last executing test programs: 12m16.660224936s ago: executing program 3 (id=337): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002fc0), 0x1, 0x0) write(r0, &(0x7f0000003000)='\n', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffd}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 12m16.425831278s ago: executing program 3 (id=338): r0 = socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x20020000) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) bind$inet6(r0, 0x0, 0x0) 12m15.24877686s ago: executing program 3 (id=340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f600"/35], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044) 12m15.088886176s ago: executing program 3 (id=341): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000300)={{0x77ded23f, 0x5, 0x0, 0xfffffffd, '\x00', 0x7}, 0x3, 0x0, 0x20, 0x0, 0x0, 0x80080000, 'syz0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)={0x1c, 0x16, 0xa01, 0x1, 0x0, {0x8}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 12m13.776693561s ago: executing program 3 (id=343): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 12m10.906690575s ago: executing program 3 (id=347): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12m10.516461423s ago: executing program 32 (id=347): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10m52.281483888s ago: executing program 4 (id=485): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="e000bae61f00aecf8f8f35bc0000", @ANYBLOB="02"], 0xe0}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000010) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x1}}, 0x4c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10m52.012574935s ago: executing program 4 (id=486): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8050, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="1982715f049a64c709c11c0339a37dab5521c27cf1bf05234733c6a45454e349d787abc1642dff6c12ee1b15d1334d4680a659d864c8c4b3978400000000", @ANYRESDEC, @ANYRESHEX, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYBLOB="9249ba2d3c06392ea7d64e6b0c6406c864a21682fe8ee73289ebb97f9310ddc9afc415df56c3"], 0xfc, 0x32b, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000180)=0xff, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0x62242, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r4, 0x40000) dup3(r5, r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0) 10m50.48601782s ago: executing program 4 (id=493): unshare(0x22020480) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 10m50.292019308s ago: executing program 4 (id=494): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='.\x02\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x14f5, &(0x7f0000001580)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000880)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x6, 0x0, 0x0, 0xa, 0xf, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac6390b86fa00000000004faa2ae2c084a0ea000000000000008000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) 10m49.383861746s ago: executing program 4 (id=499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x44, r1, 0x1, 0xffdffffd, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 10m47.643104592s ago: executing program 4 (id=503): socket(0x10, 0x80002, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002fc0), 0x1, 0x0) write(r0, &(0x7f0000003000)='\n', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 10m46.884798544s ago: executing program 33 (id=503): socket(0x10, 0x80002, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002fc0), 0x1, 0x0) write(r0, &(0x7f0000003000)='\n', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 10m30.514780989s ago: executing program 0 (id=544): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0x3, 0x2, "3258ae1e00307c55908000e2ff000000000000ff07000000001e0000002000", 0x4c47504a}) 10m30.176673351s ago: executing program 0 (id=545): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/34) 10m30.099151338s ago: executing program 0 (id=546): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r0, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) 10m29.210736773s ago: executing program 0 (id=548): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2004082, &(0x7f0000000240)={[{@type={'type', 0x3d, "699a1c87"}}, {@gid}, {@umask={'umask', 0x3d, 0x11}}, {@uid}, {@force}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@nobarrier}, {@barrier}, {@nodecompose}]}, 0x47, 0x6f7, &(0x7f00000010c0)="$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") mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0) 10m28.921426831s ago: executing program 0 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 10m28.309851009s ago: executing program 0 (id=552): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) 10m27.550763021s ago: executing program 34 (id=552): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) 1m8.172039877s ago: executing program 6 (id=1650): shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0x10, 0xf2, 0x10, 0xb95, 0x772a, 0x8273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x2, 0x89, 0x53, 