last executing test programs: 27.197670006s ago: executing program 0 (id=3024): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) 26.189975675s ago: executing program 0 (id=3026): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', r6, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18, r8, 0xffffffffffffffff, 0x1c}) 22.125904134s ago: executing program 0 (id=3033): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000010040), 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r4, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000010000)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='btrfs\x00', 0x208000, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) tkill(r0, 0x7) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000440)="d7ad", 0x2}], 0x1, 0x5, 0xb2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'veth1_to_bond\x00', 0x3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) 20.776449638s ago: executing program 0 (id=3036): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffa, 0x1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 19.134336563s ago: executing program 3 (id=3039): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$eJzs3V2IXFcdAPBzd3c2u0lrNjXRNY1tYrWt2m6azRqrQZOSIBqaIr4Uii8hTWswRrCCWgomefLNlpKCT37gU19KFcGCSOiTLwUbKEKeqqAPDRELPtRoMrIz98zMPZnJ3dmPuTO7vx/cPXPvuXf+587euffOvfecE4ANa6zxd2FhNgvh4hsvH33v/n9ML0451JpjpvF3omOsFkLI8vGJ5P3eHW+mN95/4WS3NAvzjb9xPDxxrbXslhDCubA7XAozYefFyy+9Nf/48fPHLux5+9WDV9dm7QEAYGP5+qWDCzv++ue7t11/7Z7DYVNrejw/n4kTpprn/YfzE/94/j8WiuOL6bYrSZD22xZ+NywOY9PFWce7zNcZp5bMN9El/uIwmRSh1mO+TeH28cc7pnVbbxhlcTueCdnYXAhhc2t8bGxurvmbPDR+109mc2dPn3nmuYoKCqy6f98bQtjdMRy5UBwftuHQEJRhmUN9CMowksPhwcW6Xm+qfJ0HNNS3Vr0HAmhK7xfe4ly2qvFa7zZx2/itSwDXHhvrvjysgkFv/33Fn7wl/vRA44eK138I4v/6vD0Oq2e9bk1xveL36I58PL2PkD6/9Mofisu1pXc6ilPT+xG1JZaz132EUbm/0Kuc4wMux3L1Kn+6XaxXX8rT+Dl8uZB7b+H7k/5PR+V/DHT3QXr932BYw+HR96ovw8gPoTBeW8l71Sve/wDDK31urh7vj+YmS/I33Tb/q604vZafLsnfXJK/pSQfNrLffv+n4cWsfb0r/U3f7/XweJ3tzjz9UJ/lSa9H9hs/fe63XyuNnz5PDMPs9yeePPXo009dbj7/n7W2/5v59h5/bszk361L+QzxemF6XT0+V9+uOFDMT+e7KynPnV3mb7zeXpwv295+n9Cxn7mlHLPF5bb2mm9Xcb6ZZL7pfJhKypuen2xOlovnH3G/Gj+viWR9a8l6TCbliPuVbXmalgOWI26Pyde19fx/3D5nQy175vSZU4/k43E7/dN4bdPi9H0DKi+wetL6P+3xYv2f2VCs/3NHa3ptrHO/sLU9PWvuF17P3684fb4Vp2N6x0EtHue+NT7dmH/u5HfPPL3K6w4b3XM/ev7bJ86cOfW9/l8cW9ni6+fFV4ajGP28iD9bhqU8XvT7Yvdah6h4xwSsub0/bh7FHz79nRPPnnr21Nn9Bw7sn58/8IX9C3sb5/V7O8/uO52roLTAamof9KsuCQAAAAAAAAAAALBUPzh29PI7b37+SrP+f7v+X6z/H5/8jfX/f5LU/0/rycd68LEe4LYu+Y15kgZWJ5P5avnw4aS825M4O5LlPpKnrX788vr/MVzarmssz0eT6bUeo0lzAre0lzKZtEGS9hf4iTy9kKe/ClChrHsT/ul226V96+yDjm09tk/RUYW3rn3g0RH/b42toaNJo1j/u2u7Tl3qazNaBlFjsep1BLr754Zq//tf7RXvY7mHKi/3RhsmBhvvZ/1vE+tlqPc8S19qDzYAq6Pq/j//Hppx4/XPs3/82tTiEGe79lhxf5m2Xwr9+Ms7xfFh739yreOn/fYNOn7V6z/o/j9b/d/l+7+43+u9/0t6zEsbjl2i//z86pWOsGHnUuOn6x/bgd7eX/zrefy4Ng+EpcWv/zKJn94QWqL/JvE3LzH+Leu/a3nx/5fHjx/bg/ctNX6zxNlYsRzTyXrE+3/pdePoRrL+sW3P28T/xvPd1n+ZHTXezOPDRjYq/cz2KzmPaJ20l/X/2+/xf6X9/7YKmxULkz6H8bl8PO6I43MOaX8n/ZY/Pl8RjwM7kvfPSo5v+v8dbV/M07LvQ+z/N26PM/khv2O88VnG8VqXz3a97mtgVL1bev8v/9YOwb2KjqF9EKu+LF2Gq5tXULap6stv6GOojy9juU1Dsv3W6/W1vaBVotLgVP75V/07oer4VX/+ZdL+f9Nz+LT/3zQ/7f83zZ8qyZ/O/0O98tP+f9PPM+3/N0sLnrxv2j/wbEn+x0ryd3bPb0W/u2T5XSX5Hy/J39PKP1SYI+bfc9vl2/P1ev+7SvLvK8n/ZEn+p0ry7y/Jf7Ajv7MP6Jj/6WT5LMlf72J9lF6fH7B+pfXzfP9h44j3f3p9/7e38yc7ZxlsKYG18Mpr+4489ZtvzjTr/0+2rofE+3iH8/Fa/tvoh/l4et87dIwv5r2Zj/8tyR/26x2wkaTtZ6TH/wdK8oHRFZ/z8v2GDSib6j45T8varep1ns9o+UyefjZPH8rTh/N0Lk/35um+PJ0fUPlYG0de/93BF7P27/2tSf5SnydP6wMV2okKIexfYnnS6wP9Ps+etuPXr5XGX2Z1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMqMNf4uLMxmIVx84+WjTx4/vXdxyqHWHDONvxMdY7XWciE8kqfjefqL/MWN91842ZnezNMszIcsZK3p4YlrrUhbQgjnwu5wKcyEnRcvv/TW/OPHzx+7sOftVw9eXbtPAAAAANa//wcAAP//kusIDw==") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) creat(0x0, 0x109) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x800, 0x49, 0x4, 0x7fff}, 0x8) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e22431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f5010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123fad5267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d409baeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d50000000000000001af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d5d40b88d2a810c489fc40e26af417fbd7754961841974230b98fe4c02cbc41eb1a61a4e9c19ab2362b2f0098b60cc1e4b25d5b3fe540a08e6153dd229c935846240ab79451fb359792b4c7103cd3307744477fa78dbb78512cf497dfef5d97245f4c3b34c6b89f072e381a35d1d7d3e0db5629985889ad49c5c9268d269d1e3c14c0ed4f390cd88353fd387fa"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x13, 0x0, &(0x7f0000000000)="072731a0fe207a5d0a00000000daf6b5b1c64f", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fchdir(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") 19.120835008s ago: executing program 0 (id=3040): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xdf, 0x0, &(0x7f00000007c0)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) creat(0x0, 0x109) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x800, 0x49, 0x4, 0x7fff}, 0x8) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x3, 0xf2, 0x80000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000200)="c1", 0x1, 0xfecc) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 17.44204159s ago: executing program 0 (id=3041): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0xc0d61) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="d4000000000000007911480000000000710000000000000095007400000000000389c0dc1b1e8fcc938d01cf519bb9961bd83651f71eae29addf26fd6bb266a297034656858dc13d3dc6e7203903445d797181deb467614fe34ebad68953f908310ffae9a73902ffd2f6237b06c71b546ffbab54133529ebf08cc647b2050f7bf98d8f8414dcc43c641c235975e46ea61aaff290768995d1b2b781e37151013379197884a6c79b9e7b6678c6cfa417c62f8e4d0d92787fc0a0d16bb9cb646178f37e5313d5cf7bdeb8f750c00b730250e0472962f38856b802e86cd8221d779c0ac20e70d5a763cdc14248415be2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@metacopy_off}]}) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000000c0)=0xfa) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x0, 0x0, r5}) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8613}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xc, 0x7ff, {{0xc, 0x4, 0x2, 0x18, 0x30, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ssrr={0x89, 0x1b, 0x65, [@multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000500)={0x7c00000, 0xb000, "131a79ac4e00927d4fb3cd4f6532840360e9bf19ef841ffc", {0x1, 0x1}, 0x6}) 12.784301894s ago: executing program 4 (id=3051): socket(0x10, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_usbip_server_init(0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) 12.706963489s ago: executing program 2 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000180)={[0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 12.284044812s ago: executing program 1 (id=3053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='nfsd\x00', 0x2004041, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket(0x5, 0x800, 0xb62) 12.185970161s ago: executing program 3 (id=3054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x5) fchdir(r6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 11.142893473s ago: executing program 4 (id=3055): set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) socket$xdp(0x2c, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=ANY=[@ANYBLOB="242000003c0007010000000000000000037c0000f41ffc80f01f0880e91fab803b15277f3e1336b0401dc1c28edf5d148a103aaea225343b51003aeb8cc17d334fb46f4f55ce797d6c1b2914471b845f140402ff02f41ec98511d246bdf160f30ca6d0179227b4f6b6510ee7e1436f8ab8ea578cc3f4bad3f28a6d33a666d64a2a2a29c74c48e6f108d711f6f2a33fdd8994872b851582191b479756a621088c1b21b3cef496e5a12cffe355eb483199b62fd6cf87513c582043a1ba43291794eef2cdadad22fc5035ab8043c14b5c630102a07ce565e33362cdbc5a2accf2dae93ed1e42ffff6814eca0a36a76ed815f8c9bd607b95b7ae6cd498d2d7e7096ef3011fdb8074f12bf46e17389db2f153e90f975ff89c6f0aa0b99b066ef09232bab46e063361a0b7cfad58a34cfe3135932ce0e60831936ccddd6a22b07fd510b7bede9a8103cae0d766fae17914541dca69f34c06adade5aaf59ff028b8b1132480e53b55081f79e271c898282f2d281bf0906aa89276525d7ca2bbcf3ad920e597bf2f31689e2d4f674f37ca55be21311f9ab59077c27834da066925c590549b48de6bccfc81ef321e3b0dd716e71ff4843147ac0f6277a29f9a42fef74f13659152946f7fbefaf1789e66cedaa11d1e9e42fb21a9e9b4f7179b1eb106d98eb006bfaf56a96cecf7e7dce1249519f9d5071489bf89e3b95421a45d6239c3770570e529e89e560f091601de77a283d632e6f52c55cdf7d85efa4e5d6b1021ffc8191f8145fdd963af1f8002daa950dfbc9437dd13eca132a2f6d9aba3e604f4e7c9def6e99015120c091dba7c7634a82eef04812a57e42227cf5369e5daa1d6baede93bf958c53686e0835cf80e3190a1824e23b47b5464e812fd016e12b07b1c71670fdb51ae3dd629545b375e499dde1125d14e9ba2ea10642c3f37b1633e9684b22d5bead9571e624047f4243be0177699f5dabf56a6df95b6711b4f905aa083438897f638dfe7e8d15e9af2e5852cde158da996fefc0d2829df84909d30fd7cb3cdd5a12bf33fc6eee1d7774c6bbfc0416d527bdea73df722c76de6134c498a7664df8e036126704ab9a57dbe228b0973e42bdcbc20941be9479c680376e3ceb70cbe7d82ed8faf08363faf80acb8b270ac4439b7ad56398db4a940809a0ae6bdfe295cd2933a7a08cf9d4626e17e7c500a7bfea449ecd2e71cbd295cb5897c0bd1f51c83d8913f07f11bd72e8ae6514ce1d7696365ef21e7f24d8b41ec450f8981855532241241b649ffa04744a8fd586f416ebe7b1b404c04db0c6f015cbcaba7d5197c7a510a46a5548ccf2da889d0b9da08cf844cbe5368ffa5385f60fdb2eefef9383818a82edfa04977ab4b30edec1a0e48965c8aa4a1987313ca1deb0d46f648c44d635d60f33443b1ce4f9731444598195fcd452f14a667cce7b49d2c0d6ad46b10c57905fadd540507d17bd123734105a600c1b249b1f49123b3de9ee263e9d6ae983382b7223d86221526c9d9b6a73179052aceba3c183e30b27762c656b026af95321ab249c23a56a21e6f7c880d1627b4dfd76a0960be2b5263a538a8d20eae60eeb15fbf40008e9b7ea9619fedf5e1d2df9d73023dd7f6a405d391dfb1cd12857024c29b9e6bfd807ced9d6d2687d51aebec593003952e0d86f441ff5681ca8438fbc87a10b49df0603ed6feb93ba349a4742b80f562891b92c5ca119f3f5564d01a4b763136d9e2af21666a535e204a15a99cf151c4931db23fc93ec84c1fbfb0e6dbffe211f2dc43bd5ce29932d4b28f9c98a59781475201c58c2e1eef38c10d8c2339e148e45e4d9306ccc07a4aa67cea20496dafa58b15036919ab21ed8ed21f4d3b967abd01c96c477962e6e4d7c1130647c06d849ec8f39f7ae19b703ff40ca5318884fdf1f4e5b542345864a6b7fa87985d0e84e019834f0a8b6e3c97ff987de8c7834a35c648d01465f2a3c949364dc8c3b7e35c538a67de21db8491db16dd2282e98fa915b218cb965e234c1224cd031c3975e33e7b17f940b9c14f22bb89a057e513ab5d917040a4a06e9d6c55b9f1d7c53e1afc3234f28291cde351969003ae8048db67749c3374052e764cc268d6b81e7ce96c30a6bb9c777062005fa93c39956c9175228037fc4467600bb5c1e86ee36dae87ea92755e1384dff835f02474c52ad123ba9f95fda23cf614758cc97141a9e1103c91ff05f993f2d45b8b69c119fbd579011e7762417e783273b8c04f6198a90f0f62903eaf494137b54749f98ebd1bd00c3837944068b56e08b20dfe6f389b1d014f89ae441eddacb2d7dc9d65e0ffb13df69010316ffd4a48497179eb3628d3a9acbaeb148bd64c01598b4ee5cc09262c400f0f9be0af609552f561b29c060bdc08c9f246f35666c56e8f3d72db9453bb03240f686ea0278dc5ea5e823876509639424e52005c4ecb15f9f16561bcc35ed121e76464ad81c598cddaa5244eaef9534e01868b9f9a0e5e0641b59ff9d6099ecd4272925c4e5a90acd168a3f385b722d7b9c7c99f5cd430d19d0cd4ceec5de94cb1025d295324b5e586fde0bc96eecc3fd453070c1160ecbeff4a23580377a6e55e2644a99c704ddc2e5436ae15423fe7c382012e5e0e729ad2413ddb676cf2fbc21261d9decf5adfcb40e1bee15d3a5627cd02764291419455e2ce852e24ce1004f9eb9bc7ccfb458c42f0f5031a56a2b2fec0411c9784e0eb37ec00941b220ea0cfeb4de9524919f9d38494fcc6a722aa80dbd4bc06c7da7a5ea490ecc01e3d2156ecab50ee5dcb9ec153f517a2c58f924bff6d39a4768c6da9b8febe21aa9f35f11c4a939c93d8b0d5c2b4462b3cf3fc6cf63fc35ee81bb7694e3901c6c5eaad25d29ec468117a3fb799dd74ed02de8704c1b417d8fae792e4130184f5f7c678276435f515c60796db27d00020506cdd7ee6afbfe3276465cfd848303322404503ca54cf7937a4dc7c348f88aa33435cce88440845ad86729ae6acd1967a3c2b2ae20de320f6e17d40f0c5c6fae2510f47f15a0fcef3cea5f511047980f338f964c417eccf5bb2d5ffc4dfc2c023d30997ecbff65236bc5e88186af72192b9e43076f3b4d558d34284e1fc0ff7ab60bdea112202319c42a8b6ef55a135fe3b63133649dd6e13c54ab2f9c1923b4acc813f33985d28cbfa307ec104320e33d6c001494ab58315f078a4d18ba76adb96b3c0c8684cec28e2bd7cdee9e1873b4c8edd1c56d4155449ce53705915098fb730a17b396332f74fed1b4bed9978111247f5a5e842dcc2586acb5b6397be3846197984b3010a0eb76df897eb2ed14238d0422b677458b101098a1e8742838123c7d0a365622d80795a7b750a98267876b5ee2ad69e99f27fef158d6b63f36d3303f4ca3fe114f194ee510edd23af4693536c70457ec5b47acc86b2a7f345c0c88c0171d577d98d5afdf957c75668a582f94e418830442f641194362dac3708563be55fd502276f2a15805f496802f26e731fc4eff25d1167828975d0b2dc8c2609658978db1e0369a8183828e5604c4fc66cdbfb65596d583d2174c41f89b0e6d5814365e13963012865a465a7ca797c659e0eb1bb950621b54211dbaf88a9e5cc69b2d85c9bf0cea772e45c1a3446b10d1d4ccc28c0fe95114011638f5f07a45d4763de8cb869300122c91985425d6d3736c4185094e2bf8d2fadde176bc53fa4c681eec55c73686b57c31f4e076d2e489a6e67cd74a8bf30f459eaf89b05ff7a77a342ae99818463021712615bbae65b682ac054a71b886f15220efe731b2412391b3029a5291a4aa5cee2da158505cc5655404faf7d69d73189e0728aac025082934acdddcba1fef84007c3277334801ef343f5f909ed6b054525434a5301b56579d3bee52cb65d948eee50a614858acd7d764736d1d9686cf8fbe9093455e7b22cd24e9b16cbe0558b6ce5b14395164b75f73b3a0da5850961b45d522b376777c110e357d8aed7a497b211aec40cf902b38f4770613a81a13476986401c8f140b6aaf5f3bb2f14d2454371c335c8a6a6911961a2a9e1d4d3ae718461d8112eff9f10047877a03b6c198e6552b7531cc11c560419a541bcdcb1d929ddbe9ecfc4d4d199c4c396da7be1f2620aad4cf5205fe51e71f1eb4fbf66aed099a1d35fe01b2bca635f8880060051e040abec663ea08f88daa633a5692c10665c384dd66fbbb86ecf28d8e54c3c2207ea0061f07b5831e3bf5cbab78c63a4fb315b76294b5dd457e78df73e79e269d589dea66e26aaf7987260f83c0f3b8133116ea187fba2f54fd591cfd3c0344e638f8b2ea4283a5c167d002860168238a3ee077e7b7621771faa642226e553cab64fc19e562b66b46df4bf5b374d744a8f9dd4cd72837b8fae4bd90953b9ca19d7e4b4c735cc3c1b04624bf850899764cd22a90a4ae90c7353c5a4d1467839553bfddd3eb03cb15aa60b992ce24d48c8160f3884bdce9979f2f4e84db4a038cb0d708fccbb1c90fc92985ad5d6ebdf71516aae0b9358feec9e87a1f30e19d9ecf12e07d80a23f86cc0ad22ecb82de517bca57f50b2e82d66ebfc43128b68897a18d48b80e744d6882c178f58cc3f3634be0de97bd894bd07cb6444c0bdcf9ec5ffb517b6de530bb27b726ffc0c6188e0dcf1adf1e08956d39dc28dab9d0bf21696b9163af7dc3bf2a4cd3f69015ca1a6d90f91dcb03772073ae21fff20a11e465f1722889d6eb917702897d0286c0b96140a517703d0fe249999ab1cefc63bc5f0a4225e9aeff9c3c67f2442764bb5b3230c3a9b79619e8ab71b2e2c4edcf67c1610b7c056bfe147ad606b2adba82d96a8663544b5724d95b27fb971d07a005977da1c3187715ee1e9542f69eee817d1300e39800d71c785f04dc76fa81c2f5034873254b22571608f476975c7bc8b5d4dc93f36d8a934fce4374d5e58d1bc4a6a74f99c12cf3f317f913effee3c42b258d7725b44bc16704df0ad69d4ae32993e6b59df9b3879db78bc50947f247d6e5fa0897796fa7fd615dbfbf0030db2692188dd142f8119dfae44f53214ca1c5873cf06eca9b395aac1cca524b53d7fa890d9718257096956c7969cd78b84461977ba8d4cd3fb4310fefd1fd64a0ad5e020f3b1c09daec89797fa92e72c2b476fd65e45aa593de54898584ff703ab9a1843af3adec3b3beb407b8438f43d114996b1e8f3336783601f21283910f2e72e3e669058b701c26bb8971daf1be45c48ff64ba88fb403000c2cc25d8323b802eeb5e4d56e4c498dcce83c4618f93f81fd73de927c3ebe98c4263419b0ee0012c75b2a08ef738a04db087e6430aca09ad25aa2f8b76aac48312668def39f27084f23e7a32e78d5b9a808a8c58455b31f8303ed77ed379a2518631ab05ead58106f9d6779939b8e66408338c7b41ee8256e0fa0d990fc5de705dcf156809b9d44342dfe50ee317f3cc1c150247263ec723db57a544a16151034ba0b575aa62a4945cf8f716ca0dfadbf836df92c37d2ebb2d2cde49149f481655925a530f31e42de28ec993c87952f8915d7c15054a4517328d48beb1536bbf89627b76431611774b18ea62ca1ef8fa6298ae2abfd1bc587ed37e0085c6f41c055348dcab7fa0ab53319a9427faec6c78c5105d4cfd86c25faef804ecfebd344e7176894f4efbc970e2b9fe83b20064525915ef4581b96bb2e906fbe62c11fb65ac1f035aaacf911ad77d48028c98d328555d1cddbb6f8385e5c68b19f3f5ba9f5d0186da08504540b35422912a9fab560cd8f771b39b65d39dc9d523dd08b4b78d0962085da338fe2093ceb5f3b8e67961bf044bddd509d0ba05a95ab47f089b16ebaf8209686b0a90f59ef8290f189f10b9fd67f2499a9e6580608671fb5c39a7f5efd3aea3c0c3aafe1141363d32faa4f57b9fa0f77b6ad2fd943ef1c40f155bbfc778ed44ce24d9957e3f47e8c828e33fe43e8777b8f2f3fda7a27e4008da349602cb5d3fce57a9ef77eb72506d8bae71cb9f5ff69e01479c3030600000020db48087f69f0afd534ce44028d9fdbfd2aa6ab66098927b69d5ed6617221f957a8236e23caff7c25331ce0da887ca92735b3ae7a6f3cf05c5606888429d6baf5e3d8f485dda5ad1d33cab4fa2c0b44e63ce811ac21827733fd0e6d80128841cc11dc41ab93c9dc0143c120ad8d31dbc0a797a86db5cf740e906cc52d7384aeced26a64eff83276f310ac4019899e20fd9189a8a854a3a26a4d2f8f93361060eca296cd5f38fb62337ce55f584cad133fde71fb68b02000d0f3573f43a4b5fe1e0ac32cdd01427a2d60640012025da1e46df805b3478de68ea56d32bd4a1fa1ab7a5ad5a383fb9d7698ffa185ceb25e304172388a60fd60180fd838dd91cdadb54a99afed0c36e12c9dacd1dd1984601fe37abd863602b48ed70d7e7e3ab55dca00c5f0184b8339532189e851edb4063c794f1b48d2deb5ff6aa985247009069885374af1620bfab8a8ccf2039f9d9e829a9fce71f35b4ed0dd0068b991a3d286eea0eff094b3486ed59a0fea2ea3f8ff2ed2fbf80555b911acefbb325a05055ce97125daf30ba141ea4664fe8ccfed5f6d12c60ee5c84ae49395b09425bfe04a103b845d092133198686e6edcc13aeb229722219d8099282b95718ee3b55e9ff9f1a0062ffcb11458dd1a7dd4e440f93c951b3b58e70fd734ef6eab1bb12b79066fde98ea4522cbd0dc907dba3a326a9129a0f983e035a9ab0823baebf7d947343a4466834af551a131f4fee8bc1a7f0a567d9a142c83259ba71f9b42ab3db441462063f146a01f7774f890ead7990d7f2e5c67ebc95e46509f485cdcb8cac84f39e55f402b9fa6ff569126638e9cc0a18e92daa113e54033711bda2d9d46be284283fa96e1e02fa37e689906f2e01a8e760c2e8473cd6b7919f998c0f62c0d8dab64fa51f3b09688c1c2cab8fb00b8ee01347dfd0d6e495c7c8ec111cbf9aa15a9a1e0af421b15b90b51828c7c2726032bbaaa547829eb292b486f8760ddfbf8f6b1db6e2b40bd543da04a61f171691964787b53274d9a1b153ff1b62fd12e2fe2e41abe805630d1f8e10744fdc0f491a0fa63e3246bd7aec9d5d3deb048fc840e0fa4894a037d6800fdb885bd3bd73e43f0df689357f49715362f4a389e0b1b3d144dbe3bdf592bdbb83fc11cc97493c19164ecdfbf8a665a90cd42d4e240b32c7894a7a5a0b7c64ab7a53802abdeef72c29b5f263d20a472d47a434e69f17a4c8d73ae0f36bf1b008efd7263af44f5c41ae76ac23acd908b564c446ccf9026ed8790d6b8190f8407af08740169e3928f5ff2183d53a731111409cb4954991c52b04a9eaca8e8c62bacb8bafba423441290c116543f28e5cf96ea9cb9a49600121ac3e598ff1734ca19fb59b6e0d0e928b64230b9cc6b7c5ff0c5fab25730002bc227ac0d3b6c3e815518bea4f5d80f4c43c267432e9f6a3cf2235332f2720859f6caf5f66604300d28a295099b7b93a62f9d2522622f02d99fd17de45d25c8de4a20cc29b7b0d1a1930b139b31daa036687d34ce1304489a86c3f0ec95dfe4626a7baa1f9b806706c85b07753f837a54260c74dd4f5bcffa05939d1149d01923d955e65477de529971bd266dbd6457e7e691902134c2563aabd198a017e08b26381c3e0ae1b242892c3123dd6a4ece7345636a34fe79aecc647bc13ed9b92d77de901db7d442fdd2478798681a0627af3d516e83fcec69d1f5ca5601a9cc65d81d37b2f673e2974e689ddd8cc4331c1c40af47b2f478313e62daf175c47e7c5e130845e140552d3f1aa9b0fb7b35414499bf251a4697e8bd4276e4b85f1b81b12cf3047268e7aabbcf8eaf7a69059db2f45b432fe18f2f886cb0037305946255818dc865dfc66ca313f1d2ef5d669a4149ad4819c3c2c601a3492ae4c951bd8441270d9afee4fd2991cbc1c1e13770ded64da015e73a4a3cdaa70b4071b38189f8af46784aa75cbdb29b40d8f888140a0341f93e491ef398c8cbf5c468c8a17c25a4dd7f8a60ae0e7a6cfe5224bbb21c8b14ebed95581ce3566f06162e1d6b4707fd091afcc4c45661ac8e7d0db92be0033db65ad888c5c25c8ac602598442a512eb60953307ecf8df682df5469f8080bf77f9edc4146dfd9aacfa9d2ceb1093bd275750b2787fd046d6ec5b59570ddc403b35999881764148d5e315948797f19f386bddf30cb38575fd6288dba32e1272334733ab4eb731a66c3854107927b886e9e4424726594973b676f453eebd1897c24794d15c165d790eb42a2f6d925c78e5aa8375f2442b2a51fe10ccc89e0146b87a3c2a6921ff5ce50eb433e98167a9dc44061a174772df7fa0a6bc1569a1171dd1b8a75d80ec9f307f9e0eb1566e2adf6ba0ef2ac08693dc57279f090f19f96a62e073c2fb34d27b498432092e1c982524876e0c5ee53e5de44599a87181438cca4876bcced9ea0ecdc85d16ecf545e9823e293b22478f72e87366a16c3946b30c9567994288ca781845d5d1c5c89ced82eba006ad9a2ebe8a64dbeb6e6607275c55ca6144e44