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.203622][T15943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1137.326572][ T30] audit: type=1800 audit(1786469810.703:94): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2979" name="active" dev="configfs" ino=59077 res=0 errno=0 [ 1138.039542][T15943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1138.048972][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 1138.295716][T15943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1138.330235][T15943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.336048][T15943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1138.395422][T15943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1138.499317][T16096] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1138.541470][T16104] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1138.603336][T16108] ALSA: mixer_oss: invalid OSS volume 'ip_vt' [ 1138.610478][ T30] audit: type=1800 audit(1786469812.003:95): pid=16108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2985" name="file0" dev="overlay" ino=3388 res=0 errno=0 [ 1138.778118][T16115] device-mapper: table: 248:0: too large device [ 1138.778200][T16115] device-mapper: ioctl: error adding target to table [ 1141.499587][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1141.499732][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1141.566994][T15943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.598106][T16123] ceph: No mds server is up or the cluster is laggy [ 1141.615286][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.763148][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1141.783272][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1141.798966][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1141.816743][T16137] device-mapper: table: 248:0: zero-length target [ 1141.823305][T16137] device-mapper: ioctl: error adding target to table [ 1142.146866][T11670] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1142.274622][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.274747][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.345678][T11670] usb 2-1: not running at top speed; connect to a high speed hub [ 1142.354741][T11670] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1142.371830][T11670] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.386209][T11670] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.414963][T11670] usb 2-1: language id specifier not provided by device, defaulting to English [ 1142.456005][T11670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.464928][T11670] usb 2-1: Product: syz [ 1142.465027][T11670] usb 2-1: Manufacturer: syz [ 1142.465073][T11670] usb 2-1: SerialNumber: syz [ 1142.563487][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.563610][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.743914][T11670] usb 2-1: 0:1 : does not exist [ 1144.913382][T16148] overlayfs: failed to resolve './file1': -2 [ 1145.803667][T16156] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1145.833430][ T30] audit: type=1800 audit(1786469819.193:96): pid=16156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2995" name="file0" dev="overlay" ino=118 res=0 errno=0 [ 1145.957193][T11670] usb 2-1: USB disconnect, device number 16 [ 1146.170781][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1146.315784][T16162] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1146.322263][ T30] audit: type=1800 audit(1786469819.703:97): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2996" name="file0" dev="overlay" ino=132 res=0 errno=0 [ 1146.657803][T16167] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1148.412749][T16185] device-mapper: table: 248:0: too large device [ 1148.413047][T16185] device-mapper: ioctl: error adding target to table [ 1148.677788][ T5621] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1148.887182][ T5621] usb 6-1: not running at top speed; connect to a high speed hub [ 1148.895218][ T5621] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1148.912471][ T5621] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.912523][ T5621] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.941372][ T5621] usb 6-1: language id specifier not provided by device, defaulting to English [ 1148.978817][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.978886][ T5621] usb 6-1: Product: syz [ 1148.988273][ T5621] usb 6-1: Manufacturer: syz [ 1148.988368][ T5621] usb 6-1: SerialNumber: syz [ 1151.280301][T15943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.395641][ T5621] usb 6-1: 0:1 : does not exist [ 1152.120661][T16199] device-mapper: table: 248:0: zero-length target [ 1152.120734][T16199] device-mapper: ioctl: error adding target to table [ 1152.612723][ T5621] usb 6-1: USB disconnect, device number 5 [ 1153.479211][T15943] veth0_vlan: entered promiscuous mode [ 1154.645140][T15943] veth1_vlan: entered promiscuous mode [ 1154.706234][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.880391][T15943] veth0_macvtap: entered promiscuous mode [ 1154.913118][T15943] veth1_macvtap: entered promiscuous mode [ 1154.969360][T15943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.982686][T15943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.127906][T16223] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[16223] [ 