0x95, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0xf, 0x6, "0352fd44cf26"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x83, 0x2, 'W5'}, 0x0, 0x0}) 1m4.872676871s ago: executing program 6 (id=1655): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000940)="0a38994d85bc23166db54c0e908b601ba20028f0d27296cc76a5838a41758f0f641e1213b2fd7c5c76b286367c36f7fa26edd190042b9ccf12d08fe41939d82a87f3b96829c2a17ec2bff4f5a826c2bdd0b56e76bbb1be3d04ace6a32cc23138d57706b5054a2434639aa0c35a56706c07317447b8b31a9fd5ab37b2f36a9b3d335a4ba7e24758f962361e9859b61d3f4c6f00e68f0b3aa6cfac84acd9722d636e1ddf40e8715afe3d5f77e46ba15b2ed2fa5d7af5b70cd8779141b672768925cde8a76c0898ef7b0b990c0f275d63729b2d38a7990b0bc6cb0d3e8c683172993b6e542661bce1ae097e95571ddbeda157e10c1b02294208fd45f3a8c079e3b08330fd642754767917969b8b05be9fd0aa9833f8308f8f327970c6ee699cea0ac50b824fc135a68b83dca5b5fe9977e2244a915c38eaf443357958a66dea7757a7697a18d6dd664e4e31e3de1101c3155acfe794926ce6c688a3b064b56610528d5f11e356e0b274f5fe445d71274dee22321cebf3fc8e3c5cc0ed044610b546a2b5bda4eebca175c30961c7f1de9e1d909586b5ce2d5ed30566bf7f401dfc0eff4a81684add29de81aa299f15a830d53039153be4d8b4c223f083b78d2527b39b22de121a320b2ee478bb5d4157190513c14cc1b53c8b0d1990b78e8662e9b9cc3859ed711e90e30bda1403a20627571fbcf1448e6792b2b12af664d407d100114f00ece250c4fcb9f2785b5993ae6e6a73e4d77b9f9417732f83c3ad7f9fa26838339f76a008520039e6b6b6d67118505d2ffc00aeea4b5c55f42a2010271e807f863e77570953962f576a471695d63f861c7e98329518c33bfd798e6b2ccd4ef31c6c50b582537bd5b241ef1582b352b650e355edad2919798885d20037b20d3445cfe86f5804eee2f6693b3d0adb347446c2d08b8bb34552ee7a01c908261049feaf776fab2192f95b68a602dacdc46ec03d19091b2d8a684d566147e0054d37ef1b85080c185dc3b4de0dfd912ee5106996c634d2e0d91b2baec7dc944c5f5f692e090d36ee4437291144a4a13528cd1fe8f8acc45f908f86ee75cf699574fffdd9b5e965cf11290f62053036a3fb6ecaf5a4ef283b8dfba8ebd2e3b87b5611dfed706b1ba0b07f3fab2110f23bcfa0dfccaa8266d45f3fc54fe82970ad87a58390b9e15cf3caf2ac11050eb17fff8d9a8967ba60069889d818e32ac619063dea44d20eabadae5fc602382e3bd66681eb4dfce0e8fcc441c31bdeda2047bed5051219fc793006bf2e871f4ae35bfd9e917eb9ddb38e7d47886454b295b245ae8c1ca037d9d9e42930ff7cc4df63f5f8de901c5d3533c4435d11cfb654682dd551171dcc7d102ccec5bf7eae3603386a23e217144468d94ac8faeec24434e4a2b5585267aa95ea3be31c8d65f925e2e614375c67e03b5403b7692e41b3a180aa356ac5218a4609ba2f9c96a5a59acf8a3ae1b26aab88c095e09c872ce3d1c5d981e428b01d0cb34858e942ebe8cc3da3d3942afc793530680dc50d0acabf73298d51ea3a6672ae744267550f80906978e912f74b930e1dc1568119d60ec3ceff797dd92bb619f911e532ac9198308cea1566e467261edd32237482d8d1a30e992061ed0532e935abf77af24ff371a4edd105c00348d686fae94f97476864db83dc09d5c33149bed5b1d07bea89d538612c254e354f9d15e2a2bf6aa8922e5612652e469fb1b10977854d27516aa71e7eb9a705cbf5978ab55498bfb56143387e390c527018334bcfb40338f99e78a92a6585e3dd1befe7d8b5e5e6968b0a6fe1958ba707887335b06c5d6c090f770f40e74f73e04e14af571190e377abf3d1bea5c0e9be82094c7573ee99185bc9e22f6f4719fa90f728def720c5d738472ba7d2dca260eabd6d5a7a5269af40f28d931186fdaf9af6023563b837bea5f48f66529ffb5d1ba5382d235bb14f7a093198f51d6c02664415a1fcb716640def426cd886d2ff07d69e1cde45847513a144ee66cbe454d99228fbfae0a363fc7a16287e8ae71df712c8320cee5d49c667f1750d44c436cacad396ee95fa41038f1323a6ff34f9", 0x5c6, r0) 1m4.763531462s ago: executing program 6 (id=1657): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 1m4.656614922s ago: executing program 5 (id=1658): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, &(0x7f0000000200)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1m2.998474299s ago: executing program 6 (id=1659): socket$inet(0x2, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 1m0.118034793s ago: executing program 5 (id=1662): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 58.550448672s ago: executing program 5 (id=1666): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 56.942341945s ago: executing program 6 (id=1668): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) process_mrelease(r1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f0000000340)=""/190, 0xbe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 55.076598093s ago: executing program 6 (id=1670): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x6, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x1, 0x820, 0x1, 0x106, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf2b, 0x20001e58, 0xfffffbff, 0x804, 0x3c, 0x8, 0x9, 0x410000, 0xfffffff8]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0x1a4, 0x8012, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x89110102, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000380)=""/246, 0xf6, 0x40000040, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a4}, &(0x7f0000000100), &(0x7f0000000140)) epoll_create1(0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x24842, 0x1a7) io_submit(0x0, 0x3, &(0x7f0000000280)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6477, r6, &(0x7f0000000840)='~', 0x1, 0x3, 0x0, 0x2}, 0x0, 0x0]) io_getevents(0x0, 0x3, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 51.439301188s ago: executing program 5 (id=1675): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000940)="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", 