c1805b60476dedc7c6de319ec8663bdd8e14e0d1bbc26c552fdcc58ba6ceea94fdc0f1c45417b4b4a2539cb26329d1fdf73f90c872c956857ce9ce8ba7854bc24652c3b72c03cd010dda397ea0e8b31072a0a2f6f60a23c1bae0ff12b5ebf96a20f0a5d3c4e89baf45b3ad313c524f17dfc6f77c9d1ac85c2fd0c359549afa422e2e2b63b1e6afb3eef83a17f1400a4ee721fdd04a902900b62e92f63b53c63dfcec120794c8d4030f6f551d560fc8d00944d3abba2e7f46a483b1bc1b839398c499e66091b226a3099f514ffc37a71653ae7b6407110e0373f27db5d2cd3eb037537514c182d91de2422970605a7cce5b8da3d0197fe40dd78db2833bce9f3f934d4a882472276530042492a8eb7b690da85136f2066d21a22b8cb92a258b0489ee397816e6149a0b382ff60a755be117dc145bbd5d23ac34412fdef842027bcda1115f7a7b0528fbf1f5f513a48ab8300b0858270ac7d1b46774c29504fd416fa3faeb6f7623164877bf30dded435940487e5f05a50fbfe4b9ed621cb06cb5db6507fe0e19a237fa73f435bee83136aa9d73694f82702bd767454fd956179b3a2ac4f3aa6f58b85b5f65f21b7d056b5ddef8df9075dd408bb232fcb076049621f5881144d1a91d0ae5e5523092b18a93ce04a7b62cc49880242ac6280b019a1d4d8e677a6df3bcf92d017061db367b76aacd65a5b22170c3114a669f13a7a383f4d0c462fa496760200392492922841ed7a6e50f3d875f32d58b8f5e958a1c55e92d22a4c25accbac60e206b4e9d83331125a48fd97b80cbd48ea88b320203639c3a727719e6f28462fb3049d2e5ee6373eed01561db779ec14e9b0a61e94b398c6c50c615d18db0e5053c28d1e28b554f75b6aedccb52f20e0366ffc8824119320dd276ba5ab213816b508beeae64f46b2e79c7659f1e21c8fe9bbb09ab78896d54a06d1d847e0610e5e5388c67893cdd20bbfdcd3112985b711ade14e7265c02b1bcc72c2423f339e46f4eff8ee35c1872252b0c2dd8edcd3e39ed2bd5dfb9be32b68d65e0b290bb3b1b06325ae8bc1a1ed8f7a36eaaea8c243cc32718336788b1612e7ab630df182ea07568e4b1e7569f8af3e140edea11dc1e16dcc1e61e0438389735e090ff832588c706acddcad04e3434b3c6cebf387be0eda9ffd5d7a826e62668f75dc3f544ef0307015d90076c53f15b27be7f37e537ffe911793baefc13423cc70c7cc253f78785caf6f38ac25e57333674b93c9f3061b4d66b7a8ec78c9dc277d68b22040ddb5baa9a1d2d8ecb2f9a668ef3425f64938e6a7b0506caa9f5cc8e9b1016be124046c2db8492c67bab35ee38e57ad27bea35cdd62d36c8903220e4798a588b4f08216d286eda61b762d6ec08dce09b0120bbb569496416813fce43274be103fc221e627f7d2c278239fe91b719d60b15721dce9512810ec848505cc90a507e3fb9c99375115f6742d60cba41e21214df1779fe05a77068e45c9cfe4bd2d0640cb1c76755b523abee655bce61b429494d94c8a0ca2a5837c9a2286fc0fbc0a8ddbb2425757fa40ecb9947d9ba6f0d5be403aaab855260cbce4e3ac287de83c92e61216d3051e2930b50ca9cfae20752b28d11a120e021ad6721b200f03bc75d0a7fff38097d9f335666184342ab1acb9040dd5e0d3758a005e5168ceaf0ef73a936797dceeff4d6e00ad0442c5c5fb2c8742991fb68f0e28c907cc29e1eeab7fb4dccc12225a3ec766dfd73d7878dbf8a188a63875a7cadd871bd89ff8a473127efce1faad477dddee6deed64f04a7cbe06cd97ebecd2cd959fbd7c97c8ffbb43a1d9a70b72333c0b957a62f5247c6a5c54a1efef77c21c2e6ffb2fad7ac78163dfa55d5b1d1a9594f08975eb181009513786a72013e7d93954450e5e1df0445080eeb05de448312f6d10d25a4c1ffc6b04d4578cfe31063d454f77b9d39daed14ce75c93dcf2ebbfb08f28ad99bba1e00b23078c34891b2b41315a9b7d078f19b839ef6cf02f55e11be780bf29b7a74bb47ed40fb2a38659bf5d760638f009ce98423bee14a4ac91610cd50b22d627729248f3b97ceb07191dd2ddc0eeb056394e3f2085862a4f3ac0c7f17bdbbd1a18b023383bb1ed2f8a39e4d4fff98c9b9ae6c22580b5e847dd72d74b7d42eaacc5b6594924b09f20d2aa7479fe7bae5cbc04c8a91b7db34d78ca8df661119b7ba6796fafd5413bc46e2c7af4ed4eb0cc737ec2c95ecad97a7f055b040b8d16c8a11e940fa6bf349bd56234b1c1cd1b0d2c709905244d3b691237e5fd28342805b76d4f84c3dff3117a7fc9d9ddaaca5fb634984969ec6573dd49ff915acbe87dc54b4bec040344d6475cafdafa7efdc752a77378bcafe07880870f930ec5c75523e1590319c428f8f7098ba77c7fd194636fd9f454b4c16e1fa19918e51394d40c7943c78d4ee073facc2494b48eec0588930078449c10f758e3b9ccbfc74162e44bf05f00a6339270ecc0b82c4338c89918e82db5dae54495a27d278019c51ddc7844d05cd955ee2df3fec23c6cb693e23e34273818877f2ba3efa0d65d2e77d1e696c4110c603fdef48c2b154cc897c9723a92d5782eb2316ca0517c7a0d3be4fee14924da77b1eb3c8e5b8e53be3db86f3d3ee31e9d1281b45099a10b4ada14fa0785f2f71ad008d0b47cc628f06ba690155af6f61bfea6f5e2befe591526b4572487c12c0894e2d978ac0c224d4c5c6ba8a60a1e99d8c7d1d19bf20b884fffd94f938ba4881accc6956eb0fe0a17d51292b7e862f6586508dce5f49c7c3d9837c765f285bbfeb46e1952eb83c16521f4d6d6a38039a02389f4d22e6f30cc11ab9a8cadceb73b39893d554ac7575a1b1d3a5c4f30fc15ae586c80e1e3ea847d18edf8e059613f04f319835f702293b51eb433e40085e64f39c90ae4129428252b32eda42420a09cfd81af8f87b468c510061b4a3c5b9affa6e60806d366e147edab7544c3a8b8eb16419f4b0816a821a62362fe0d225423c3870b9e7800830000000000000000000c00018006"], 0x2024}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) 11.130749961s ago: executing program 3 (id=3056): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9.992767885s ago: executing program 3 (id=3057): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0x36}], 0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket$unix(0x1, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.467951526s ago: executing program 2 (id=3058): io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='task_rename\x00', r6, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18, r8, 0xffffffffffffffff, 0x1c}) 9.457048619s ago: executing program 4 (id=3059): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) socket$inet6(0xa, 0x80002, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.687386742s ago: executing program 4 (id=3060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, 0x0, 0x0) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000180)={0x81, 0x5, 0x1, 'queue1\x00', 0xfffffffe}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) kexec_load(0x1, 0x6, &(0x7f0000001580)=[{&(0x7f0000000140)="a1f943a701aa9a4cf6676877ef68a5d7ac133f7835a986f44d6af10a166ed841244a674f5a25424761c9e9d6abb2284185b73c2c415c481fe6b6312a7a6dfa10b9434860fb1f517101b09f33664296db001ce778eca6c345c7a9115f6eb6f5ffa510010e98fb7120f6a54ac6d10fb3c0a8aa4f8ec91edcb9f4c961b5882fcf9e9c3f86924564cbd9671d2dc92247fd6c44644be13a7612703275a61441a71d7b97832a6f57c46f90a7c8264ad23d6ab06891c84329a350d403bb10df8c972111e046ad936276ea0a08186cc4d96ce9be173e72418b4f5330", 0xd8, 0x3, 0x9}, {&(0x7f0000000240)="8cdc8322a65879d5597d4f4b6091099782ed0a35c3a81190aca24167e58682b9ae32e21c8960e613cc35e7f1325501de606a500f986945a5333bb1b1948e5d9184d00df459d876ab325c3da0c3c2f9ebd7ff3be3f772aadf5d3adc30cc84edb43c11468f342130f3979b42ccd5430081076bfcb0b3af5c00f679fb74afd5290f0feb2548692edad3817a9484444ee05ccc203e2715f8ccac77080959b79367205a3bbfae73b13dea00418e3e2743dee5703d58f00fd4fe56e189127bf657d814c4a9beef001aa9d3b217f5e50435b2b0cb3299bc8c8165c0a1a75a17e6999ef7b65bd9dbffbe45612e1eeebdf5c2ddda4ea88a6f04b556948d9a986b3b805a029ca986d0e051fcf969f072c042333186c5d848ffdbd9df68b6725687dccf1298e077fbdcd4f9a8465fa64ae008346926077105a967be310716de5d163e69a4bf6471fdde7f831bb0c95f37bfb0396074e9557bf84fad4510744893348bae05f90f583d10837a6d727cd1ecd62864777403b90061f3ceaccba979891b6ece87a882b10648a61b18d3ef5e1fd221c214a144b9711a96d31fe5eaf053d5a98eb62fb7f2628588dee1a25729314ade6fd09361b683de952ae268646d3b9ef76b8c3ee08f8fc9f1c07331bd2420ee7c123e51006a6d04b7a92c0842690df48b1536c149c6a4bab332cb2b91b05b1bbf91e92cc0d43793d0c820fae95ded8d5a35496f1fb27464d622e21fb6d49704af9fcc3c3c13bbf70256f8113b110eee58c55da1de8948d9a7a300293bf3dc07f06e9755c283c8d0df8f0a88d2f6c75cc14ee2fd897e5b0fb1802af5e182c81c2e7ddbe64ab3c52e3f7bed61015b24ec45c42eed506c782150c9839f8ec493f3c5944688e61a8e00b8940b1914bd39d25cab1e25a6e5d689c2dae27901916bbb706fade713d3c19eb2ecc14c0fa00fb4617e53997251adcaf30c7f524228901798a37a8d2ef3d65af733be3fdd3459fdcfcc230ca4a845b700c51d7a04a63910e1f8ec93aadc4043794ec069abb898cfc4a5224e3c26b3d732927dad83d6ee51436b7203e187edb9b280de42339b0913ae26b143678083ab440eb2203b789c15d1381ab9ad77a38338d578c4a9c9508e5b88b490e5fb02bc12ac29ab2930f613230a7629d37846d45a0c63a1d1960bc3a08f664db19c5fc78e24f139a6c0b4bd1f9e2830a513ed60c40714b78f79ee039d887f788fd184a6803c755652741b6620774bf3c5996c53fb30323911e44c70c3d82c26ffe2f662f961da6bbf5f9e4206c5d22596ab8e3d48f3e1f8585fa8a925152e115910b24122cd9d8bac4660c0eec2f23ceeed49fd77381df49ad55c1bc59e9c8ae66b0359d564a63a11c90b8262464026c6a5093986ad91c7f48dc1a7df68a16f45b025e75f9221afc8ca8bb991d8476608ad414aab5277689dd7ac97e0f99a29f6430d76989423366c64e5e8827eba13f9eb5e18d52777168d771694815d77fb493c419543ab0635e8c9b8cca19ad9b5fb53ffb9663eb56b14362581295accbff07732f9072538f5522cb1cb5489bc2722e82f2f90ae1fda96944e0ef2690e48e31978c482a727ca8c277d9da369c5bc8b4bc886fc784eb0676162732c7e19297d0d7214f7fb596d2dedeb3cdf5b2eeea9c8b3d6f204e9ac6287bc5f90e9c35ba4f2ba3fbd72e9c27b217bd62601fc79c51e3ff2bc102e9fe6d033a6851caf43a9670f9ac7fad8abb82ec822b00c2683a4746cbcede17ebbf84a9b682e806ce70c9c2fcc13682792585f4932168d50b542074fd7d420df3050d87eec38e571bab8b57834572aa4b9912eee453a5a86c91ccc9e05aa56d3006bc662b5b5a68b5ebb3fa35edef3a17bbdc688f88d6df121d8897fbbe30415b1ed81987c72c3e915dbaf2a324be4eb3942028868ed9c5ead47de31e57ae6686b905c3f5ff206cc23a7a593733d42ce5b5233aa1f470d22bbc0869db199fa6cd093dcb5d92657faabb78e08da32262377e05e74867ea2a7eca2c3e2cc205b9d2a0338b08ccc45a8df8b089041fbe33d8f6d1645dcfeb919686f92527f47d22a793c6925185fa6798c4a49c5bf2e326680130237531ed00f75dc16bb0acaf934e98f049e8bfadc3226669bd7661dc84c3d1a968da22e01a602929ad977bff4617ff101086e47459ea9c6f54871a571ab8b77b0996caf2b2260a802b3f06c741f3e8eee4ab4e3d6e46d352025746a5091e4c97649c4fbf5cd5103c578290c6fbb95087f6d68612edd36d1fd71de4e04b3de7c783b2a54ba2af1c31df9d584c24d8910ef99686187c554f15454c9799d1cd5d07644c2deac19c60f05be699bb4595cd269c72b7dbf096cf8021be15ca03055994ca95673ff0cf5feb7476e18e79238ae06e09ee04a619764d4bde9f25850ef57b4040515886ccbc7ba3820f01bbed424bb2537450d02fd82e857d4276e9cb7a0b907c882246305d713cfc1377de2cee1767563d137fa8c824e2ab206246662d77b417ee629cbdcef1972c96a0674aec5d7f61d8bf15c4af54dda97e9a9b7dca06dd72f6f43bf63c805e70581d310925bab571e885f6ecbc7b79d7aeb451fd76d5710fac00a5a89e1a1dc1355e80c892f65df784467dcd9ee33918c92330214f452b184f5b2e4203d20d545ff2d3504b7fb65730fc574e2a73b5150ff287cdeb8ff34d4c3e851e2218f5aff204d9d889c332bf9686a0bd406b2649c5c3c3016225b6254986ee1e1f677bdffe572521dd631c81b1a5d15e8a428e993530420d43a366ecd3a3ff8a97595ba37cf5bc4e14b9714f60be2ac14705b2e7662bf761107cedb6d4568c8c2832099f1cf933e309456922d207ccf1a93e0ed02e85af4c32c56fcf40579239c50651a4a0da44f699b88070ec38f0856", 0x800, 0xffffffffffffb1b6}, {&(0x7f0000001240), 0x0, 0xff, 0x6}, {&(0x7f0000001300)="3e5a882cb7c032c030bc9edff47132577b5d39c28d9e982d693bd0bd35628be82c4415a88e92b615160a23d8cc0025aa2bbf69aeb7a03d7772c63047296732cf22760350e12eb7d1be857e29724a9e4fe544dd5b185f077f8927b3a150b35eb006e186ed4c70f9c6f9b222b3de487f4a82228ba516ca191a25c8834afaa9de5e6350a635eb94ce198ae07da717", 0x8d, 0x5, 0x4}, {0x0, 0x0, 0xff, 0x8000000000000001}, {&(0x7f00000014c0)="854686fa58e59b6d8cc07c932b05e237ad1dd25c600f9274d7536d2f2935f3c56248b97509fdd68185ac87516ce9878989b95d406df3f5459110332c0cb1757038b4809465821ceb8fcd6eeafcae44dcf397e34a6983d01a698441616c88e3dd051db89cbbc151cef9d8c5031651ffc13c", 0x71, 0x4, 0x7}], 0x1) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "0e3d5f3c"}]}}, 0x0}, 0x0) 6.85738246s ago: executing program 1 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034700)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = dup2(r4, r4) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 5.943682122s ago: executing program 1 (id=3062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140d, 0x208, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x703002, 0x0) close(r6) r7 = socket(0x10, 0x803, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) write$evdev(r8, &(0x7f0000000100)=[{{}, 0x12, 0x4, 0x4}], 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790028000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) socket(0x18, 0x3, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000300)={0x5}, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 5.868706895s ago: executing program 2 (id=3063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000900)={0x1, {{0xa, 0x3, 0x0, @mcast1}}}, 0x90) sched_setscheduler(0x0, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYBLOB='\v'], 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4583, 0x0) r7 = io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x827, 0x400, 0xffffffff, 0x2a, 0x0, r6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000002880)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 4.716577716s ago: executing program 2 (id=3064): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000340)={0x8, @win={{0xa83e, 0x4, 0x7, 0x6}, 0x6, 0x1, 0x0, 0xfffffff7, 0x0, 0x3}}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYBLOB="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"/658, @ANYRES32], 0x378}}, 0x0) 4.339376464s ago: executing program 1 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0xfd8e49f1ee86724e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r3, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) sched_setaffinity(0x0, 0x0, 0x0) chmod(0x0, 0xc2) prctl$PR_SCHED_CORE(0x3e, 0x10000, r3, 0x1, 0x0) socket(0x10, 0x80000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRES64], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='fdb_delete\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 4.289796628s ago: executing program 3 (id=3066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) 3.39984573s ago: executing program 4 (id=3067): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 3.269575487s ago: executing program 2 (id=3068): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000340)={0x8, @win={{0xa83e, 0x4, 0x7, 0x6}, 0x6, 0x1, 0x0, 0xfffffff7, 0x0, 0x3}}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYBLOB="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"/658, @ANYRES32], 0x378}}, 0x0) 3.268439466s ago: executing program 1 (id=3069): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "ebcd2a7d09ede4dcb4a6d59e623723bbf36d65027ddb3ddeaeb7d2d4713945b49f0cd96dd8ae26bc8c24dc0e79e0c8979e3767db59ed4706bd2fe0c00a3a1008", 0x3a}, 0x48, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1, 0x6, 0xfffffffe) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x180000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xef40}], 0x1c) gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000340)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="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") r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0xc044001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.225954568s ago: executing program 3 (id=3070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='nfsd\x00', 0x2004041, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket(0x5, 0x800, 0xb62) 3.003006542s ago: executing program 4 (id=3071): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f0000010040), 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r4, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000010000)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='btrfs\x00', 0x208000, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) tkill(r0, 0x7) socket$netlink(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000440)="d7ad", 0x2}], 0x1, 0x5, 0xb2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'veth1_to_bond\x00', 0x3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) 2.197558882s ago: executing program 2 (id=3072): io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x2, 0x8001002, 0x3d7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xebc7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff99) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000180), 0x5005) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4) socket$packet(0x11, 0x3, 0x300) setreuid(0x0, 0xee00) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x10) close(r0) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000046365608b40413868f950102030109021200010000efff0904000000d16ea500f0f658699258def2d5f8f9aad46b4988eec7fb6ee169626f8bae8e7a47fb8cb7d3c2cba098f7d2a8f70c99d62c5a73d074442ceb88f408fb170d06026b61cb8c37c07d04a155a0bf633b921fe97f23202c3bbbcffbc1f679fe28f7d2ba75715eb21f96c75eb966ccf5db1672f92dd45ebce0cc83242935baa585817c2b098c2f2270dd0e797018"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 0s ago: executing program 1 (id=3073): syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x800) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000100)={0x20000000}) flock(r3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x3, [{0x5, 0x3}, {0x0, 0x4}]}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x63}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) kernel console output (not intermixed with test programs): T43] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 806.159220][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.190277][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 806.855047][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.038414][ T43] usb 3-1: config 0 descriptor?? [ 807.147815][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.286389][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.569446][ T43] cmedia_hs100b 0003:0D8C:0014.0006: ignoring exceeding usage max [ 807.592359][ T43] cmedia_hs100b 0003:0D8C:0014.0006: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.2-1/input0 [ 809.447478][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.464332][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.773403][T12908] fuse: Unknown parameter 'user_id00000000000000000000' [ 810.834003][ T30] audit: type=1800 audit(1758253495.786:26): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1858" name="/" dev="9p" ino=1708457985 res=0 errno=0 [ 811.118299][T12919] syzkaller0: entered promiscuous mode [ 811.155328][T12920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1861'. [ 811.168038][T12919] syzkaller0: entered allmulticast mode [ 811.326091][ T5976] usb 3-1: USB disconnect, device number 27 [ 811.350887][T12926] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 812.080603][T12926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1861'. [ 813.016752][T12947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1867'. [ 815.607947][ T5923] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 816.091619][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 816.617719][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 816.769161][ T5923] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 816.856614][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.906039][ T5923] usb 3-1: Product: syz [ 816.929714][ T5923] usb 3-1: Manufacturer: syz [ 816.950221][ T5923] usb 3-1: SerialNumber: syz [ 817.127919][ T5923] usb 3-1: config 0 descriptor?? [ 817.145794][ T5923] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 817.427310][ T5923] usb 3-1: Detected FT-X [ 817.462974][ T5923] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 817.472657][ T5923] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 817.581239][ T5923] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 817.743198][ T5923] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 817.864907][ T5923] usb 3-1: USB disconnect, device number 28 [ 817.881444][ T5923] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 817.921024][ T5923] ftdi_sio 3-1:0.0: device disconnected [ 818.579405][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.407965][T13010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 819.547497][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.831290][T13032] delete_channel: no stack [ 824.040786][T13038] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 824.056840][T13038] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 824.068056][T13038] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 