1155.599921][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.599991][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.600021][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.600046][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.870921][T16230] overlayfs: failed to resolve './file1': -2 [ 1158.723760][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.744902][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.970242][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.978535][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.398459][T16250] device-mapper: table: 248:0: too large device [ 1159.398595][T16250] device-mapper: ioctl: error adding target to table [ 1159.689590][ T25] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1159.889414][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 1159.898180][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1159.940067][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.966355][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.983678][ T25] usb 4-1: language id specifier not provided by device, defaulting to English [ 1160.053085][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.062365][ T25] usb 4-1: Product: syz [ 1160.062451][ T25] usb 4-1: Manufacturer: syz [ 1160.062539][ T25] usb 4-1: SerialNumber: syz [ 1160.792568][T16251] ceph: No mds server is up or the cluster is laggy [ 1160.821897][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 1160.823040][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 1161.170192][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 1161.234169][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 1161.753501][ T1233] libceph: connect (1)[c::]:6789 error -22 [ 1161.854242][ T1233] libceph: mon0 (1)[c::]:6789 connect error [ 1162.359276][ T25] usb 4-1: 0:1 : does not exist [ 1162.683623][ T25] usb 4-1: USB disconnect, device number 20 [ 1162.848965][T16270] device-mapper: table: 248:0: zero-length target [ 1162.849345][T16270] device-mapper: ioctl: error adding target to table [ 1163.809691][T14136] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1164.194096][T14136] usb 6-1: not running at top speed; connect to a high speed hub [ 1164.203424][T14136] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1164.235646][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1164.268899][T14136] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.279771][T14136] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.309324][T14136] usb 6-1: language id specifier not provided by device, defaulting to English [ 1164.371502][T14136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.371572][T14136] usb 6-1: Product: syz [ 1164.380156][T14136] usb 6-1: Manufacturer: syz [ 1164.380189][T14136] usb 6-1: SerialNumber: syz [ 1164.679862][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1164.680040][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1164.780843][T16275] ceph: No mds server is up or the cluster is laggy [ 1164.969113][T16283] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1165.002451][T16283] binder: 16281:16283 ioctl c0306201 0 returned -14 [ 1166.035726][T14136] usb 6-1: 0:1 : does not exist [ 1166.207716][T14136] usb 6-1: USB disconnect, device number 6 [ 1166.704261][T15507] udevd[15507]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.203412][T16290] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1167.234933][T16297] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1167.235068][T16297] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1167.235116][T16297] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1167.604802][T16302] syzkaller1: entered promiscuous mode [ 1167.604842][T16302] syzkaller1: entered allmulticast mode [ 1167.764410][T16308] ima: Unable to open file: /e (-2) [ 1170.613765][T16304] ima: policy update failed [ 1170.614967][ T30] audit: type=1802 audit(1786469844.003:98): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3032" res=0 errno=0 [ 1170.992694][T16329] device-mapper: table: 248:0: zero-length target [ 1170.992724][T16329] device-mapper: ioctl: error adding target to table [ 1174.106800][ C1] [ 1174.109163][ C1] ================================ [ 1174.114344][ C1] WARNING: inconsistent lock state [ 1174.119526][ C1] syzkaller #0 Tainted: G L [ 1174.125508][ C1] -------------------------------- [ 1174.130612][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1174.137534][ C1] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1174.143528][ C1] ffff88807fecc260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1174.152966][ C1] {SOFTIRQ-ON-W} state was registered at: [ 1174.158781][ C1] lock_acquire+0x115/0x350 [ 1174.163384][ C1] lock_sock_nested+0x41/0x100 [ 1174.168317][ C1] x25_release+0xa0/0x3d0 [ 1174.172739][ C1] __sock_release+0xa0/0x1f0 [ 1174.177538][ C1] sock_close+0x1c/0x30 [ 1174.181794][ C1] __fput+0x418/0xa50 [ 1174.185913][ C1] task_work_run+0x1d9/0x270 [ 1174.190632][ C1] exit_to_user_mode_loop+0x1fa/0x750 [ 1174.196104][ C1] do_syscall_64+0x328/0x510 [ 1174.200810][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.206842][ C1] irq event stamp: 55228168 [ 1174.211404][ C1] hardirqs last enabled at (55228168): [] __local_bh_enable_ip+0xd0/0x130 [ 1174.221588][ C1] hardirqs last disabled at (55228167): [] __local_bh_enable_ip+0x71/0x130 [ 1174.231757][ C1] softirqs last enabled at (55228064): [] __irq_exit_rcu+0xca/0x220 [ 1174.241431][ C1] softirqs last disabled at (55228071): [] __irq_exit_rcu+0xca/0x220 [ 1174.251157][ C1] [ 1174.251157][ C1] other info that might help us debug this: [ 1174.259219][ C1] Possible unsafe locking scenario: [ 1174.259219][ C1] [ 1174.266671][ C1] CPU0 [ 1174.269959][ C1] ---- [ 1174.273318][ C1] lock(sk_lock-AF_X25); [ 1174.277658][ C1] [ 1174.281113][ C1] lock(sk_lock-AF_X25); [ 1174.285696][ C1] [ 1174.285696][ C1] *** DEADLOCK *** [ 1174.285696][ C1] [ 1174.293900][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 1174.299795][ C1] #0: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 1174.309953][ C1] [ 1174.309953][ C1] stack backtrace: [ 1174.315852][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.326370][ C1] Tainted: [L]=SOFTLOCKUP [ 1174.330698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.340767][ C1] Call Trace: [ 1174.344052][ C1] [ 1174.346903][ C1] dump_stack_lvl+0xe8/0x150 [ 1174.351515][ C1] print_usage_bug+0x28b/0x2e0 [ 1174.356294][ C1] valid_state+0xbe/0xf0 [ 1174.360546][ C1] mark_lock_irq+0x36/0x380 [ 1174.365099][ C1] mark_lock+0x117/0x190 [ 1174.369367][ C1] __lock_acquire+0x6b7/0x2e50 [ 1174.374144][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1174.379487][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1174.384529][ C1] ? lock_acquire+0x115/0x350 [ 1174.389220][ C1] lock_acquire+0x115/0x350 [ 1174.393733][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1174.398860][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 1174.403996][ C1] lock_sock_nested+0x41/0x100 [ 1174.408779][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1174.413903][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1174.418853][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1174.424249][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1174.429726][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1174.435231][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1174.441138][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 1174.446528][ C1] lapbeth_napi_poll+0x42/0x90 [ 1174.451436][ C1] __napi_poll+0xaa/0x330 [ 1174.455841][ C1] net_rx_action+0x61d/0xf50 [ 1174.460458][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1174.465595][ C1] ? lapic_next_event+0x11/0x20 [ 1174.470491][ C1] handle_softirqs+0x225/0x840 [ 1174.475272][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1174.480068][ C1] __irq_exit_rcu+0xca/0x220 [ 1174.484681][ C1] irq_exit_rcu+0x9/0x30 [ 1174.488940][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1174.494600][ C1] [ 1174.497548][ C1] [ 1174.500485][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1174.506475][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1174.512131][ C1] Code: 6c 77 02 e9 c3 07 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8f 0e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1174.531748][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 1174.537870][ C1] RAX: 00000000034ab6a5 RBX: ffffffff819b871c RCX: 0000000080000001 [ 1174.545860][ C1] RDX: 0000000000000001 RSI: ffffffff8e25543f RDI: ffffffff8c4c8980 [ 1174.553860][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733b9b R09: 1ffff110170e6773 [ 1174.561853][ C1] R10: dffffc0000000000 R11: ffffed10170e6774 R12: 0000000000000000 [ 1174.569834][ C1] R13: 1ffff11003c54bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1174.577826][ C1] ? do_idle+0x1cc/0x540 [ 1174.582107][ C1] default_idle+0x9/0x20 [ 1174.586361][ C1] default_idle_call+0x72/0xb0 [ 1174.591130][ C1] do_idle+0x1cc/0x540 [ 1174.595216][ C1] ? __pfx_do_idle+0x10/0x10 [ 1174.599825][ C1] cpu_startup_entry+0x43/0x60 [ 1174.604617][ C1] start_secondary+0x101/0x110 [ 1174.609400][ C1] common_startup_64+0x13e/0x157 [ 1174.614360][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1174.617480][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 1174.617501][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 1174.617520][ C1] preempt_count: 101, expected: 0 [ 1174.617533][ C1] RCU nest depth: 1, expected: 0 [ 1174.617545][ C1] INFO: lockdep is turned off. [ 1174.617554][ C1] Preemption disabled at: [ 1174.617562][ C1] [<0000000000000000>] 0x0 [ 1174.617605][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.617632][ C1] Tainted: [L]=SOFTLOCKUP [ 1174.617639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.617652][ C1] Call Trace: [ 1174.617659][ C1] [ 1174.617667][ C1] dump_stack_lvl+0xe8/0x150 [ 1174.617697][ C1] __might_resched+0x378/0x4d0 [ 1174.617728][ C1] lock_sock_nested+0x56/0x100 [ 1174.617757][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1174.617779][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1174.617804][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1174.617829][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1174.617861][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1174.617886][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 1174.617913][ C1] lapbeth_napi_poll+0x42/0x90 [ 1174.617938][ C1] __napi_poll+0xaa/0x330 [ 1174.617966][ C1] net_rx_action+0x61d/0xf50 [ 1174.618000][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1174.618035][ C1] ? lapic_next_event+0x11/0x20 [ 1174.618058][ C1] handle_softirqs+0x225/0x840 [ 1174.618084][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1174.618112][ C1] __irq_exit_rcu+0xca/0x220 [ 1174.618136][ C1] irq_exit_rcu+0x9/0x30 [ 1174.618158][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1174.618187][ C1] [ 1174.618194][ C1] [ 1174.618201][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1174.618223][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1174.618252][ C1] Code: 6c 77 02 e9 c3 07 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8f 0e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1174.618269][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 1174.618288][ C1] RAX: 00000000034ab6a5 RBX: ffffffff819b871c RCX: 0000000080000001 [ 1174.618303][ C1] RDX: 0000000000000001 RSI: ffffffff8e25543f RDI: ffffffff8c4c8980 [ 1174.618317][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733b9b R09: 1ffff110170e6773 [ 1174.618332][ C1] R10: dffffc0000000000 R11: ffffed10170e6774 R12: 0000000000000000 [ 1174.618346][ C1] R13: 1ffff11003c54bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1174.618363][ C1] ? do_idle+0x1cc/0x540 [ 1174.618395][ C1] default_idle+0x9/0x20 [ 1174.618412][ C1] default_idle_call+0x72/0xb0 [ 1174.618431][ C1] do_idle+0x1cc/0x540 [ 1174.618460][ C1] ? __pfx_do_idle+0x10/0x10 [ 1174.618492][ C1] cpu_startup_entry+0x43/0x60 [ 1174.618521][ C1] start_secondary+0x101/0x110 [ 1174.618549][ C1] common_startup_64+0x13e/0x157 [ 1174.618579][ C1] [ 1175.048936][ T5627] bridge0: port 3(syz_tun) entered disabled state [ 1175.111054][ T5627] syz_tun (unregistering): left allmulticast mode [ 1175.111100][ T5627] syz_tun (unregistering): left promiscuous mode [ 1175.111155][ T5627] bridge0: port 3(syz_tun) entered disabled state [ 1175.460466][ T4158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.581698][ T4158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.644259][ T4158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.780842][ T4158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.882760][ T4158] bridge_slave_1: left allmulticast mode [ 1175.882797][ T4158] bridge_slave_1: left promiscuous mode [ 1175.882920][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.905128][ T4158] bridge_slave_0: left allmulticast mode [ 1175.905165][ T4158] bridge_slave_0: left promiscuous mode [ 1175.905290][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.007470][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.021305][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.031245][ T4158] bond0 (unregistering): Released all slaves [ 1176.291401][ T4158] hsr_slave_0: left promiscuous mode [ 1176.297103][ T4158] hsr_slave_1: left promiscuous mode [ 1176.298042][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.298063][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.298614][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.298637][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.312046][ T4158] veth1_macvtap: left promiscuous mode [ 1176.312074][ T4158] veth0_macvtap: left promiscuous mode [ 1176.312134][ T4158] veth1_vlan: left promiscuous mode [ 1176.312174][ T4158] veth0_vlan: left promiscuous mode [ 1176.470355][ T4158] team0 (unregistering): Port device team_slave_1 removed [ 1176.485702][ T4158] team0 (unregistering): Port device team_slave_0 removed [ 1176.529813][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1176.732898][ T4158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.763175][ T4158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.791632][ T4158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.814196][ T4158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.844852][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1176.912907][ T4158] bridge_slave_1: left allmulticast mode [ 1176.912942][ T4158] bridge_slave_1: left promiscuous mode [ 1176.913082][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.940054][ T4158] bridge_slave_0: left allmulticast mode [ 1176.945825][ T4158] bridge_slave_0: left promiscuous mode [ 1176.952432][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.050971][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.061746][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.064531][ T4158] bond0 (unregistering): Released all slaves [ 1177.175231][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1177.220790][ T4158] hsr_slave_0: left promiscuous mode [ 1177.228786][ T4158] hsr_slave_1: left promiscuous mode [ 1177.229390][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.229407][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.236313][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.236330][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.237619][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.237655][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.250345][ T4158] veth1_macvtap: left promiscuous mode [ 1177.250372][ T4158] veth0_macvtap: left promiscuous mode [ 1177.250431][ T4158] veth1_vlan: left promiscuous mode [ 1177.250479][ T4158] veth0_vlan: left promiscuous mode [ 1177.416869][ T4158] team0 (unregistering): Port device team_slave_1 removed [ 1177.443066][ T4158] team0 (unregistering): Port device team_slave_0 removed [ 1177.557066][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1177.805549][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1178.005771][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1178.223514][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1178.411776][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8