0x5cd, r0) 51.271661094s ago: executing program 5 (id=1676): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = dup(0xffffffffffffffff) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x2000, 0x0, 0x100c139, 0x4, 0x4, 0x5, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8104, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x8b, 0x6, 0x2, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) msync(&(0x7f0000063000/0x2000)=nil, 0x2000, 0x5) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f00000002c0)={{0x6, 0x6, 0x0, 0x10001, 'syz1\x00', 0x378}, 0x3, 0x10000000, 0x0, r3, 0x0, 0x80000000, 'syz1\x00', 0x0}) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 40.536579095s ago: executing program 1 (id=1678): openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 39.593908075s ago: executing program 35 (id=1670): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x6, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x1, 0x820, 0x1, 0x106, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf2b, 0x20001e58, 0xfffffbff, 0x804, 0x3c, 0x8, 0x9, 0x410000, 0xfffffff8]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = dup(0xffffffffffffffff) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x2000, 0x0, 0x100c139, 0x4, 0x4, 0x5, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8104, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x8b, 0x6, 0x2, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) msync(&(0x7f0000063000/0x2000)=nil, 0x2000, 0x5) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f00000002c0)={{0x6, 0x6, 0x0, 0x10001, 'syz1\x00', 0x378}, 0x3, 0x10000000, 0x0, r3, 0x0, 0x80000000, 'syz1\x00', 0x0}) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 29.537964861s ago: executing program 1 (id=1685): capset(&(0x7f0000000680)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000900)={0x18, r7, 0x1000, 0x1004000}) 28.554275835s ago: executing program 2 (id=1686): socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 26.1827006s ago: executing program 1 (id=1687): creat(0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.332578891s ago: executing program 2 (id=1688): socket$inet(0x2, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 20.515402009s ago: executing program 1 (id=1689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='mm_lru_activate\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 17.546518992s ago: executing program 2 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) 16.052786484s ago: executing program 2 (id=1691): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) 2.547212708s ago: executing program 37 (id=1689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='mm_lru_activate\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=1691): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) kernel console output (not intermixed with test programs): 02] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.715059][ T6802] bridge_slave_1: left allmulticast mode [ 289.721521][ T6802] bridge_slave_1: left promiscuous mode [ 289.738463][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.781507][ T6802] bridge_slave_0: left allmulticast mode [ 289.788075][ T6802] bridge_slave_0: left promiscuous mode [ 289.793939][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.890370][ T6802] veth1_macvtap: left promiscuous mode [ 289.896595][ T6802] veth0_macvtap: left promiscuous mode [ 289.928263][ T6802] veth1_vlan: left promiscuous mode [ 289.934013][ T6802] veth0_vlan: left promiscuous mode [ 290.043747][ T7137] loop2: detected capacity change from 0 to 512 [ 290.113247][ T7137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.206235][ T7137] EXT4-fs (loop2): 1 orphan inode deleted [ 290.219936][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 290.238945][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.119016][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.466274][ T7136] loop0: detected capacity change from 0 to 32768 [ 292.725875][ T7136] [ 292.725875][ T7136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.725875][ T7136] [ 292.885174][ T7136] [ 292.885174][ T7136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.885174][ T7136] [ 292.901587][ T7136] [ 292.901587][ T7136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.901587][ T7136] [ 292.941079][ T7136] [ 292.941079][ T7136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.941079][ T7136] [ 292.980967][ T28] audit: type=1800 audit(1766724600.231:7): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 293.025962][ T112] [ 293.025962][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.025962][ T112] [ 293.085620][ T5777] [ 293.085620][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.085620][ T5777] [ 293.116784][ T5777] [ 293.116784][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.116784][ T5777] [ 293.787663][ T6802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.540699][ T6802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.349557][ T6802] bond0 (unregistering): Released all slaves [ 299.636627][ T7178] loop0: detected capacity change from 0 to 128 [ 299.710103][ T7178] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.748330][ T7178] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.907327][ T7149] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 299.950613][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.957632][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.037947][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.060456][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.067479][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.173289][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.053006][ T7029] hsr_slave_0: entered promiscuous mode [ 302.069067][ T7029] hsr_slave_1: entered promiscuous mode [ 302.087968][ T7029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.095607][ T7029] Cannot create hsr debugfs directory [ 302.198352][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 302.235277][ T7178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.387'. [ 302.613689][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.636315][ T6802] IPVS: stop unused estimator thread 0... [ 302.861830][ T7193] netlink: 104 bytes leftover after parsing attributes in process `syz.0.390'. [ 302.939082][ T7029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.991868][ T7029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.061127][ T7029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.113839][ T7029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.364069][ T7201] loop1: detected capacity change from 0 to 4096 [ 303.410279][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.462553][ T7029] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.526422][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.533798][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.604102][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.611380][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.209590][ T7029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.260373][ T7237] loop0: detected capacity change from 0 to 64 [ 308.921885][ T7029] veth0_vlan: entered promiscuous mode [ 309.015365][ T7029] veth1_vlan: entered promiscuous mode [ 309.105030][ T7029] veth0_macvtap: entered promiscuous mode [ 309.116991][ T7029] veth1_macvtap: entered promiscuous mode [ 309.170775][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.186988][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.218079][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.237785][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.257751][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.287993][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.349305][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.381611][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.410381][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.127650][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.139379][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.149790][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.160982][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.191371][ T7029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.241495][ T7029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.284642][ T7029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.305985][ T7029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.327899][ T7029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.658337][ T6478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.915604][ T6478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.045653][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.079654][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.126672][ T7274] loop2: detected capacity change from 0 to 512 [ 313.225033][ T7274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.328331][ T7277] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 316.390132][ T7285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.404: bg 0: bad block bitmap checksum [ 316.408818][ T7285] Quota error (device loop2): write_blk: dquota write failed [ 316.417650][ T7285] Quota error (device loop2): qtree_write_dquot: Error -74 occurred while creating quota [ 316.428612][ T7285] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.404: Failed to acquire dquot type 1 [ 316.625685][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.924057][ T7295] loop2: detected capacity change from 0 to 256 [ 317.207070][ T7295] FAT-fs (loop2): Directory bread(block 64) failed [ 317.242594][ T7295] FAT-fs (loop2): Directory bread(block 65) failed [ 317.251500][ T7295] FAT-fs (loop2): Directory bread(block 66) failed [ 317.278048][ T7295] FAT-fs (loop2): Directory bread(block 67) failed [ 317.284794][ T7295] FAT-fs (loop2): Directory bread(block 68) failed [ 317.296763][ T7295] FAT-fs (loop2): Directory bread(block 69) failed [ 317.318054][ T7295] FAT-fs (loop2): Directory bread(block 70) failed [ 317.325026][ T7295] FAT-fs (loop2): Directory bread(block 71) failed [ 317.362611][ T7295] FAT-fs (loop2): Directory bread(block 