824.078520][T13038] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 824.091478][T13038] bcachefs: bch2_fs_get_tree() error: EIO [ 828.279152][T13086] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1895'. [ 828.391043][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1894'. [ 828.419983][T13083] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 828.432675][T13083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1894'. [ 828.616051][T13089] delete_channel: no stack [ 831.026514][T13095] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 831.038166][T13095] bcachefs (/dev/loop0): error reading default superblock: IO error: -5 [ 831.047681][T13095] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 831.058462][T13095] bcachefs (/dev/loop0): error reading superblock: IO error: -5 [ 831.069367][T13095] bcachefs: bch2_fs_get_tree() error: EIO [ 831.863107][T13103] delete_channel: no stack [ 832.034376][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 834.339919][T13106] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 834.351039][T13106] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 834.360270][T13106] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 834.371208][T13106] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 834.380663][T13106] bcachefs: bch2_fs_get_tree() error: EIO [ 835.432638][T13114] delete_channel: no stack [ 837.943564][T13115] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 837.953641][T13115] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 837.962598][T13115] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 837.972402][T13115] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 837.981432][T13115] bcachefs: bch2_fs_get_tree() error: EIO [ 840.129860][T13139] tipc: Enabled bearer , priority 0 [ 840.140386][T13139] syzkaller0: entered promiscuous mode [ 840.147117][T13139] syzkaller0: entered allmulticast mode [ 840.162410][T13139] tipc: Resetting bearer [ 840.173713][T13138] tipc: Resetting bearer [ 840.208637][T13138] tipc: Disabling bearer [ 841.048718][T13151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 841.071887][T13151] overlayfs: missing 'lowerdir' [ 844.976731][T13184] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 844.987869][T13184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 844.996590][T13184] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 845.004896][T13184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 845.225592][T13194] syzkaller0: entered promiscuous mode [ 845.232737][T13194] syzkaller0: entered allmulticast mode [ 847.047292][T13213] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 847.070466][T13213] FAT-fs (loop0): unable to read boot sector [ 848.222966][T13213] delete_channel: no stack [ 850.306516][T13224] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 850.314365][T13224] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 850.322729][T13224] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 850.330565][T13224] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 851.411516][T13231] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 851.419802][T13231] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 851.428262][T13231] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 851.436170][T13231] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 852.788538][T13259] syz_tun: entered allmulticast mode [ 853.003193][T13260] mroute: pending queue full, dropping entries [ 853.062426][T13257] syz_tun: left allmulticast mode [ 853.614716][T13267] tipc: Enabled bearer , priority 0 [ 853.641317][T13267] syzkaller0: entered promiscuous mode [ 853.655316][T13267] syzkaller0: entered allmulticast mode [ 853.731627][T13267] tipc: Resetting bearer [ 854.046722][T13262] tipc: Resetting bearer [ 855.514984][T13262] tipc: Disabling bearer [ 856.202409][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.212998][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.579148][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1950'. [ 860.490283][T13334] syz_tun: entered allmulticast mode [ 860.519357][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.520070][ C1] mroute: pending queue full, dropping entries [ 860.550994][T13334] mroute: pending queue full, dropping entries [ 860.559671][T13332] syz_tun: left allmulticast mode [ 860.600464][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.939379][T13346] vivid-000: ================= START STATUS ================= [ 860.948417][T13346] vivid-000: Radio HW Seek Mode: Bounded [ 860.954410][T13346] vivid-000: Radio Programmable HW Seek: false [ 860.961001][T13346] vivid-000: RDS Rx I/O Mode: Block I/O [ 860.968194][T13346] vivid-000: Generate RBDS Instead of RDS: false [ 860.974660][T13346] vivid-000: RDS Reception: true [ 860.983409][T13346] vivid-000: RDS Program Type: 0 inactive [ 860.991803][T13346] vivid-000: RDS PS Name: inactive [ 861.003668][T13346] vivid-000: RDS Radio Text: inactive [ 861.011357][T13346] vivid-000: RDS Traffic Announcement: false inactive [ 861.457093][T13346] vivid-000: RDS Traffic Program: false inactive [ 861.469169][T13346] vivid-000: RDS Music: false inactive [ 861.506083][T13346] vivid-000: ================== END STATUS ================== [ 861.517675][T13352] syz_tun: entered allmulticast mode [ 861.873762][T13358] mroute: pending queue full, dropping entries [ 861.888142][ C0] mroute: pending queue full, dropping entries [ 862.495014][T13351] syz_tun: left allmulticast mode [ 866.390627][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.643673][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.314301][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.331421][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.427244][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'. [ 869.772769][ T30] audit: type=1326 audit(1758253554.726:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c978eba9 code=0x7ffc0000 [ 870.291993][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.298409][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.309142][ T30] audit: type=1326 audit(1758253554.726:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c978eba9 code=0x7ffc0000 [ 870.351005][ T30] audit: type=1326 audit(1758253554.756:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f26c978eba9 code=0x7ffc0000 [ 870.457795][ T30] audit: type=1326 audit(1758253554.756:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c978eba9 code=0x7ffc0000 [ 870.486075][ T30] audit: type=1326 audit(1758253554.756:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c978eba9 code=0x7ffc0000 [ 870.508417][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.429942][ T5976] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 872.608131][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 872.622837][ T5976] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 872.645289][ T5976] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 872.672778][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.859230][T13465] vivid-002: ================= START STATUS ================= [ 872.897817][T13465] vivid-002: Radio HW Seek Mode: Bounded [ 872.911091][T13465] vivid-002: Radio Programmable HW Seek: false [ 872.917688][T13465] vivid-002: RDS Rx I/O Mode: Block I/O [ 872.923732][T13465] vivid-002: Generate RBDS Instead of RDS: false [ 872.942074][T13465] vivid-002: RDS Reception: true [ 872.948814][T13465] vivid-002: RDS Program Type: 0 inactive [ 872.959630][T13465] vivid-002: RDS PS Name: inactive [ 873.014236][T13465] vivid-002: RDS Radio Text: inactive [ 873.597775][T13465] vivid-002: RDS Traffic Announcement: false inactive [ 873.607966][T13465] vivid-002: RDS Traffic Program: false inactive [ 873.617410][T13465] vivid-002: RDS Music: false inactive [ 873.623423][T13465] vivid-002: ================== END STATUS ================== [ 874.404610][T13483] delete_channel: no stack [ 876.566466][T13484] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 876.576328][T13484] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 876.585178][T13484] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 876.595796][T13484] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 876.604881][T13484] bcachefs: bch2_fs_get_tree() error: EIO [ 876.992460][ T5976] usb 4-1: USB disconnect, device number 22 [ 880.955508][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 880.964704][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 881.639943][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.656539][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.907641][T11916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 882.252808][T13544] syz_tun: entered allmulticast mode [ 882.361070][T11916] usb 3-1: Using ep0 maxpacket: 8 [ 882.373807][T11916] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 882.383813][T13543] syz_tun: left allmulticast mode [ 882.397999][T11916] usb 3-1: config 0 has no interface number 0 [ 882.419019][T11916] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 882.472973][T11916] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 882.567110][T11916] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 882.623983][T11916] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 882.667675][T11916] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 882.808610][T11916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.127414][T11916] usb 3-1: config 0 descriptor?? [ 883.252095][T11916] ldusb 3-1:0.55: LD USB Device #3 now attached to major 180 minor 3 [ 884.342165][T11916] usb 3-1: USB disconnect, device number 30 [ 884.506937][T11916] ldusb 3-1:0.55: LD USB Device #3 now disconnected [ 885.603399][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 885.612569][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 892.287774][T13602] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 892.297737][T13602] bcachefs (/dev/loop3): error reading default superblock: IO error: -5 [ 892.306529][T13602] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 892.316106][T13602] bcachefs (/dev/loop3): error reading superblock: IO error: -5 [ 892.324647][T13602] bcachefs: bch2_fs_get_tree() error: EIO [ 893.107058][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.239195][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.528108][T13614] NILFS (loop2): device size too small [ 894.975919][T13614] overlayfs: failed to clone upperpath [ 895.697814][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 896.287596][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 897.117959][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 897.137548][ T10] usb 4-1: config 0 has no interface number 0 [ 897.153271][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 897.165973][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.176183][ T10] usb 4-1: Product: syz [ 897.180603][ T10] usb 4-1: Manufacturer: syz [ 897.198453][ T10] usb 4-1: SerialNumber: syz [ 897.576529][ T10] usb 4-1: config 0 descriptor?? [ 897.588393][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 897.600817][ T10] usb 4-1: selecting invalid altsetting 1 [ 897.640465][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 897.675098][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 897.688321][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 897.700506][ T10] usb 4-1: media controller created [ 897.748167][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.799346][T13626] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 898.008492][T13645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.507664][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 898.514804][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 898.531396][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 898.689261][ T10] usb 4-1: USB disconnect, device number 23 [ 902.066252][T13677] NILFS (loop4): device size too small [ 903.132655][T13677] overlayfs: failed to clone upperpath [ 907.210880][T13702] syz_tun: entered allmulticast mode [ 907.410032][T13705] mroute: pending queue full, dropping entries [ 907.426501][T13701] syz_tun: left allmulticast mode [ 907.596013][T13710] vivid-004: ================= START STATUS ================= [ 907.637325][T13710] vivid-004: Radio HW Seek Mode: Bounded [ 907.647787][T13710] vivid-004: Radio Programmable HW Seek: false [ 907.654008][T13710] vivid-004: RDS Rx I/O Mode: Block I/O [ 907.662876][T13710] vivid-004: Generate RBDS Instead of RDS: false [ 907.674560][T13710] vivid-004: RDS Reception: true [ 907.681047][T13710] vivid-004: RDS Program Type: 0 inactive [ 907.782117][T13710] vivid-004: RDS PS Name: inactive [ 907.918687][T13710] vivid-004: RDS Radio Text: inactive [ 907.933141][T13710] vivid-004: RDS Traffic Announcement: false inactive [ 908.026576][T13710] vivid-004: RDS Traffic Program: false inactive [ 908.049096][T13710] vivid-004: RDS Music: false inactive [ 908.083423][T13710] vivid-004: ================== END STATUS ================== [ 909.809499][T13734] netlink: 764 bytes leftover after parsing attributes in process `syz.4.2069'. [ 912.981808][T13746] netlink: 4980 bytes leftover after parsing attributes in process `syz.0.2071'. [ 912.991372][T13746] openvswitch: netlink: Flow actions attr not present in new flow. [ 913.476729][T13748] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 913.484552][T13748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 913.492843][T13748] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 913.500598][T13748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 915.055618][T13763] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 915.063435][T13763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 915.071747][T13763] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 915.079545][T13763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 916.490478][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.499314][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.587549][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 918.027677][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 918.032139][T13793] netlink: 4980 bytes leftover after parsing attributes in process `syz.1.2085'. [ 918.042509][T13793] openvswitch: netlink: Flow actions attr not present in new flow. [ 918.082779][ T5901] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 918.099948][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 918.119399][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.336406][T13798] NILFS (loop1): device size too small [ 919.427171][T13811] msdos: Bad value for 'time_offset' [ 919.635225][T13798] overlayfs: failed to clone upperpath [ 920.411247][T11916] usb 3-1: USB disconnect, device number 31 [ 923.207603][ T5976] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 923.468426][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.695574][ T5976] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 923.865120][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.916621][ T5976] usb 3-1: config 0 descriptor?? [ 924.419903][ T5976] cmedia_hs100b 0003:0D8C:0014.0007: ignoring exceeding usage max [ 924.445091][ T5976] cmedia_hs100b 0003:0D8C:0014.0007: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.2-1/input0 [ 924.556425][ T5976] usb 3-1: USB disconnect, device number 32 [ 924.587898][T13867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.601086][T13863] fido_id[13863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 924.664607][T13867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.440939][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2111'. [ 927.733851][T13902] NILFS (loop2): device size too small [ 931.542433][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.549084][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.817868][T13942] netlink: 'syz.1.2126': attribute type 10 has an invalid length. [ 932.830476][T13938] NILFS (loop2): device size too small [ 932.836537][T13942] veth0_vlan: left promiscuous mode [ 932.852579][T13942] veth0_vlan: entered promiscuous mode [ 932.865780][T13942] team0: Device veth0_vlan failed to register rx_handler [ 933.049631][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 934.191125][T13964] syz_tun: entered allmulticast mode [ 934.628189][T13971] iso9660: Unknown parameter '>N&#z8Z}5trnCogBRFcBڕݝ"jxn' [ 935.054518][T13961] syz_tun: left allmulticast mode [ 935.914752][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.930542][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.261599][T13999] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 937.269383][T13999] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 937.277695][T13999] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 937.285644][T13999] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 938.097102][T14002] tipc: Enabling of bearer rejected, failed to enable media [ 938.235086][T14005] syzkaller0: entered promiscuous mode [ 938.241178][T14005] syzkaller0: entered allmulticast mode [ 938.384425][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 939.162607][T14014] NILFS (loop1): device size too small [ 940.562419][T14026] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 940.570332][T14026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 940.578599][T14026] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 940.587070][T14026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 943.255447][ T5976] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 943.427553][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 943.473417][ T5976] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 943.503414][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.521909][ T5976] usb 4-1: Product: syz [ 943.541187][ T5976] usb 4-1: Manufacturer: syz [ 943.545851][ T5976] usb 4-1: SerialNumber: syz [ 943.598884][ T5976] usb 4-1: config 0 descriptor?? [ 943.625863][ T5976] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 943.655080][ T5976] usb 4-1: Detected FT-X [ 944.017977][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 945.660098][T14079] iso9660: Unknown parameter '>N&#z8Z}5trnCogBRFcBڕݝ"jxn' [ 946.349819][T14085] NILFS (loop1): device size too small [ 946.989681][ T5976] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 947.004819][ T5976] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 947.097715][ T5976] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 947.118527][ T5976] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 947.185021][ T5976] usb 4-1: USB disconnect, device number 24 [ 947.339412][ T5976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 947.352511][ T5976] ftdi_sio 4-1:0.0: device disconnected [ 947.613459][T14095] iso9660: Unknown parameter '>N&#z8Z}5trnCogBRFcBڕݝ"jxn' [ 948.141181][T14091] netlink: 872 bytes leftover after parsing attributes in process `syz.3.2163'. [ 949.507858][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 950.136543][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 950.879099][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 951.228776][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 951.338594][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 951.386610][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.397518][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.411320][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.420812][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.627624][ T5976] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 951.683192][ T43] usb 3-1: usb_control_msg returned -32 [ 951.697002][ T43] usbtmc 3-1:16.0: can't read capabilities [ 952.122163][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 952.183251][ T5976] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 952.399911][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.451883][ T5976] usb 4-1: Product: syz [ 952.517155][ T5976] usb 4-1: Manufacturer: syz [ 952.745641][ T5976] usb 4-1: SerialNumber: syz [ 953.299577][ T5976] usb 4-1: config 0 descriptor?? [ 953.346982][ T5976] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 953.495738][ T5976] usb 4-1: Detected FT-X [ 953.518645][ T9] usb 3-1: USB disconnect, device number 33 [ 954.634139][T14143] netlink: 872 bytes leftover after parsing attributes in process `syz.1.2177'. [ 955.244386][T14146] affs: No valid root block on device nbd2 [ 955.861668][ T5976] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 956.484839][ T5976] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 956.661544][T14150] delete_channel: no stack [ 956.689112][ T5976] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 956.776435][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 957.346521][ T5976] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 957.356717][ T5923] IPVS: starting estimator thread 0... [ 957.433407][ T5976] usb 4-1: USB disconnect, device number 25 [ 957.458065][T14170] IPVS: using max 51 ests per chain, 122400 per kthread [ 957.466416][T14162] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 957.475861][T14162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2185'. [ 957.525084][T14172] NILFS (loop1): device size too small [ 957.585436][ T5976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 957.659230][ T5976] ftdi_sio 4-1:0.0: device disconnected [ 957.692122][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.790299][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.391319][T14185] NILFS (loop3): device size too small [ 959.014801][T14187] tipc: Enabled bearer , priority 0 [ 959.146458][T14188] syzkaller0: entered promiscuous mode [ 959.178897][T14188] syzkaller0: entered allmulticast mode [ 959.261453][T14187] tipc: Resetting bearer [ 959.308970][T14186] tipc: Resetting bearer [ 959.338627][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2192'. [ 959.357903][T14186] tipc: Disabling bearer [ 959.374088][T14190] bond0: entered promiscuous mode [ 959.380842][T14190] bond_slave_0: entered promiscuous mode [ 959.387125][T14190] bond_slave_1: entered promiscuous mode [ 959.393466][T14190] dummy0: entered promiscuous mode [ 959.405880][T14190] bond0: left promiscuous mode [ 959.412694][T14190] bond_slave_0: left promiscuous mode [ 959.419503][T14190] bond_slave_1: left promiscuous mode [ 959.434585][T14190] dummy0: left promiscuous mode [ 959.752824][T14197] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 960.054509][T14199] siw: device registration error -23 [ 960.728871][T14209] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 960.749867][T14209] FAT-fs (loop0): unable to read boot sector [ 962.668349][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 963.309816][T14227] NILFS (loop3): device size too small [ 963.809755][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.120527][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.060961][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.089886][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.111553][T14247] Driver unsupported XDP return value 0 on prog (id 556) dev N/A, expect packet loss! [ 965.302336][T14254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2211'. [ 965.991682][T14253] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 965.999449][T14253] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 966.007701][T14253] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 966.015398][T14253] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 966.464130][T14270] tipc: Enabled bearer , priority 0 [ 967.229532][T14274] NILFS (loop0): device size too small [ 967.230613][T14270] syzkaller0: entered promiscuous mode [ 967.293008][T14270] syzkaller0: entered allmulticast mode [ 967.337661][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 967.389829][T14255] Bluetooth: hci4: command 0x0406 tx timeout [ 967.582730][ T43] tipc: Node number set to 3242513374 [ 967.836215][T14279] tipc: Resetting bearer [ 967.897509][T14269] tipc: Resetting bearer [ 969.501506][T14290] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 969.513701][T14290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2219'. [ 969.518238][T14255] Bluetooth: hci4: command 0x0406 tx timeout [ 969.578003][T14269] tipc: Disabling bearer [ 969.863121][T14304] vivid-003: ================= START STATUS ================= [ 969.895061][T14304] vivid-003: Radio HW Seek Mode: Bounded [ 969.976448][T14304] vivid-003: Radio Programmable HW Seek: false [ 970.005339][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.030556][T14304] vivid-003: RDS Rx I/O Mode: Block I/O [ 970.049759][T14304] vivid-003: Generate RBDS Instead of RDS: false [ 970.056456][T14304] vivid-003: RDS Reception: true [ 970.071580][T14302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2225'. [ 970.100637][T14304] vivid-003: RDS Program Type: 0 inactive [ 970.110812][T14304] vivid-003: RDS PS Name: inactive [ 970.116231][T14304] vivid-003: RDS Radio Text: inactive [ 970.117069][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.131097][T14304] vivid-003: RDS Traffic Announcement: false inactive [ 970.147783][T14304] vivid-003: RDS Traffic Program: false inactive [ 970.154509][T14304] vivid-003: RDS Music: false inactive [ 970.160321][T14304] vivid-003: ================== END STATUS ================== [ 970.186006][T14314] NILFS (loop2): device size too small [ 970.997682][T14323] NILFS (loop3): device size too small [ 971.860015][T14331] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 971.900793][T14331] FAT-fs (loop2): unable to read boot sector [ 972.233143][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2232'. [ 972.289450][T14340] bond0: entered promiscuous mode [ 972.294612][T14340] bond_slave_0: entered promiscuous mode [ 972.301809][T14340] bond_slave_1: entered promiscuous mode [ 972.402225][T14340] bond0: left promiscuous mode [ 972.407140][T14340] bond_slave_0: left promiscuous mode [ 972.414412][T14340] bond_slave_1: left promiscuous mode [ 973.913777][T14339] syzkaller0: entered promiscuous mode [ 973.927000][T14339] syzkaller0: entered allmulticast mode [ 974.111978][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2236'. [ 974.155308][T14347] bond0: entered promiscuous mode [ 974.162243][T14347] bond_slave_0: entered promiscuous mode [ 974.174598][T14347] bond_slave_1: entered promiscuous mode [ 974.187106][T14347] bond0: left promiscuous mode [ 974.199453][T14347] bond_slave_0: left promiscuous mode [ 974.219745][T14347] bond_slave_1: left promiscuous mode [ 974.535207][T14354] tipc: Enabling of bearer rejected, failed to enable media [ 974.585941][T14359] syzkaller0: entered promiscuous mode [ 974.612384][T14359] syzkaller0: entered allmulticast mode [ 975.117520][T14373] NILFS (loop4): device size too small [ 975.133690][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.142795][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.834311][T14385] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 976.073258][T14385] FAT-fs (loop1): unable to read boot sector [ 976.917889][T14393] tipc: Enabled bearer , priority 0 [ 976.953418][T14393] syzkaller0: entered promiscuous mode [ 976.988178][T14393] syzkaller0: entered allmulticast mode [ 977.303906][T14385] delete_channel: no stack [ 977.343799][T14398] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 977.368757][T14397] tipc: Resetting bearer [ 977.401832][T14392] tipc: Resetting bearer [ 977.509297][T14392] tipc: Disabling bearer [ 977.556571][T14403] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.568826][T14403] FAT-fs (loop1): unable to read boot sector [ 979.824866][T14413] vivid-001: ================= START STATUS ================= [ 979.836828][T14413] vivid-001: Radio HW Seek Mode: Bounded [ 979.842923][T14413] vivid-001: Radio Programmable HW Seek: false [ 979.850049][T14413] vivid-001: RDS Rx I/O Mode: Block I/O [ 979.856298][T14413] vivid-001: Generate RBDS Instead of RDS: false [ 979.863269][T14413] vivid-001: RDS Reception: true [ 979.868400][T14413] vivid-001: RDS Program Type: 0 inactive [ 979.875025][T14413] vivid-001: RDS PS Name: inactive [ 979.884765][T14413] vivid-001: RDS Radio Text: inactive [ 979.894968][T14413] vivid-001: RDS Traffic Announcement: false inactive [ 979.911651][T14413] vivid-001: RDS Traffic Program: false inactive [ 979.927031][T14416] syzkaller0: entered promiscuous mode [ 979.934188][T14416] syzkaller0: entered allmulticast mode [ 979.977983][T14413] vivid-001: RDS Music: false inactive [ 979.983699][T14413] vivid-001: ================== END STATUS ================== [ 980.074364][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2257'. [ 980.142518][T14423] bond0: entered promiscuous mode [ 980.172431][T14423] bond_slave_0: entered promiscuous mode [ 980.194665][T14423] bond_slave_1: entered promiscuous mode [ 980.212195][T14423] dummy0: entered promiscuous mode [ 980.261617][T14429] affs: No valid root block on device nbd2 [ 980.263296][T14423] bond0: left promiscuous mode [ 980.291436][T14423] bond_slave_0: left promiscuous mode [ 980.305471][T14423] bond_slave_1: left promiscuous mode [ 980.337193][T14423] dummy0: left promiscuous mode [ 981.094767][T14441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.111141][T14441] FAT-fs (loop0): unable to read boot sector [ 983.363482][T14444] delete_channel: no stack [ 985.012631][T14458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.024686][T14458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.406642][T14461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2264'. [ 985.416365][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 986.780475][T14473] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 986.827670][T14473] FAT-fs (loop1): unable to read boot sector [ 987.736984][T14487] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 988.255518][T14487] FAT-fs (loop2): unable to read boot sector [ 989.081162][T14487] delete_channel: no stack [ 992.982575][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.991474][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.077543][ T5901] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 993.307702][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 993.709959][ T5901] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 993.797751][ T5901] usb 4-1: config 0 has no interface number 0 [ 993.825804][T14531] vivid-000: ================= START STATUS ================= [ 993.828090][ T5901] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 993.844701][T14531] vivid-000: Radio HW Seek Mode: Bounded [ 993.863666][T14531] vivid-000: Radio Programmable HW Seek: false [ 993.869809][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.882189][ T5901] usb 4-1: Product: syz [ 994.002751][T14534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.020800][T14534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.325885][T14531] vivid-000: RDS Rx I/O Mode: Block I/O [ 994.335191][ T5901] usb 4-1: Manufacturer: syz [ 994.348728][ T5901] usb 4-1: SerialNumber: syz [ 994.364257][ T5901] usb 4-1: config 0 descriptor?? [ 994.371430][T14531] vivid-000: Generate RBDS Instead of RDS: false [ 994.379647][T14531] vivid-000: RDS Reception: true [ 994.382463][ T5901] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 994.394660][T14531] vivid-000: RDS Program Type: 0 inactive [ 994.401114][T14531] vivid-000: RDS PS Name: inactive [ 994.412351][T14531] vivid-000: RDS Radio Text: inactive [ 994.418067][T14531] vivid-000: RDS Traffic Announcement: false inactive [ 994.427751][T14531] vivid-000: RDS Traffic Program: false inactive [ 994.434450][ T5901] usb 4-1: selecting invalid altsetting 1 [ 994.435771][T14531] vivid-000: RDS Music: false inactive [ 994.451644][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 994.451757][T14531] vivid-000: ================== END STATUS ================== [ 994.476759][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 994.493509][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 994.521085][ T5901] usb 4-1: media controller created [ 994.568810][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.581327][T14513] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 994.707944][ T5901] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 994.727633][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 994.741592][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 994.899338][ T5901] usb 4-1: USB disconnect, device number 26 [ 994.964492][T14544] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 994.984373][T14544] FAT-fs (loop4): unable to read boot sector [ 995.808010][T14544] delete_channel: no stack [ 999.405826][T14557] delete_channel: no stack [ 1001.614026][T14559] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1001.624825][T14559] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1001.634061][T14559] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1001.643746][T14559] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1001.652216][T14559] bcachefs: bch2_fs_get_tree() error: EIO [ 1002.144026][T14570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.242646][T14570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.566255][T14572] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1002.574099][T14572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1002.582404][T14572] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1002.590170][T14572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1002.685423][T14577] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1002.696111][T14577] FAT-fs (loop4): unable to read boot sector [ 1002.957910][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2294'. [ 1004.408845][T14588] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1004.438004][T14588] FAT-fs (loop2): unable to read boot sector [ 1004.627697][ T5923] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1004.791989][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.827801][ T5923] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1004.847244][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.982443][ T5923] usb 4-1: config 0 descriptor?? [ 1005.013154][T14598] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1005.044113][T14588] delete_channel: no stack [ 1005.067574][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.076230][T14598] EXT4-fs (loop1): unable to read superblock [ 1005.113783][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.551565][T14598] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1005.590086][T14598] hfsplus: unable to find HFS+ superblock [ 1007.227976][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 1007.234083][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1007.263652][ T5923] usb 4-1: USB disconnect, device number 27 [ 1007.537599][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1007.766702][T14623] siw: device registration error -23 [ 1007.828301][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1007.835379][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1007.911253][ T10] usb 3-1: config 0 has no interface number 0 [ 1007.918739][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1007.930342][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1007.943549][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1007.972411][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1008.012242][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1008.042121][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.052968][T14632] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.072964][ T10] usb 3-1: config 0 descriptor?? [ 1008.091721][ T10] ldusb 3-1:0.55: LD USB Device #3 now attached to major 180 minor 3 [ 1008.102552][T14632] FAT-fs (loop1): unable to read boot sector [ 1008.447546][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'. [ 1009.619848][ T9] usb 3-1: USB disconnect, device number 34 [ 1009.634087][ T9] ldusb 3-1:0.55: LD USB Device #3 now disconnected [ 1009.924034][T14658] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1010.022420][T14661] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1010.031453][T14661] overlayfs: missing 'lowerdir' [ 1010.072914][T14658] FAT-fs (loop2): unable to read boot sector [ 1010.467142][T14658] delete_channel: no stack [ 1011.009471][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.023740][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.747517][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1011.900161][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.940331][ T5923] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1011.988667][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.030877][ T5923] usb 3-1: config 0 descriptor?? [ 1013.531767][T14683] netlink: 'syz.4.2319': attribute type 10 has an invalid length. [ 1013.612884][ T5923] cmedia_hs100b 0003:0D8C:0014.0008: ignoring exceeding usage max [ 1013.684980][T14683] veth0_vlan: left promiscuous mode [ 1013.847655][ T5923] cmedia_hs100b 0003:0D8C:0014.0008: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.2-1/input0 [ 1013.919026][T14683] veth0_vlan: entered promiscuous mode [ 1014.068525][ T5923] usb 3-1: USB disconnect, device number 35 [ 1014.452786][T14683] team0: Device veth0_vlan failed to register rx_handler [ 1014.628479][T14687] fido_id[14687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1014.659178][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.684670][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.793145][T14722] tmpfs: Unknown parameter 'grpquota/#/msr' [ 1016.005515][T14729] NILFS (loop0): device size too small [ 1016.105175][T14733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.117227][T14733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.042153][T14729] overlayfs: failed to clone upperpath [ 1019.718013][T14754] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 1019.829621][T14754] veth0_vlan: left promiscuous mode [ 1020.078397][T14754] veth0_vlan: entered promiscuous mode [ 1020.943457][T14775] msdos: Bad value for 'time_offset' [ 1020.960812][T14754] team0: Device veth0_vlan failed to register rx_handler [ 1022.185578][T14786] syz.0.2341 uses obsolete (PF_INET,SOCK_PACKET) [ 1024.118537][T14808] delete_channel: no stack [ 1025.723575][T14809] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1025.733381][T14809] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 1025.742017][T14809] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1025.751600][T14809] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 1025.759861][T14809] bcachefs: bch2_fs_get_tree() error: EIO [ 1028.392411][T14827] delete_channel: no stack [ 1030.647908][T14828] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1030.657913][T14828] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1030.666593][T14828] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1030.676269][T14828] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1030.684580][T14828] bcachefs: bch2_fs_get_tree() error: EIO [ 1033.626870][T14857] NILFS (loop4): device size too small [ 1034.128139][T14861] vfat: Unknown parameter ' ttr/current' [ 1034.191721][T14863] delete_channel: no stack [ 1035.743542][T14864] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1035.753325][T14864] bcachefs (/dev/loop3): error reading default superblock: IO error: -5 [ 1035.762053][T14864] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1035.771559][T14864] bcachefs (/dev/loop3): error reading superblock: IO error: -5 [ 1035.779777][T14864] bcachefs: bch2_fs_get_tree() error: EIO [ 1036.295766][T14868] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1036.584365][T14868] FAT-fs (loop3): unable to read boot sector [ 1036.688068][T14866] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1036.726328][T14866] FAT-fs (loop4): unable to read boot sector [ 1038.175144][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2362'. [ 1040.553119][T14897] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.657768][T14897] FAT-fs (loop4): unable to read boot sector [ 1040.882148][T14909] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.892074][T14909] FAT-fs (loop1): unable to read boot sector [ 1041.905587][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1042.043660][T14912] bond0: entered promiscuous mode [ 1042.049156][T14912] bond_slave_0: entered promiscuous mode [ 1042.061433][T14912] bond_slave_1: entered promiscuous mode [ 1042.073847][T14912] dummy0: entered promiscuous mode [ 1042.409415][T14912] bond0: left promiscuous mode [ 1042.414648][T14912] bond_slave_0: left promiscuous mode [ 1042.422026][T14912] bond_slave_1: left promiscuous mode [ 1042.428220][T14912] dummy0: left promiscuous mode [ 1043.125529][T14918] NILFS (loop1): device size too small [ 1045.950685][T14942] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1046.012351][T14942] FAT-fs (loop1): unable to read boot sector [ 1046.071492][T14946] syz_tun: entered allmulticast mode [ 1046.209279][T14945] syz_tun: left allmulticast mode [ 1046.329300][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1048.885495][T14965] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1048.921218][T14965] FAT-fs (loop2): unable to read boot sector [ 1049.273070][T14969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 1049.335457][T14969] bond0: entered promiscuous mode [ 1049.341421][T14969] bond_slave_0: entered promiscuous mode [ 1049.349121][T14969] bond_slave_1: entered promiscuous mode [ 1049.864548][T14969] bond0: left promiscuous mode [ 1049.870486][T14969] bond_slave_0: left promiscuous mode [ 1049.876139][T14969] bond_slave_1: left promiscuous mode [ 1050.353209][T14982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.367847][T14982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.579676][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.593983][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.491898][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1051.758071][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1052.021012][ T43] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1052.032071][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1052.041846][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.113790][T15004] NILFS (loop3): device size too small [ 1052.345406][T15007] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1052.354440][T15007] overlayfs: missing 'lowerdir' [ 1052.556779][T15009] vfat: Unknown parameter ' ttr/current' [ 1053.048053][T15017] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1053.060161][T15017] FAT-fs (loop3): unable to read boot sector [ 1054.238826][ T43] usb 3-1: USB disconnect, device number 36 [ 1054.423188][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.429613][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.114626][T15075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1059.133494][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1059.237587][ T5909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1059.397753][ T5901] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1059.444032][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.874940][ T5909] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1059.928720][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.969890][ T5909] usb 4-1: config 0 descriptor?? [ 1059.987584][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1060.541453][ T5901] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1060.587617][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.606089][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.626326][ T5901] usb 3-1: Product: syz [ 1060.639039][ T5901] usb 3-1: Manufacturer: syz [ 1060.655124][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.655568][ T5901] usb 3-1: SerialNumber: syz [ 1060.676483][T15092] syzkaller0: entered promiscuous mode [ 1060.690078][T15092] syzkaller0: entered allmulticast mode [ 1060.760662][T15093] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1060.769562][T15093] overlayfs: missing 'lowerdir' [ 1060.909501][ T5909] cmedia_hs100b 0003:0D8C:0014.0009: ignoring exceeding usage max [ 1061.154307][ T5901] usb 3-1: config 0 descriptor?? [ 1061.203806][ T5909] cmedia_hs100b 0003:0D8C:0014.0009: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 1061.218103][ T5901] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1061.245110][ T5901] usb 3-1: Detected FT-X [ 1061.267901][ T5909] usb 4-1: USB disconnect, device number 28 [ 1061.623404][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2410'. [ 1062.220377][T15099] fido_id[15099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1062.239549][T15108] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1062.254388][T15108] FAT-fs (loop4): unable to read boot sector [ 1062.359018][T15110] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1062.565496][T15110] FAT-fs (loop0): unable to read boot sector [ 1062.678294][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1062.725243][T15112] bond0: entered promiscuous mode [ 1062.730427][T15112] bond_slave_0: entered promiscuous mode [ 1062.737502][T15112] bond_slave_1: entered promiscuous mode [ 1062.744366][T15112] dummy0: entered promiscuous mode [ 1063.341684][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1063.351060][T15112] bond0: left promiscuous mode [ 1063.355852][T15112] bond_slave_0: left promiscuous mode [ 1063.361405][T15112] bond_slave_1: left promiscuous mode [ 1063.367965][T15112] dummy0: left promiscuous mode [ 1063.457041][ T5901] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1063.475500][ T5901] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1063.497720][ T5901] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1063.642350][ T5901] usb 3-1: USB disconnect, device number 37 [ 1063.644747][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.652480][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1064.491761][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.556665][ T5901] ftdi_sio 3-1:0.0: device disconnected [ 1064.828365][T15121] usb usb8: usbfs: process 15121 (syz.1.2413) did not claim interface 0 before use [ 1065.523461][T15126] NILFS (loop0): device size too small [ 1065.655990][T15119] delete_channel: no stack [ 1067.118307][T15132] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1067.128108][T15132] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1067.136709][T15132] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1067.146739][T15132] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1067.155684][T15132] bcachefs: bch2_fs_get_tree() error: EIO [ 1068.174515][T15130] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1068.207692][T15130] EXT4-fs (loop4): unable to read superblock [ 1068.806664][T15126] vfat: Unknown parameter ' ttr/current' [ 1070.763059][T15159] NILFS (loop0): device size too small [ 1071.737033][T15169] overlayfs: failed to clone upperpath [ 1071.989587][T15173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.001816][T15173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.538015][T15179] netlink: 'syz.1.2428': attribute type 39 has an invalid length. [ 1074.574631][T15188] NILFS (loop0): device size too small [ 1075.077183][T15194] netlink: 'syz.2.2433': attribute type 10 has an invalid length. [ 1075.112392][T15194] veth0_vlan: left promiscuous mode [ 1075.160809][T15191] overlayfs: failed to clone upperpath [ 1075.254404][T15194] veth0_vlan: entered promiscuous mode [ 1075.281943][T15194] team0: Device veth0_vlan failed to register rx_handler [ 1075.375343][T15203] NILFS (loop3): device size too small [ 1075.789450][T15209] vfat: Unknown parameter ' ttr/current' [ 1077.929798][T15227] delete_channel: no stack [ 1079.391821][T15229] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1079.401624][T15229] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 1079.410298][T15229] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1079.419890][T15229] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 1079.428157][T15229] bcachefs: bch2_fs_get_tree() error: EIO [ 1079.807759][T15225] NILFS (loop0): device size too small [ 1080.028180][T15231] vfat: Unknown parameter ' ttr/current' [ 1081.138503][T15240] NILFS (loop4): device size too small [ 1081.857291][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.883463][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.244974][T15246] NILFS (loop4): device size too small [ 1082.706910][T15251] overlayfs: failed to clone upperpath [ 1082.776095][T15253] delete_channel: no stack [ 1084.657890][T15254] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1084.668608][T15254] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1084.677308][T15254] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1084.687627][T15254] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1084.695884][T15254] bcachefs: bch2_fs_get_tree() error: EIO [ 1085.031859][T15261] NILFS (loop3): device size too small [ 1085.091699][T15263] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1085.107286][T15263] MINIX-fs: unable to read superblock [ 1088.183475][T15279] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 1088.290236][T15282] delete_channel: no stack [ 1089.917561][T15284] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1089.927334][T15284] bcachefs (/dev/loop0): error reading default superblock: IO error: -5 [ 1089.936045][T15284] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1089.945647][T15284] bcachefs (/dev/loop0): error reading superblock: IO error: -5 [ 1089.953845][T15284] bcachefs: bch2_fs_get_tree() error: EIO [ 1090.263300][T15279] veth0_vlan: left promiscuous mode [ 1090.296103][T15279] veth0_vlan: entered promiscuous mode [ 1090.460400][T15279] team0: Device veth0_vlan failed to register rx_handler [ 1090.559089][T15292] NILFS (loop2): device size too small [ 1091.601774][ T5923] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1092.015380][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.067606][ T5923] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1092.435175][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.472453][ T5923] usb 4-1: config 0 descriptor?? [ 1092.922746][ T5923] cmedia_hs100b 0003:0D8C:0014.000A: ignoring exceeding usage max [ 1092.963445][T15315] NILFS (loop4): device size too small [ 1092.982139][ T5923] cmedia_hs100b 0003:0D8C:0014.000A: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 1093.458056][ T5923] usb 4-1: USB disconnect, device number 29 [ 1093.603275][T15318] fido_id[15318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1094.001215][T15321] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1094.009034][T15321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1094.018354][T15321] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1094.026061][T15321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1094.502157][T15325] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.537255][T15325] FAT-fs (loop3): unable to read boot sector [ 1094.550723][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.684091][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.795157][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1094.846487][T15330] bond0: entered promiscuous mode [ 1094.851657][T15330] bond_slave_0: entered promiscuous mode [ 1094.858922][T15330] bond_slave_1: entered promiscuous mode [ 1094.865935][T15330] dummy0: entered promiscuous mode [ 1095.297955][T15330] bond0: left promiscuous mode [ 1095.302794][T15330] bond_slave_0: left promiscuous mode [ 1095.308637][T15330] bond_slave_1: left promiscuous mode [ 1095.315991][T15330] dummy0: left promiscuous mode [ 1095.501428][T15333] NILFS (loop0): device size too small [ 1095.686903][T15335] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.707563][T15335] FAT-fs (loop3): unable to read boot sector [ 1095.790238][T15337] vfat: Unknown parameter ' ttr/current' [ 1096.156941][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2468'. [ 1096.208722][T15341] bond0: entered promiscuous mode [ 1096.213859][T15341] bond_slave_0: entered promiscuous mode [ 1096.221199][T15341] bond_slave_1: entered promiscuous mode [ 1096.228617][T15341] dummy0: entered promiscuous mode [ 1096.666221][T15341] bond0: left promiscuous mode [ 1096.671144][T15341] bond_slave_0: left promiscuous mode [ 1096.676644][T15341] bond_slave_1: left promiscuous mode [ 1096.682222][T15341] dummy0: left promiscuous mode [ 1097.103129][T15339] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1097.110934][T15339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1097.119246][T15339] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1097.126973][T15339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1098.276381][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.312003][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.579159][T15366] delete_channel: no stack [ 1101.249545][T15368] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1101.259904][T15368] bcachefs (/dev/loop0): error reading default superblock: IO error: -5 [ 1101.269018][T15368] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1101.278578][T15368] bcachefs (/dev/loop0): error reading superblock: IO error: -5 [ 1101.286775][T15368] bcachefs: bch2_fs_get_tree() error: EIO [ 1102.967184][T15375] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1103.011066][T15375] FAT-fs (loop2): unable to read boot sector [ 1103.024299][T15382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.208769][T15382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.223431][T15387] NILFS (loop3): device size too small [ 1103.333743][T15389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2479'. [ 1103.382637][T15389] bond0: entered promiscuous mode [ 1103.387818][T15389] bond_slave_0: entered promiscuous mode [ 1103.395357][T15389] bond_slave_1: entered promiscuous mode [ 1103.457837][T15389] bond0: left promiscuous mode [ 1103.462753][T15389] bond_slave_0: left promiscuous mode [ 1103.470038][T15389] bond_slave_1: left promiscuous mode [ 1103.959959][T15391] vfat: Unknown parameter ' ttr/current' [ 1104.338557][T15397] delete_channel: no stack [ 1105.954924][T15398] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1105.965720][T15398] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 1105.975070][T15398] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1105.984676][T15398] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 1105.992842][T15398] bcachefs: bch2_fs_get_tree() error: EIO [ 1106.726741][T15402] netlink: 'syz.3.2487': attribute type 39 has an invalid length. [ 1107.963977][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 1108.015331][T15416] vivid-002: ================= START STATUS ================= [ 1108.025090][T15416] vivid-002: Radio HW Seek Mode: Bounded [ 1108.041649][T15416] vivid-002: Radio Programmable HW Seek: false [ 1108.060027][T15416] vivid-002: RDS Rx I/O Mode: Block I/O [ 1108.079297][T15416] vivid-002: Generate RBDS Instead of RDS: false [ 1108.088108][T15416] vivid-002: RDS Reception: true [ 1108.107572][T15416] vivid-002: RDS Program Type: 0 inactive [ 1108.117616][T15416] vivid-002: RDS PS Name: inactive [ 1108.130282][T15416] vivid-002: RDS Radio Text: inactive [ 1108.135921][T15416] vivid-002: RDS Traffic Announcement: false inactive [ 1108.146055][T15416] vivid-002: RDS Traffic Program: false inactive [ 1108.152897][T15416] vivid-002: RDS Music: false inactive [ 1108.158865][T15416] vivid-002: ================== END STATUS ================== [ 1108.350415][T15419] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1108.387982][T15419] EXT4-fs (loop3): unable to read superblock [ 1108.455876][T15419] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1108.471081][T15419] hfsplus: unable to find HFS+ superblock [ 1108.577885][T15424] NILFS (loop2): device size too small [ 1109.630853][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1109.641663][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1110.222914][T15437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1110.241142][T15437] FAT-fs (loop3): unable to read boot sector [ 1110.279802][T15439] NILFS (loop4): device size too small [ 1110.548273][T15442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2498'. [ 1110.600266][T15442] bond0: entered promiscuous mode [ 1110.605397][T15442] bond_slave_0: entered promiscuous mode [ 1110.612571][T15442] bond_slave_1: entered promiscuous mode [ 1110.619593][T15442] dummy0: entered promiscuous mode [ 1111.008384][T15442] bond0: left promiscuous mode [ 1111.013216][T15442] bond_slave_0: left promiscuous mode [ 1111.018790][T15442] bond_slave_1: left promiscuous mode [ 1111.024415][T15442] dummy0: left promiscuous mode [ 1111.216919][T15444] vfat: Unknown parameter ' ttr/current' [ 1116.335135][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.341602][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.579531][T15484] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1116.653513][T15484] FAT-fs (loop2): unable to read boot sector [ 1116.933413][T15489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2511'. [ 1116.983009][T15489] bond0: entered promiscuous mode [ 1116.988174][T15489] bond_slave_0: entered promiscuous mode [ 1116.995555][T15489] bond_slave_1: entered promiscuous mode [ 1117.447652][T15489] bond0: left promiscuous mode [ 1117.452471][T15489] bond_slave_0: left promiscuous mode [ 1117.458143][T15489] bond_slave_1: left promiscuous mode [ 1117.474939][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1117.505374][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1118.208605][T15497] NILFS (loop3): device size too small [ 1118.264715][T15500] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1118.327881][T15500] FAT-fs (loop2): unable to read boot sector [ 1118.747255][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1118.793646][T15502] bond0: entered promiscuous mode [ 1118.798840][T15502] bond_slave_0: entered promiscuous mode [ 1118.805993][T15502] bond_slave_1: entered promiscuous mode [ 1119.248000][T15502] bond0: left promiscuous mode [ 1119.252843][T15502] bond_slave_0: left promiscuous mode [ 1119.258591][T15502] bond_slave_1: left promiscuous mode [ 1119.259569][T15479] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1119.293232][T15479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1119.327929][T15479] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1119.446204][T15479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1119.637703][T15506] vivid-004: ================= START STATUS ================= [ 1119.721259][T15506] vivid-004: Radio HW Seek Mode: Bounded [ 1119.741080][T15508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1119.795067][T15506] vivid-004: Radio Programmable HW Seek: false [ 1119.803275][T15506] vivid-004: RDS Rx I/O Mode: Block I/O [ 1119.811958][T15506] vivid-004: Generate RBDS Instead of RDS: false [ 1119.820948][T15506] vivid-004: RDS Reception: true [ 1119.826084][T15506] vivid-004: RDS Program Type: 0 inactive [ 1119.848601][T15506] vivid-004: RDS PS Name: inactive [ 1119.863865][T15506] vivid-004: RDS Radio Text: inactive [ 1119.876165][T15506] vivid-004: RDS Traffic Announcement: false inactive [ 1119.897606][T15506] vivid-004: RDS Traffic Program: false inactive [ 1119.908795][T15506] vivid-004: RDS Music: false inactive [ 1119.970848][T15506] vivid-004: ================== END STATUS ================== [ 1120.379786][T15514] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1120.392314][T15514] FAT-fs (loop1): unable to read boot sector [ 1121.165998][T15514] delete_channel: no stack [ 1121.266072][T15525] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1121.307861][T15525] FAT-fs (loop1): unable to read boot sector [ 1121.507554][ T5923] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1121.617646][T15527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 1121.672019][T15527] bond0: entered promiscuous mode [ 1121.677156][T15527] bond_slave_0: entered promiscuous mode [ 1121.684325][T15527] bond_slave_1: entered promiscuous mode [ 1121.691682][T15527] dummy0: entered promiscuous mode [ 1121.877852][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 1121.917330][ T5923] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1122.069718][T15527] bond0: left promiscuous mode [ 1122.074552][T15527] bond_slave_0: left promiscuous mode [ 1122.080131][T15527] bond_slave_1: left promiscuous mode [ 1122.085644][T15527] dummy0: left promiscuous mode [ 1122.136972][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1122.174482][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.310736][T15530] netlink: 'syz.1.2522': attribute type 39 has an invalid length. [ 1122.517739][T15532] delete_channel: no stack [ 1124.243225][T15533] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1124.253308][T15533] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 1124.262083][T15533] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1124.271819][T15533] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 1124.280026][T15533] bcachefs: bch2_fs_get_tree() error: EIO [ 1126.241389][ T5909] usb 4-1: USB disconnect, device number 30 [ 1127.551357][T15553] delete_channel: no stack [ 1129.173184][T15554] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1129.183056][T15554] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1129.191715][T15554] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1129.201265][T15554] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1129.210347][T15554] bcachefs: bch2_fs_get_tree() error: EIO [ 1129.847095][T15558] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1129.897882][T15558] FAT-fs (loop4): unable to read boot sector [ 1129.919313][T15564] msdos: Bad value for 'time_offset' [ 1130.132409][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1130.876973][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1130.986789][T15558] delete_channel: no stack [ 1132.647534][T15137] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1132.817641][T15137] usb 4-1: Using ep0 maxpacket: 8 [ 1132.837866][T15137] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1132.847043][T15137] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1132.886578][T15137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.755419][T15604] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1135.042811][T15606] msdos: Bad value for 'time_offset' [ 1135.969857][T15612] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1135.981199][T15612] FAT-fs (loop4): unable to read boot sector [ 1136.015263][ T5923] usb 4-1: USB disconnect, device number 31 [ 1136.046420][T15614] NILFS (loop0): device size too small [ 1137.021617][T15622] vfat: Unknown parameter ' ttr/current' [ 1137.408075][T15612] delete_channel: no stack [ 1138.749135][T15636] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1138.759265][T15636] EXT4-fs (loop4): unable to read superblock [ 1138.965042][T15636] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1139.025023][T15636] EXT4-fs (loop4): unable to read superblock [ 1139.396485][T15645] delete_channel: no stack [ 1141.054982][T15651] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1141.065050][T15651] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1141.073782][T15651] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1141.083363][T15651] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1141.092341][T15651] bcachefs: bch2_fs_get_tree() error: EIO [ 1141.544574][T15657] msdos: Bad value for 'time_offset' [ 1141.705311][T15636] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1141.731448][T15636] CIFS mount error: No usable UNC path provided in device string! [ 1141.731448][T15636] [ 1141.741626][T15636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1142.397519][ T5909] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1142.665916][T15666] netlink: 'syz.1.2559': attribute type 39 has an invalid length. [ 1142.717523][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 1142.752041][ T5909] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1143.210200][ T5909] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1143.230491][T15670] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1143.254402][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.275099][T15670] FAT-fs (loop2): unable to read boot sector [ 1144.162513][T15670] delete_channel: no stack [ 1146.574138][ T875] usb 4-1: USB disconnect, device number 32 [ 1146.672514][T15695] msdos: Bad value for 'time_offset' [ 1149.033272][T15708] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1149.083382][T15708] FAT-fs (loop3): unable to read boot sector [ 1149.899172][T15705] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1150.041665][T15705] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1150.206396][T15705] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1150.238827][T15712] usb usb8: usbfs: process 15712 (syz.4.2572) did not claim interface 0 before use [ 1150.435554][T15705] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1150.570911][T15705] bcachefs: bch2_fs_get_tree() error: EIO [ 1150.591094][T15708] delete_channel: no stack [ 1151.730756][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.772736][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.977553][ T5909] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1152.731066][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 1152.747273][ T5909] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1152.781599][ T5909] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1152.807511][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.815295][T15738] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1152.839960][T15738] FAT-fs (loop1): unable to read boot sector [ 1153.089198][T15740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1153.136521][T15740] bond0: entered promiscuous mode [ 1153.141738][T15740] bond_slave_0: entered promiscuous mode [ 1153.148746][T15740] bond_slave_1: entered promiscuous mode [ 1153.155774][T15740] dummy0: entered promiscuous mode [ 1153.551063][T15740] bond0: left promiscuous mode [ 1153.555870][T15740] bond_slave_0: left promiscuous mode [ 1153.561440][T15740] bond_slave_1: left promiscuous mode [ 1153.566910][T15740] dummy0: left promiscuous mode [ 1153.959615][T15744] msdos: Bad value for 'time_offset' [ 1154.999512][T15752] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1155.038514][T15752] FAT-fs (loop1): unable to read boot sector [ 1155.038664][ T5909] usb 4-1: USB disconnect, device number 33 [ 1156.288186][T15752] delete_channel: no stack [ 1158.732911][T15769] NILFS (loop3): device size too small [ 1159.362925][T15769] vfat: Unknown parameter ' ttr/current' [ 1159.482762][T15778] NILFS (loop4): device size too small [ 1159.765355][T15784] vfat: Unknown parameter ' ttr/current' [ 1159.911092][T15782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1160.013353][T15782] FAT-fs (loop1): unable to read boot sector [ 1160.488086][T15791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1160.503506][T15791] bond0: entered promiscuous mode [ 1160.508601][T15791] bond_slave_0: entered promiscuous mode [ 1160.514459][T15791] bond_slave_1: entered promiscuous mode [ 1160.520351][T15791] dummy0: entered promiscuous mode [ 1161.268921][T15791] bond0: left promiscuous mode [ 1161.273763][T15791] bond_slave_0: left promiscuous mode [ 1161.282842][T15791] bond_slave_1: left promiscuous mode [ 1161.293046][T15791] dummy0: left promiscuous mode [ 1162.165912][T15800] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1162.277997][T15800] FAT-fs (loop3): unable to read boot sector [ 1162.753592][T15801] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1162.809861][T15801] FAT-fs (loop1): unable to read boot sector [ 1163.924993][T15801] delete_channel: no stack [ 1166.284539][T15816] NILFS (loop4): device size too small [ 1166.753892][T15827] vfat: Unknown parameter ' ttr/current' [ 1167.302797][T15838] overlayfs: failed to resolve './file1': -2 [ 1167.449677][T15838] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2608'. [ 1167.460064][T15838] openvswitch: netlink: Message has 512 unknown bytes. [ 1170.455409][T15862] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1170.466709][T15862] FAT-fs (loop1): unable to read boot sector [ 1171.378575][T15862] delete_channel: no stack [ 1171.724147][T15872] NILFS (loop2): device size too small [ 1172.027603][T15878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.806075][T15879] vfat: Unknown parameter ' ttr/current' [ 1173.211713][T15884] siw: device registration error -23 [ 1174.335007][T15890] openvswitch: netlink: Message has 8 unknown bytes. [ 1177.068691][T15914] NILFS (loop0): device size too small [ 1177.308141][T15916] vfat: Unknown parameter ' ttr/current' [ 1177.318790][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.325181][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.712223][T15921] vivid-001: ================= START STATUS ================= [ 1177.720025][T15921] vivid-001: Radio HW Seek Mode: Bounded [ 1177.726049][T15921] vivid-001: Radio Programmable HW Seek: false [ 1177.732497][T15921] vivid-001: RDS Rx I/O Mode: Block I/O [ 1177.739084][T15921] vivid-001: Generate RBDS Instead of RDS: false [ 1177.746009][T15921] vivid-001: RDS Reception: true [ 1177.788899][T15921] vivid-001: RDS Program Type: 0 inactive [ 1177.803340][T15897] syz.2.2624 (15897): drop_caches: 2 [ 1177.830138][T15921] vivid-001: RDS PS Name: inactive [ 1177.850230][T15921] vivid-001: RDS Radio Text: inactive [ 1177.876206][T15921] vivid-001: RDS Traffic Announcement: false inactive [ 1177.933285][T15921] vivid-001: RDS Traffic Program: false inactive [ 1177.940533][T15921] vivid-001: RDS Music: false inactive [ 1177.968072][T15921] vivid-001: ================== END STATUS ================== [ 1178.490870][T15931] openvswitch: netlink: Message has 8 unknown bytes. [ 1186.206316][T15986] overlayfs: failed to resolve './file1': -2 [ 1186.319030][T15987] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2648'. [ 1186.328575][T15987] openvswitch: netlink: Message has 512 unknown bytes. [ 1188.127704][T16007] delete_channel: no stack [ 1190.827888][T16011] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1190.837884][T16011] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1190.846578][T16011] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1190.857073][T16011] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1190.866126][T16011] bcachefs: bch2_fs_get_tree() error: EIO [ 1191.877395][T16005] syz.1.2655 (16005): drop_caches: 2 [ 1192.105163][T16023] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1192.114632][T16023] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1192.123069][T16023] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1192.132501][T16023] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1192.140306][T16023] bcachefs: bch2_fs_get_tree() error: EIO [ 1192.592796][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2660'. [ 1193.290891][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.448621][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.988258][T16042] qnx6: unable to read the first superblock [ 1194.809789][T16045] vivid-004: ================= START STATUS ================= [ 1194.821522][T16045] vivid-004: Radio HW Seek Mode: Bounded [ 1194.846268][T16045] vivid-004: Radio Programmable HW Seek: false [ 1194.859189][T16045] vivid-004: RDS Rx I/O Mode: Block I/O [ 1194.868435][T16045] vivid-004: Generate RBDS Instead of RDS: false [ 1194.875076][T16045] vivid-004: RDS Reception: true [ 1194.880483][T16045] vivid-004: RDS Program Type: 0 inactive [ 1194.886707][T16045] vivid-004: RDS PS Name: inactive [ 1194.893042][T16045] vivid-004: RDS Radio Text: inactive [ 1194.906312][T16045] vivid-004: RDS Traffic Announcement: false inactive [ 1195.559596][T16045] vivid-004: RDS Traffic Program: false inactive [ 1195.585640][T16045] vivid-004: RDS Music: false inactive [ 1195.594290][T16045] vivid-004: ================== END STATUS ================== [ 1195.908637][T16051] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1195.916458][T16051] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1195.924811][T16051] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1195.932636][T16051] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1197.473235][T16057] syz.3.2668 (16057): drop_caches: 2 [ 1197.571410][T16065] NILFS (loop1): device size too small [ 1198.503312][T16071] overlayfs: failed to clone upperpath [ 1198.888578][T16075] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1198.898174][T16075] bcachefs (/dev/loop0): error reading default superblock: IO error: -5 [ 1198.906532][T16075] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1198.915979][T16075] bcachefs (/dev/loop0): error reading superblock: IO error: -5 [ 1198.923758][T16075] bcachefs: bch2_fs_get_tree() error: EIO [ 1201.107877][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.209363][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.782827][T16144] delete_channel: no stack [ 1211.675340][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 1215.154749][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1215.327519][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1215.470816][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1215.483798][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.492317][ T10] usb 3-1: Product: syz [ 1215.496888][ T10] usb 3-1: Manufacturer: syz [ 1215.503330][ T10] usb 3-1: SerialNumber: syz [ 1216.059420][ T10] usb 3-1: config 0 descriptor?? [ 1218.065012][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1218.073924][ T10] usb 3-1: Detected FT-X [ 1218.078808][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1218.086189][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1218.095642][ T10] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1218.107556][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1218.131381][ T10] usb 3-1: USB disconnect, device number 38 [ 1218.141457][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1218.155450][ T10] ftdi_sio 3-1:0.0: device disconnected [ 1220.060203][T16206] NILFS (loop4): device size too small [ 1221.001503][T16217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1221.022915][T16217] bond_slave_0: entered promiscuous mode [ 1221.028810][T16217] bond_slave_1: entered promiscuous mode [ 1221.034439][T16217] dummy0: entered promiscuous mode [ 1221.040613][T16217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1221.049494][T16217] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1221.375900][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 1221.945161][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.037825][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.100533][T16238] NILFS (loop0): device size too small [ 1223.830276][T16247] vfat: Unknown parameter ' ttr/current' [ 1224.923893][T16258] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1224.933065][T16258] overlayfs: missing 'lowerdir' [ 1229.021844][T16299] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1230.819573][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.898696][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.668015][T16315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1232.676718][T16315] overlayfs: missing 'lowerdir' [ 1232.826076][T16319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1232.881293][T16319] FAT-fs (loop2): unable to read boot sector [ 1236.180241][T16339] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1236.188074][T16339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1236.196298][T16339] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1236.204055][T16339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1236.587548][T16355] qnx6: unable to read the first superblock [ 1238.752386][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.761015][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.982561][T16376] NILFS (loop0): device size too small [ 1247.295528][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.304895][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.806505][T16455] msdos: Bad value for 'time_offset' [ 1252.335607][T16496] msdos: Bad value for 'time_offset' [ 1252.553822][T16503] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1252.600842][T16503] EXT4-fs (loop3): unable to read superblock [ 1252.690496][T16503] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1252.717924][T16503] EXT4-fs (loop3): unable to read superblock [ 1252.820625][T16512] CIFS mount error: No usable UNC path provided in device string! [ 1252.820625][T16512] [ 1252.841084][T16512] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1255.376440][T16533] msdos: Bad value for 'time_offset' [ 1258.035636][T16559] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1258.112613][T16559] EXT4-fs (loop2): unable to read superblock [ 1258.389395][T16559] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1258.399010][T16559] EXT4-fs (loop2): unable to read superblock [ 1258.479717][T16569] CIFS mount error: No usable UNC path provided in device string! [ 1258.479717][T16569] [ 1258.507848][T16569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1261.636889][ T10] usb 2-1: USB disconnect, device number 11 [ 1261.708852][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1262.894567][T10169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1262.908793][T10169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1262.917294][T10169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1262.930574][T10169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1262.938434][T10169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1262.981487][T16619] vxcan1 