72) failed [ 317.384587][ T7295] FAT-fs (loop2): Directory bread(block 73) failed [ 317.554690][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.562046][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.841926][ T7374] netlink: 84 bytes leftover after parsing attributes in process `syz.2.419'. [ 324.529814][ T7374] nbd: socks must be embedded in a SOCK_ITEM attr [ 330.624446][ T7428] loop1: detected capacity change from 0 to 2048 [ 330.769205][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.856955][ T7434] loop2: detected capacity change from 0 to 2048 [ 330.928369][ T7434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.227088][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.970616][ T7469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'. [ 336.008867][ T7469] (unnamed net_device) (uninitialized): option ad_select: invalid value (101) [ 336.591114][ T7477] loop2: detected capacity change from 0 to 128 [ 336.813806][ T7479] loop0: detected capacity change from 0 to 1024 [ 337.459798][ T7488] loop4: detected capacity change from 0 to 2048 [ 337.478672][ T7488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.756951][ T7498] mmap: syz.1.444 (7498) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 340.694237][ T59] hfsplus: b-tree write err: -5, ino 4 [ 342.893427][ T7538] loop1: detected capacity change from 0 to 164 [ 342.968514][ T7538] Unable to read rock-ridge attributes [ 343.026851][ T7538] Unable to read rock-ridge attributes [ 344.431510][ T7548] loop4: detected capacity change from 0 to 512 [ 344.465499][ T7548] EXT4-fs: Ignoring removed oldalloc option [ 344.555645][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.129251][ T7029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.299077][ T7576] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 350.742114][ T7606] loop1: detected capacity change from 0 to 512 [ 350.819330][ T7606] EXT4-fs (loop1): Test dummy encryption mode enabled [ 350.865916][ T7606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 350.898812][ T7606] System zones: 1-12 [ 350.921678][ T7606] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.470: Directory hole found for htree index block 0 [ 350.968654][ T7606] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 350.976995][ T7606] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.470: Directory hole found for htree index block 0 [ 351.059104][ T7606] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 351.095466][ T7606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.161103][ T7606] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 351.302327][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.922940][ T7631] loop0: detected capacity change from 0 to 256 [ 353.083554][ T7644] loop0: detected capacity change from 0 to 256 [ 353.223036][ T7644] FAT-fs (loop0): Directory bread(block 64) failed [ 353.250414][ T7644] FAT-fs (loop0): Directory bread(block 65) failed [ 353.272342][ T7644] FAT-fs (loop0): Directory bread(block 66) failed [ 353.297358][ T7644] FAT-fs (loop0): Directory bread(block 67) failed [ 353.325337][ T7644] FAT-fs (loop0): Directory bread(block 68) failed [ 353.348397][ T7644] FAT-fs (loop0): Directory bread(block 69) failed [ 353.370707][ T7644] FAT-fs (loop0): Directory bread(block 70) failed [ 353.386826][ T7644] FAT-fs (loop0): Directory bread(block 71) failed [ 353.400306][ T7644] FAT-fs (loop0): Directory bread(block 72) failed [ 353.407002][ T7644] FAT-fs (loop0): Directory bread(block 73) failed [ 354.866866][ T7664] loop1: detected capacity change from 0 to 2048 [ 354.930170][ T7664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.724874][ T7679] loop4: detected capacity change from 0 to 128 [ 356.036836][ T7676] Process accounting resumed [ 357.123485][ T7716] loop4: detected capacity change from 0 to 256 [ 357.181304][ T7716] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 357.327813][ T7716] loop4: detected capacity change from 256 to 0 [ 357.334320][ T7720] syz.4.494: attempt to access beyond end of device [ 357.334320][ T7720] loop4: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 357.425859][ T7720] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 357.822498][ T7029] syz-executor: attempt to access beyond end of device [ 357.822498][ T7029] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 357.849617][ T7029] syz-executor: attempt to access beyond end of device [ 357.849617][ T7029] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 357.908461][ T7029] syz-executor: attempt to access beyond end of device [ 357.908461][ T7029] loop4: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 357.967354][ T7029] syz-executor: attempt to access beyond end of device [ 357.967354][ T7029] loop4: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 358.027924][ T7029] syz-executor: attempt to access beyond end of device [ 358.027924][ T7029] loop4: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 358.077942][ T7029] syz-executor: attempt to access beyond end of device [ 358.077942][ T7029] loop4: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 358.116412][ T7029] syz-executor: attempt to access beyond end of device [ 358.116412][ T7029] loop4: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 358.214518][ T7029] syz-executor: attempt to access beyond end of device [ 358.214518][ T7029] loop4: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 358.251552][ T7029] syz-executor: attempt to access beyond end of device [ 358.251552][ T7029] loop4: rw=0, sector=160, nr_sectors = 1 limit=0 [ 359.563544][ T7748] loop2: detected capacity change from 0 to 164 [ 359.894224][ T6479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.144672][ T6479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.280624][ T6479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.473676][ T6479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.807789][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 361.038115][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 361.045753][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.109514][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.147725][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.203757][ T9] usb 1-1: config 0 descriptor?? [ 361.383299][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.400970][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.414217][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.428179][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.440204][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 361.448287][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.488914][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 361.968765][ T23] usb 1-1: USB disconnect, device number 6 [ 362.155948][ T7797] loop1: detected capacity change from 0 to 1024 [ 362.703382][ T7804] loop2: detected capacity change from 0 to 512 [ 363.342731][ T7804] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.418465][ T7804] EXT4-fs (loop2): 1 truncate cleaned up [ 363.425089][ T7804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.513177][ T7797] hfsplus: unable to mark blocks free: error -4 [ 363.612376][ T7797] hfsplus: can't free extent [ 363.624167][ T5770] Bluetooth: hci2: command tx timeout [ 363.699805][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.948051][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 364.147884][ T5756] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 364.181618][ T786] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 364.199974][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.214192][ T786] usb 1-1: Product: syz [ 364.228051][ T786] usb 1-1: Manufacturer: syz [ 364.235014][ T786] usb 1-1: SerialNumber: syz [ 364.257180][ T786] usb 1-1: config 0 descriptor?? [ 364.291534][ T786] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 364.314408][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.328328][ T786] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 364.345071][ T786] usb 1-1: media controller created [ 364.348297][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 364.374404][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.391330][ T5756] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 364.423964][ T5756] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 364.433523][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 364.445598][ T5756] usb 3-1: Product: syz [ 364.457536][ T5756] usb 3-1: Manufacturer: syz [ 364.462734][ T5756] usb 3-1: SerialNumber: syz [ 364.493631][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 364.494599][ T5756] usb 3-1: config 0 descriptor?? [ 364.523674][ T7816] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 364.539227][ T7812] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 364.616150][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'. [ 364.642721][ T786] DVB: Unable to find symbol mt352_attach() [ 364.677287][ T6479] hsr_slave_0: left promiscuous mode [ 364.689375][ T6479] hsr_slave_1: left promiscuous mode [ 364.706499][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.721525][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.738987][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.762858][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.792852][ T786] DVB: Unable to find symbol nxt6000_attach() [ 364.803997][ T786] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 364.814710][ T6479] bridge_slave_1: left allmulticast mode [ 367.580989][ T5770] Bluetooth: hci2: command tx timeout [ 367.608050][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 367.637739][ T786] dvb-usb: schedule remote query interval to 1000 msecs. [ 367.645051][ T786] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 367.657940][ T786] dvb-usb: bulk message failed: -22 (7/0) [ 367.664323][ T786] dvb-usb: bulk message failed: -22 (7/0) [ 367.680599][ T786] usb 1-1: USB disconnect, device number 7 [ 367.751865][ T6479] bridge_slave_1: left promiscuous mode [ 367.838659][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.906617][ T6479] bridge_slave_0: left allmulticast mode [ 367.958360][ T6479] bridge_slave_0: left promiscuous mode [ 