speed is unknown, defaulting to 1000 [ 1263.808934][T16631] NILFS (loop3): device size too small [ 1264.051410][ T6141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.297687][T15137] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1264.329378][ T6141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.478015][T15137] usb 3-1: Using ep0 maxpacket: 8 [ 1264.550146][T15137] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1264.626076][T15137] usb 3-1: config 0 has no interface number 0 [ 1264.688097][T15137] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.771357][T15137] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1264.807491][T15137] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1264.823636][T15137] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.848975][T15137] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1264.871504][T15137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.963099][T15137] usb 3-1: config 0 descriptor?? [ 1264.975340][ T6141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.975605][T15137] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1264.985957][T14255] Bluetooth: hci5: command tx timeout [ 1265.204408][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.218355][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.341674][ T6141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.826785][T16619] chnl_net:caif_netlink_parms(): no params data found [ 1267.706164][T14255] Bluetooth: hci5: command tx timeout [ 1267.715323][ T6141] bridge_slave_1: left allmulticast mode [ 1267.727683][ T6141] bridge_slave_1: left promiscuous mode [ 1267.745676][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.819834][ T6141] bridge_slave_0: left allmulticast mode [ 1267.839434][ T6141] bridge_slave_0: left promiscuous mode [ 1268.013222][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.991641][T16686] NILFS (loop2): device size too small [ 1269.459273][T16693] NILFS (loop4): device size too small [ 1269.777757][T14255] Bluetooth: hci5: command tx timeout [ 1269.938055][T16696] vfat: Unknown parameter ' ttr/current' [ 1270.558222][T16710] NILFS (loop3): device size too small [ 1270.834036][T16702] syz.2.2841 (16702): drop_caches: 2 [ 1270.948947][T16710] overlayfs: failed to clone upperpath [ 1271.864680][T14255] Bluetooth: hci5: command tx timeout [ 1275.332369][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.367956][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.207657][ T6141] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1276.254231][ T6141] bond0 (unregistering): Released all slaves [ 1276.442191][ T6141] bond1 (unregistering): Released all slaves [ 1277.078014][ T6141] tipc: Left network mode [ 1278.761622][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.784683][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.794421][T16619] bridge_slave_0: entered allmulticast mode [ 1278.802234][T16619] bridge_slave_0: entered promiscuous mode [ 1278.931030][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.982350][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.333974][T16619] bridge_slave_1: entered allmulticast mode [ 1279.342069][T16619] bridge_slave_1: entered promiscuous mode [ 1279.953380][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1279.955743][T16805] NILFS (loop3): device size too small [ 1280.021723][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2869'. [ 1281.242797][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.362531][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.062825][T16838] qnx6: unable to read the first superblock [ 1282.992183][T16619] team0: Port device team_slave_0 added [ 1283.408037][T16619] team0: Port device team_slave_1 added [ 1283.707031][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.761109][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.015473][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.313527][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.320943][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.349448][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.856161][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1285.342789][T16619] hsr_slave_0: entered promiscuous mode [ 1285.359917][T16619] hsr_slave_1: entered promiscuous mode [ 1285.373735][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 1285.503334][T16619] Cannot create hsr debugfs directory [ 1286.394864][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1288.159016][ T6141] hsr_slave_0: left promiscuous mode [ 1288.172283][ T6141] hsr_slave_1: left promiscuous mode [ 1288.179048][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.186680][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.200962][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.217583][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.265931][ T6141] veth1_macvtap: left promiscuous mode [ 1288.277747][ T6141] veth0_macvtap: left promiscuous mode [ 1288.392190][ T6141] veth1_vlan: left promiscuous mode [ 1289.998084][ T10] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1290.353123][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1290.374404][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1290.427804][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.456106][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2894'. [ 1290.458721][ T10] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1290.602074][ T10] usb 4-1: no configuration chosen from 1 choice [ 1291.877771][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 1292.129520][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 1292.821075][T16942] syz.2.2897 (16942): drop_caches: 2 [ 1292.849720][ T1150] smc: removing ib device syz2 [ 1295.073398][T14688] vxcan1 speed is unknown, defaulting to 1000 [ 1295.079962][T14688] syz2: Port: 1 Link DOWN [ 1295.239889][ T5923] usb 4-1: USB disconnect, device number 34 [ 1295.434447][T16961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1297.847907][T16977] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1297.857345][T16977] bcachefs (/dev/loop0): error reading default superblock: IO error: -5 [ 1297.866246][T16977] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1297.875651][T16977] bcachefs (/dev/loop0): error reading superblock: IO error: -5 [ 1297.883388][T16977] bcachefs: bch2_fs_get_tree() error: EIO [ 1299.915934][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1300.191523][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.198744][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.463525][T16988] NILFS (loop4): device size too small [ 1300.657117][T17001] vfat: Unknown parameter ' ttr/current' [ 1301.414299][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2915'. [ 1303.855702][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.898524][T16619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1303.991372][T17032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1304.001454][T17032] overlayfs: missing 'lowerdir' [ 1304.011319][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.032460][T16619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1304.074948][T16619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1304.147387][T16619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1304.345984][T17046] syz.0.2923 (17046): drop_caches: 2 [ 1305.336104][ T6141] IPVS: stop unused estimator thread 0... [ 1305.379226][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.505342][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.713944][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'. [ 1306.249307][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.256482][T11116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.436662][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.443881][T11116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.818518][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.278667][T16619] veth0_vlan: entered promiscuous mode [ 1309.354652][T16619] veth1_vlan: entered promiscuous mode [ 1310.217279][T16619] veth0_macvtap: entered promiscuous mode [ 1310.237255][T16619] veth1_macvtap: entered promiscuous mode [ 1310.431460][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.556348][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.861014][ T7590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.895549][ T7590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.929262][ T7590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.985301][ T7590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.263457][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.307191][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.500826][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.518717][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.533050][T17143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1312.543188][T17143] overlayfs: missing 'lowerdir' [ 1312.582680][T17148] vivid-004: ================= START STATUS ================= [ 1312.591364][T17148] vivid-004: Radio HW Seek Mode: Bounded [ 1312.598497][T17148] vivid-004: Radio Programmable HW Seek: false [ 1312.608767][T17148] vivid-004: RDS Rx I/O Mode: Block I/O [ 1312.615455][T17148] vivid-004: Generate RBDS Instead of RDS: false [ 1312.623901][T17148] vivid-004: RDS Reception: true [ 1312.629554][T17148] vivid-004: RDS Program Type: 0 inactive [ 1312.635408][T17148] vivid-004: RDS PS Name: inactive [ 1312.652542][T17148] vivid-004: RDS Radio Text: inactive [ 1312.659338][T17148] vivid-004: RDS Traffic Announcement: false inactive [ 1313.097662][T17148] vivid-004: RDS Traffic Program: false inactive [ 1313.211393][T17148] vivid-004: RDS Music: false inactive [ 1313.217009][T17148] vivid-004: ================== END STATUS ================== [ 1316.692319][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 1318.096324][ T5909] usb 5-1: USB disconnect, device number 11 [ 1318.137200][ T5909] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 1322.274559][ T7592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.413133][T10169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1322.424949][T10169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1322.436564][T10169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1322.445611][T10169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1322.453493][T10169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1322.527228][ T7592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.767190][ T7592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.412563][ T7592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.505264][T10169] Bluetooth: hci1: command tx timeout [ 1325.034598][ T7592] bridge_slave_1: left allmulticast mode [ 1325.077021][ T7592] bridge_slave_1: left promiscuous mode [ 1325.497733][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.138921][ T7592] : left allmulticast mode [ 1326.157642][ T7592] : left promiscuous mode [ 1326.167782][ T7592] bridge0: port 1() entered disabled state [ 1326.577910][T10169] Bluetooth: hci1: command tx timeout [ 1326.685343][ T7592] bond_slave_0: left promiscuous mode [ 1326.692670][ T7592] bond_slave_1: left promiscuous mode [ 1326.700052][ T7592] dummy0: left promiscuous mode [ 1326.764829][T17299] vivid-001: ================= START STATUS ================= [ 1326.790705][T17299] vivid-001: Radio HW Seek Mode: Bounded [ 1326.798910][T17299] vivid-001: Radio Programmable HW Seek: false [ 1326.826136][T17299] vivid-001: RDS Rx I/O Mode: Block I/O [ 1326.902015][T17299] vivid-001: Generate RBDS Instead of RDS: false [ 1327.456108][T17299] vivid-001: RDS Reception: true [ 1327.461598][T17299] vivid-001: RDS Program Type: 0 inactive [ 1327.468226][T17299] vivid-001: RDS PS Name: inactive [ 1327.481061][T17299] vivid-001: RDS Radio Text: inactive [ 1327.492894][T17299] vivid-001: RDS Traffic Announcement: false inactive [ 1327.512622][T17299] vivid-001: RDS Traffic Program: false inactive [ 1327.539669][T17299] vivid-001: RDS Music: false inactive [ 1327.545349][T17299] vivid-001: ================== END STATUS ================== [ 1328.647095][ T7592] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1328.658721][ T7592] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1328.668562][T10169] Bluetooth: hci1: command tx timeout [ 1328.715660][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.731517][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.744087][ T7592] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1328.760087][ T7592] bond0 (unregistering): Released all slaves [ 1328.967009][ T7592] bond1 (unregistering): Released all slaves [ 1329.285860][ T7592] tipc: Left network mode [ 1329.395463][T17327] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1329.404724][T17327] overlayfs: missing 'lowerdir' [ 1329.751144][T17336] syz.2.2975 (17336): drop_caches: 2 [ 1330.023451][T17249] chnl_net:caif_netlink_parms(): no params data found [ 1330.248987][T17343] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1330.258527][T17343] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1330.266906][T17343] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1330.276393][T17343] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1330.284355][T17343] bcachefs: bch2_fs_get_tree() error: EIO [ 1330.747612][T10169] Bluetooth: hci1: command tx timeout [ 1331.184561][T17344] netlink: 'syz.3.2978': attribute type 1 has an invalid length. [ 1332.307727][T17383] vivid-002: ================= START STATUS ================= [ 1332.337661][T17383] vivid-002: Radio HW Seek Mode: Bounded [ 1332.345962][T17383] vivid-002: Radio Programmable HW Seek: false [ 1332.361804][T17383] vivid-002: RDS Rx I/O Mode: Block I/O [ 1332.793662][T17383] vivid-002: Generate RBDS Instead of RDS: false [ 1332.856033][T17383] vivid-002: RDS Reception: true [ 1332.875657][T17383] vivid-002: RDS Program Type: 0 inactive [ 1332.883804][T17383] vivid-002: RDS PS Name: inactive [ 1332.891420][T17383] vivid-002: RDS Radio Text: inactive [ 1332.930432][T17383] vivid-002: RDS Traffic Announcement: false inactive [ 1332.944196][T17383] vivid-002: RDS Traffic Program: false inactive [ 1332.958765][T17383] vivid-002: RDS Music: false inactive [ 1332.975707][T17383] vivid-002: ================== END STATUS ================== [ 1334.599530][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.608244][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.632633][T17249] bridge_slave_0: entered allmulticast mode [ 1334.673520][T17249] bridge_slave_0: entered promiscuous mode [ 1334.757818][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.807962][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 1334.817619][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.837818][T17249] bridge_slave_1: entered allmulticast mode [ 1334.891514][T17249] bridge_slave_1: entered promiscuous mode [ 1334.893689][T17409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.923306][T17409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.114441][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.175622][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.321779][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2989'. [ 1335.349419][T17414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1335.358330][T17414] overlayfs: missing 'lowerdir' [ 1335.394665][T17249] team0: Port device team_slave_0 added [ 1335.422655][T17249] team0: Port device team_slave_1 added [ 1335.689849][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.696825][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.722798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.089074][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.122382][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.134526][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.626522][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.857017][T17249] hsr_slave_0: entered promiscuous mode [ 1336.880593][T17249] hsr_slave_1: entered promiscuous mode [ 1337.001533][T17249] debugfs: 'hsr0' already exists in 'hsr' [ 1337.007650][T17249] Cannot create hsr debugfs directory [ 1337.176706][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2994'. [ 1337.844531][T17439] bond0: entered promiscuous mode [ 1337.849746][T17439] bond_slave_0: entered promiscuous mode [ 1337.855617][T17439] bond_slave_1: entered promiscuous mode [ 1337.866252][T17439] bond0: left promiscuous mode [ 1337.871827][T17439] bond_slave_0: left promiscuous mode [ 1337.879718][T17439] bond_slave_1: left promiscuous mode [ 1338.151148][T17449] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1338.157720][T17449] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1338.165319][T17449] vhci_hcd vhci_hcd.0: Device attached [ 1338.438059][T15137] vhci_hcd: vhci_device speed not set [ 1338.589187][T15137] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1338.790906][T17451] vhci_hcd: connection closed [ 1338.797937][ T12] vhci_hcd: stop threads [ 1338.809613][ T12] vhci_hcd: release socket [ 1338.814133][ T12] vhci_hcd: disconnect device [ 1338.912891][T17456] tipc: Enabled bearer , priority 0 [ 1339.018099][ T7592] hsr_slave_0: left promiscuous mode [ 1339.029426][ T7592] hsr_slave_1: left promiscuous mode [ 1339.046179][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.063853][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.074036][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.090431][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.133862][ T7592] veth1_macvtap: left promiscuous mode [ 1339.145075][ T7592] veth0_macvtap: left promiscuous mode [ 1339.158435][ T7592] veth1_vlan: left promiscuous mode [ 1339.178340][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 1340.165206][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 1340.224386][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 1340.828248][T17480] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1340.837716][T17480] bcachefs (/dev/loop1): error reading default superblock: IO error: -5 [ 1340.846072][T17480] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1340.855499][T17480] bcachefs (/dev/loop1): error reading superblock: IO error: -5 [ 1340.863239][T17480] bcachefs: bch2_fs_get_tree() error: EIO [ 1341.069871][T17457] syzkaller0: MTU too low for tipc bearer [ 1341.077552][T17457] tipc: Disabling bearer [ 1341.374951][T17486] iso9660: Unknown parameter '>N&#z8Z}5trnCogBRFcBڕݝ"jxn' [ 1341.905316][T17487] siw: device registration error -23 [ 1342.454225][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1342.839411][T17503] syz.3.3009 (17503): drop_caches: 2 [ 1343.819908][ T7592] IPVS: stop unused estimator thread 0... [ 1344.601157][T15137] vhci_hcd: vhci_device speed not set [ 1345.219159][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1346.553262][T17535] syz.1.3016 (17535): drop_caches: 2 [ 1347.155489][T17542] tipc: Enabled bearer , priority 0 [ 1347.188521][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 1347.212002][T17249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1347.296790][T17249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1347.596982][T17552] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1347.604772][T17552] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1347.613054][T17552] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1347.620913][T17552] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1347.685288][T17249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1347.703020][T17555] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1347.736057][T17555] FAT-fs (loop1): unable to read boot sector [ 1347.764766][T17543] syzkaller0: MTU too low for tipc bearer [ 1347.777790][T17543] tipc: Disabling bearer [ 1347.796564][T17249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1348.816058][T17249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.891066][T17249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.940616][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.947841][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.979684][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.986923][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.261699][T17594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1349.320853][T17594] bond0: entered promiscuous mode [ 1349.350476][T17594] bond_slave_0: entered promiscuous mode [ 1349.372181][T17594] bond_slave_1: entered promiscuous mode [ 1349.413755][T17594] bond0: left promiscuous mode [ 1350.753554][T17594] bond_slave_0: left promiscuous mode [ 1350.774423][T17594] bond_slave_1: left promiscuous mode [ 1351.735995][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.674028][T17622] vfat: Unknown parameter ' ttr/current' [ 1352.862857][T17630] NILFS (loop3): device size too small [ 1353.081951][T17636] vfat: Unknown parameter ' ttr/current' [ 1353.977559][T17645] tipc: Enabled bearer , priority 0 [ 1354.025367][T17249] veth0_vlan: entered promiscuous mode [ 1354.142830][T17249] veth1_vlan: entered promiscuous mode [ 1354.161546][T17653] syzkaller0: MTU too low for tipc bearer [ 1354.167281][T17653] tipc: Disabling bearer [ 1354.227955][T17639] IPVS: Error connecting to the multicast addr [ 1354.316782][T17249] veth0_macvtap: entered promiscuous mode [ 1354.412662][T17249] veth1_macvtap: entered promiscuous mode [ 1355.686327][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.886859][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.981322][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.997360][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.059760][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.093011][T17677] NILFS (loop3): device size too small [ 1356.099266][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.100792][T17674] NILFS (loop0): device size too small [ 1356.569628][T17683] overlayfs: failed to clone upperpath [ 1357.065424][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.080451][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.447977][T11116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.518210][T11116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.582415][T17685] vfat: Unknown parameter ' ttr/current' [ 1357.787256][T17694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1357.797545][T17694] overlayfs: missing 'lowerdir' [ 1359.658147][T17712] NILFS (loop1): device size too small [ 1360.029752][T17707] NILFS (loop4): device size too small [ 1360.626217][T17720] vfat: Unknown parameter ' ttr/current' [ 1361.649767][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.656584][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.809344][T17726] tipc: Started in network mode [ 1361.814261][T17726] tipc: Node identity 7286f40354b6, cluster identity 4711 [ 1361.868872][T17726] tipc: Enabled bearer , priority 0 [ 1361.876223][T14255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1361.886979][T14255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1361.896811][T14255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1361.905702][T14255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1361.916471][T14255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1362.173447][T17733] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1362.182995][T17733] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 1362.191389][T17733] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1362.200835][T17733] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 1362.208591][T17733] bcachefs: bch2_fs_get_tree() error: EIO [ 1362.352124][T17741] syzkaller0: MTU too low for tipc bearer [ 1362.358235][T17741] tipc: Disabling bearer [ 1362.391040][ T9] usb 1-1: USB disconnect, device number 16 [ 1362.402672][ T9] ldusb 1-1:0.55: LD USB Device #2 now disconnected [ 1362.602832][T17744] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1362.609358][T17744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1362.617619][T17744] vhci_hcd vhci_hcd.0: Device attached [ 1362.807996][ T10] vhci_hcd: vhci_device speed not set [ 1362.880921][ T10] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 1363.251649][T17748] vhci_hcd: connection reset by peer [ 1363.291403][T15137] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1363.684065][ T6018] vhci_hcd: stop threads [ 1363.694469][ T6018] vhci_hcd: release socket [ 1363.704297][ T6018] vhci_hcd: disconnect device [ 1363.987563][T15137] usb 2-1: Using ep0 maxpacket: 16 [ 1364.010511][T17731] chnl_net:caif_netlink_parms(): no params data found [ 1364.017811][T10169] Bluetooth: hci2: command tx timeout [ 1364.473196][T15137] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1364.487034][T15137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.930805][T15137] usb 2-1: Product: syz [ 1364.960363][T15137] usb 2-1: Manufacturer: syz [ 1364.965088][T15137] usb 2-1: SerialNumber: syz [ 1364.973624][ T1150] bridge_slave_1: left promiscuous mode [ 1364.976147][T15137] usb 2-1: config 0 descriptor?? [ 1364.994815][T15137] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1365.010701][T15137] usb 2-1: Detected FT-X [ 1365.036664][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.080761][ T1150] bridge_slave_0: left promiscuous mode [ 1365.107208][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.267810][T10169] Bluetooth: hci2: command tx timeout [ 1368.164650][T15137] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1368.165765][ T10] vhci_hcd: vhci_device speed not set [ 1368.189045][T15137] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1368.212328][T15137] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1368.397557][T10169] Bluetooth: hci2: command tx timeout [ 1368.747854][T14688] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1368.778258][T15137] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1368.829119][T15137] usb 2-1: USB disconnect, device number 12 [ 1368.861739][T15137] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1368.898138][T15137] ftdi_sio 2-1:0.0: device disconnected [ 1368.950988][T14688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.997747][T14688] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1369.023127][T14688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.065950][T14688] usb 5-1: config 0 descriptor?? [ 1369.497956][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.509692][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.342433][T14688] cmedia_hs100b 0003:0D8C:0014.000B: ignoring exceeding usage max [ 1370.359567][ T1150] bond0 (unregistering): Released all slaves [ 1370.398942][T14688] cmedia_hs100b 0003:0D8C:0014.000B: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.4-1/input0 [ 1370.417570][T10169] Bluetooth: hci2: command tx timeout [ 1370.555413][ T5923] usb 5-1: USB disconnect, device number 12 [ 1370.629297][T17814] tipc: Enabling of bearer rejected, failed to enable media [ 1370.700388][ T1150] tipc: Left network mode [ 1371.088734][T17834] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 1371.192226][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.251895][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.622692][T17731] bridge_slave_0: entered allmulticast mode [ 1371.630590][T17731] bridge_slave_0: entered promiscuous mode [ 1371.670038][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.678782][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.697167][T17731] bridge_slave_1: entered allmulticast mode [ 1371.715240][T17731] bridge_slave_1: entered promiscuous mode [ 1371.906850][T17847] vivid-002: ================= START STATUS ================= [ 1371.922493][T17847] vivid-002: Radio HW Seek Mode: Bounded [ 1371.931621][T17847] vivid-002: Radio Programmable HW Seek: false [ 1371.952091][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.956905][T17847] vivid-002: RDS Rx I/O Mode: Block I/O [ 1371.978303][T17847] vivid-002: Generate RBDS Instead of RDS: false [ 1371.985275][T17847] vivid-002: RDS Reception: true [ 1371.991696][T17847] vivid-002: RDS Program Type: 0 inactive [ 1372.000201][T17847] vivid-002: RDS PS Name: inactive [ 1372.002814][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.016490][T17847] vivid-002: RDS Radio Text: inactive [ 1372.025275][T17847] vivid-002: RDS Traffic Announcement: false inactive [ 1372.034824][T17847] vivid-002: RDS Traffic Program: false inactive [ 1372.042090][T17847] vivid-002: RDS Music: false inactive [ 1372.051077][T17847] vivid-002: ================== END STATUS ================== [ 1372.248322][ T1150] hsr_slave_0: left promiscuous mode [ 1372.264432][ T1150] hsr_slave_1: left promiscuous mode [ 1372.287893][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.314222][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.437535][T14688] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1372.627757][T14688] usb 4-1: Using ep0 maxpacket: 16 [ 1372.636537][T14688] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1372.648646][T14688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.657082][T14688] usb 4-1: Product: syz [ 1372.763124][T14688] usb 4-1: Manufacturer: syz [ 1372.773204][T14688] usb 4-1: SerialNumber: syz [ 1372.849881][T14688] usb 4-1: config 0 descriptor?? [ 1372.903435][T14688] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1372.920337][T14688] usb 4-1: Detected FT-X [ 1374.197121][T17876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.230365][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.162353][T17869] ------------[ cut here ]------------ [ 1375.168202][T17869] WARNING: kernel/vhost_task.c:97 at __vhost_task_wake+0xbb/0xd0, CPU#1: syz.3.3070/17869 [ 1375.178959][T17869] Modules linked in: [ 1375.183016][T17869] CPU: 1 UID: 0 PID: 17869 Comm: syz.3.3070 Not tainted syzkaller #0 PREEMPT(full) [ 1375.192399][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1375.202491][T17869] RIP: 0010:__vhost_task_wake+0xbb/0xd0 [ 1375.208089][T17869] Code: 38 00 74 08 48 89 df e8 03 8b 95 00 48 8b 3b 5b 41 5e 41 5f e9 a6 45 01 00 e8 81 f0 30 00 90 0f 0b 90 eb 8b e8 76 f0 30 00 90 <0f> 0b 90 5b 41 5e 41 5f e9 18 17 f8 09 cc 0f 1f 80 00 00 00 00 90 [ 1375.227796][T17869] RSP: 0018:ffffc900047bf680 EFLAGS: 00010293 [ 1375.233850][T17869] RAX: ffffffff818eed7a RBX: ffff888056921000 RCX: ffff88802fae8000 [ 1375.241828][T17869] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 1375.249868][T17869] RBP: ffffc900047bf750 R08: ffff888056921077 R09: 1ffff1100ad2420e [ 1375.257856][T17869] R10: dffffc0000000000 R11: ffffed100ad2420f R12: 1ffff920008f7ed8 [ 1375.265828][T17869] R13: dffffc0000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 1375.274650][T17869] FS: 0000000000000000(0000) GS:ffff888125add000(0000) knlGS:0000000000000000 [ 1375.283618][T17869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1375.290230][T17869] CR2: 0000200000002200 CR3: 000000007822e000 CR4: 00000000003526f0 [ 1375.298274][T17869] Call Trace: [ 1375.301544][T17869] [ 1375.304465][T17869] vhost_worker_queue+0x194/0x260 [ 1375.309509][T17869] ? __pfx_vhost_worker_queue+0x10/0x10 [ 1375.315039][T17869] ? __init_swait_queue_head+0xa9/0x150 [ 1375.320599][T17869] __vhost_worker_flush+0x134/0x1e0 [ 1375.325777][T17869] ? __pfx___vhost_worker_flush+0x10/0x10 [ 1375.331512][T17869] ? __pfx_vhost_flush_work+0x10/0x10 [ 1375.336867][T17869] ? xa_find+0x25b/0x2b0 [ 1375.341110][T17869] ? xa_find+0x8c/0x2b0 [ 1375.345253][T17869] vhost_dev_flush+0xb2/0x130 [ 1375.349977][T17869] ? __pfx_vhost_dev_flush+0x10/0x10 [ 1375.355247][T17869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1375.360626][T17869] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1375.366327][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.372322][T17869] ? do_raw_spin_unlock+0x122/0x240 [ 1375.378294][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.384260][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.390264][T17869] vhost_vsock_dev_release+0x1fb/0x3f0 [ 1375.395707][T17869] ? evm_file_release+0x108/0x1e0 [ 1375.400731][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.406689][T17869] __fput+0x44c/0xa70 [ 1375.410713][T17869] task_work_run+0x1d4/0x260 [ 1375.415313][T17869] ? __pfx_task_work_run+0x10/0x10 [ 1375.420433][T17869] do_exit+0x6b5/0x2300 [ 1375.424601][T17869] ? do_raw_spin_lock+0x121/0x290 [ 1375.429642][T17869] ? __pfx_do_exit+0x10/0x10 [ 1375.434230][T17869] do_group_exit+0x21c/0x2d0 [ 1375.438850][T17869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1375.444038][T17869] get_signal+0x1285/0x1340 [ 1375.448620][T17869] arch_do_signal_or_restart+0xa0/0x790 [ 1375.454183][T17869] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1375.460342][T17869] ? __se_sys_futex+0x36f/0x400 [ 1375.465182][T17869] ? exit_to_user_mode_loop+0x40/0x130 [ 1375.470682][T17869] exit_to_user_mode_loop+0x72/0x130 [ 1375.475970][T17869] do_syscall_64+0x2bd/0xfa0 [ 1375.481335][T17869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1375.486524][T17869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.492633][T17869] ? clear_bhb_loop+0x60/0xb0 [ 1375.497300][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.503220][T17869] RIP: 0033:0x7efe4898eba9 [ 1375.507666][T17869] Code: Unable to access opcode bytes at 0x7efe4898eb7f. [ 1375.514678][T17869] RSP: 002b:00007efe46bd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1375.523115][T17869] RAX: fffffffffffffe00 RBX: 00007efe48bd6188 RCX: 00007efe4898eba9 [ 1375.531171][T17869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe48bd6188 [ 1375.539246][T17869] RBP: 00007efe48bd6180 R08: 0000000000000000 R09: 0000000000000000 [ 1375.547196][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.555207][T17869] R13: 00007efe48bd6218 R14: 00007ffcef0f5da0 R15: 00007ffcef0f5e88 [ 1375.563193][T17869] [ 1375.566203][T17869] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1375.573480][T17869] CPU: 1 UID: 0 PID: 17869 Comm: syz.3.3070 Not tainted syzkaller #0 PREEMPT(full) [ 1375.582827][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1375.592868][T17869] Call Trace: [ 1375.596134][T17869] [ 1375.599051][T17869] dump_stack_lvl+0x99/0x250 [ 1375.603627][T17869] ? __asan_memcpy+0x40/0x70 [ 1375.608202][T17869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1375.613392][T17869] ? __pfx__printk+0x10/0x10 [ 1375.617988][T17869] vpanic+0x237/0x6d0 [ 1375.621951][T17869] ? __pfx_vpanic+0x10/0x10 [ 1375.626429][T17869] ? is_bpf_text_address+0x292/0x2b0 [ 1375.631696][T17869] ? is_bpf_text_address+0x26/0x2b0 [ 1375.636877][T17869] panic+0xb9/0xc0 [ 1375.640577][T17869] ? __pfx_panic+0x10/0x10 [ 1375.644993][T17869] __warn+0x334/0x4c0 [ 1375.648956][T17869] ? __vhost_task_wake+0xbb/0xd0 [ 1375.653872][T17869] ? __vhost_task_wake+0xbb/0xd0 [ 1375.658783][T17869] report_bug+0x2be/0x4f0 [ 1375.663100][T17869] ? __vhost_task_wake+0xbb/0xd0 [ 1375.668016][T17869] ? __vhost_task_wake+0xbb/0xd0 [ 1375.672947][T17869] ? __vhost_task_wake+0xbd/0xd0 [ 1375.677881][T17869] handle_bug+0x84/0x160 [ 1375.682114][T17869] exc_invalid_op+0x1a/0x50 [ 1375.686597][T17869] asm_exc_invalid_op+0x1a/0x20 [ 1375.691446][T17869] RIP: 0010:__vhost_task_wake+0xbb/0xd0 [ 1375.696992][T17869] Code: 38 00 74 08 48 89 df e8 03 8b 95 00 48 8b 3b 5b 41 5e 41 5f e9 a6 45 01 00 e8 81 f0 30 00 90 0f 0b 90 eb 8b e8 76 f0 30 00 90 <0f> 0b 90 5b 41 5e 41 5f e9 18 17 f8 09 cc 0f 1f 80 00 00 00 00 90 [ 1375.716606][T17869] RSP: 0018:ffffc900047bf680 EFLAGS: 00010293 [ 1375.722656][T17869] RAX: ffffffff818eed7a RBX: ffff888056921000 RCX: ffff88802fae8000 [ 1375.730615][T17869] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 1375.738582][T17869] RBP: ffffc900047bf750 R08: ffff888056921077 R09: 1ffff1100ad2420e [ 1375.746534][T17869] R10: dffffc0000000000 R11: ffffed100ad2420f R12: 1ffff920008f7ed8 [ 1375.754510][T17869] R13: dffffc0000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 1375.762484][T17869] ? __vhost_task_wake+0xba/0xd0 [ 1375.767418][T17869] vhost_worker_queue+0x194/0x260 [ 1375.772439][T17869] ? __pfx_vhost_worker_queue+0x10/0x10 [ 1375.778001][T17869] ? __init_swait_queue_head+0xa9/0x150 [ 1375.783548][T17869] __vhost_worker_flush+0x134/0x1e0 [ 1375.788727][T17869] ? __pfx___vhost_worker_flush+0x10/0x10 [ 1375.794450][T17869] ? __pfx_vhost_flush_work+0x10/0x10 [ 1375.799827][T17869] ? xa_find+0x25b/0x2b0 [ 1375.804064][T17869] ? xa_find+0x8c/0x2b0 [ 1375.808206][T17869] vhost_dev_flush+0xb2/0x130 [ 1375.812868][T17869] ? __pfx_vhost_dev_flush+0x10/0x10 [ 1375.818144][T17869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1375.823503][T17869] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1375.829203][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.835162][T17869] ? do_raw_spin_unlock+0x122/0x240 [ 1375.840339][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.846385][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.852343][T17869] vhost_vsock_dev_release+0x1fb/0x3f0 [ 1375.857782][T17869] ? evm_file_release+0x108/0x1e0 [ 1375.862782][T17869] ? __pfx_vhost_vsock_dev_release+0x10/0x10 [ 1375.868739][T17869] __fput+0x44c/0xa70 [ 1375.872708][T17869] task_work_run+0x1d4/0x260 [ 1375.877302][T17869] ? __pfx_task_work_run+0x10/0x10 [ 1375.882404][T17869] do_exit+0x6b5/0x2300 [ 1375.886555][T17869] ? do_raw_spin_lock+0x121/0x290 [ 1375.891569][T17869] ? __pfx_do_exit+0x10/0x10 [ 1375.896150][T17869] do_group_exit+0x21c/0x2d0 [ 1375.900719][T17869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1375.905898][T17869] get_signal+0x1285/0x1340 [ 1375.910391][T17869] arch_do_signal_or_restart+0xa0/0x790 [ 1375.915920][T17869] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1375.922068][T17869] ? __se_sys_futex+0x36f/0x400 [ 1375.926902][T17869] ? exit_to_user_mode_loop+0x40/0x130 [ 1375.932363][T17869] exit_to_user_mode_loop+0x72/0x130 [ 1375.937627][T17869] do_syscall_64+0x2bd/0xfa0 [ 1375.942205][T17869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1375.947378][T17869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.953431][T17869] ? clear_bhb_loop+0x60/0xb0 [ 1375.958086][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.963955][T17869] RIP: 0033:0x7efe4898eba9 [ 1375.968346][T17869] Code: Unable to access opcode bytes at 0x7efe4898eb7f. [ 1375.975348][T17869] RSP: 002b:00007efe46bd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1375.983737][T17869] RAX: fffffffffffffe00 RBX: 00007efe48bd6188 RCX: 00007efe4898eba9 [ 1375.991692][T17869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe48bd6188 [ 1375.999647][T17869] RBP: 00007efe48bd6180 R08: 0000000000000000 R09: 0000000000000000 [ 1376.007601][T17869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.015559][T17869] R13: 00007efe48bd6218 R14: 00007ffcef0f5da0 R15: 00007ffcef0f5e88 [ 1376.023526][T17869] [ 1376.026800][T17869] Kernel Offset: disabled [ 1376.031111][T17869] Rebooting in 86400 seconds..