367.965251][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.077953][ T5865] usb 3-1: USB disconnect, device number 6 [ 368.201156][ T786] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 368.236479][ T6479] veth1_macvtap: left promiscuous mode [ 368.244608][ T6479] veth0_macvtap: left promiscuous mode [ 368.268296][ T6479] veth1_vlan: left promiscuous mode [ 368.273731][ T6479] veth0_vlan: left promiscuous mode [ 368.732511][ T7853] loop0: detected capacity change from 0 to 1024 [ 368.790506][ T7853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.820296][ T7853] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.028490][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.195636][ T7851] loop1: detected capacity change from 0 to 32768 [ 369.243191][ T7851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.524 (7851) [ 369.302621][ T7851] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.314151][ T7851] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 369.374200][ T7851] BTRFS info (device loop1): setting nodatacow, compression disabled [ 369.400545][ T7851] BTRFS info (device loop1): enabling auto defrag [ 369.407113][ T7851] BTRFS info (device loop1): max_inline at 0 [ 369.452628][ T7851] BTRFS info (device loop1): using free space tree [ 369.624259][ T7851] BTRFS info (device loop1): auto enabling async discard [ 369.637824][ T5770] Bluetooth: hci2: command tx timeout [ 369.989521][ T7859] loop0: detected capacity change from 0 to 32768 [ 370.067213][ T7859] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.389978][ T7859] XFS (loop0): Ending clean mount [ 370.422771][ T7888] loop2: detected capacity change from 0 to 512 [ 370.496927][ T7888] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 370.533994][ T7888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 370.573004][ T7888] EXT4-fs (loop2): orphan cleanup on readonly fs [ 370.580525][ T7888] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.526: bad orphan inode 267 [ 370.597161][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.637899][ T7888] EXT4-fs (loop2): Remounting filesystem read-only [ 370.646037][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 370.669152][ T7888] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.526: dx entry: limit 0 != root limit 125 [ 370.680392][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.698988][ T7888] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.526: Corrupt directory, running e2fsck is recommended [ 370.854559][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 371.553436][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 371.697984][ T5770] Bluetooth: hci2: command tx timeout [ 372.207308][ T7903] xt_CT: No such helper "pptp" [ 372.458708][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 373.308601][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.083430][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.697876][ T7913] loop0: detected capacity change from 0 to 40427 [ 375.748348][ T7913] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 375.756181][ T7913] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 375.893165][ T7913] F2FS-fs (loop0): invalid crc value [ 375.926494][ T7913] F2FS-fs (loop0): Found nat_bits in checkpoint [ 378.124226][ T7956] loop0: detected capacity change from 0 to 1024 [ 378.274176][ T5777] hfsplus: bad catalog entry type [ 378.344353][ T59] hfsplus: b-tree write err: -5, ino 4 [ 378.417580][ T6479] bond0 (unregistering): Released all slaves [ 378.916703][ T5777] syz-executor (5777) used greatest stack depth: 20520 bytes left [ 378.984834][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.991752][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.030563][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.067901][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.075283][ T7773] bridge_slave_0: entered allmulticast mode [ 379.104073][ T7773] bridge_slave_0: entered promiscuous mode [ 379.130917][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.138834][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.146162][ T7773] bridge_slave_1: entered allmulticast mode [ 379.170309][ T7773] bridge_slave_1: entered promiscuous mode [ 379.332355][ T7773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.395060][ T7773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.504461][ T7773] team0: Port device team_slave_0 added [ 379.536575][ T7773] team0: Port device team_slave_1 added [ 379.639650][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.646701][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.717728][ T7773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.766748][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.786978][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.851514][ T7773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.882502][ T7978] bridge0: port 3(syz_tun) entered blocking state [ 379.890760][ T7978] bridge0: port 3(syz_tun) entered disabled state [ 379.906193][ T7978] syz_tun: entered allmulticast mode [ 379.914054][ T7978] syz_tun: entered promiscuous mode [ 379.920534][ T7978] bridge0: port 3(syz_tun) entered blocking state [ 379.928537][ T7978] bridge0: port 3(syz_tun) entered forwarding state [ 380.150945][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.284349][ T7773] hsr_slave_0: entered promiscuous mode [ 380.298908][ T7773] hsr_slave_1: entered promiscuous mode [ 380.319742][ T7773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.337564][ T7773] Cannot create hsr debugfs directory [ 380.412272][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.478774][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.494481][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.507160][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.519138][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.527201][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 380.540436][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.622196][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.774146][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.100379][ T7958] loop2: detected capacity change from 0 to 131072 [ 381.133462][ T7958] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 381.186274][ T7958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 381.226246][ T7958] F2FS-fs (loop2): invalid crc value [ 381.276547][ T7958] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 382.237447][ T8010] overlayfs: failed to clone upperpath [ 382.297814][ T7773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.333469][ T7773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.363038][ T7773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.395686][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 382.486672][ T8001] loop2: detected capacity change from 0 to 32768 [ 382.499773][ T7773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.569449][ T8001] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.598058][ T5770] Bluetooth: hci3: command tx timeout [ 382.660527][ T8001] XFS (loop2): Ending clean mount [ 383.035669][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 384.665073][ T5770] Bluetooth: hci3: command tx timeout [ 384.720089][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.727324][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.798286][ T7985] bridge_slave_0: entered allmulticast mode [ 384.805872][ T7985] bridge_slave_0: entered promiscuous mode [ 384.844251][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.851826][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.859330][ T7985] bridge_slave_1: entered allmulticast mode [ 384.871954][ T7985] bridge_slave_1: entered promiscuous mode [ 385.069228][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.098546][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.456020][ T7985] team0: Port device team_slave_0 added [ 385.496762][ T7985] team0: Port device team_slave_1 added [ 385.793722][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.812015][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.851248][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.866738][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.874205][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.900374][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.039821][ T8068] loop2: detected capacity change from 0 to 4096 [ 386.067530][ T6478] hsr_slave_0: left promiscuous mode [ 386.082869][ T6478] hsr_slave_1: left promiscuous mode [ 386.092702][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.100685][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.126980][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.136043][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.165119][ T6478] bridge_slave_1: left allmulticast mode [ 386.179827][ T6478] bridge_slave_1: left promiscuous mode [ 386.186727][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.197598][ T6478] bridge_slave_0: left allmulticast mode [ 386.204578][ T6478] bridge_slave_0: left promiscuous mode [ 386.222349][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.264734][ T8068] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 386.314111][ T6478] veth1_macvtap: left promiscuous mode [ 386.322306][ T6478] veth0_macvtap: left promiscuous mode [ 386.331750][ T6478] veth1_vlan: left promiscuous mode [ 386.337146][ T6478] veth0_vlan: left promiscuous mode [ 388.201437][ T5770] Bluetooth: hci3: command tx timeout [ 388.817515][ T8099] fuse: Bad value for 'fd' [ 389.366603][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 389.433509][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 389.507959][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.605443][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.718642][ T8104] loop2: detected capacity change from 0 to 32768 [ 389.744711][ T8104] XFS: ikeep mount option is deprecated. [ 389.855603][ T8104] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 391.058755][ T5770] Bluetooth: hci3: command tx timeout [ 391.157529][ T8104] XFS (loop2): Ending clean mount [ 391.600605][ T5764] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 392.089294][ T6478] bond0 (unregistering): Released all slaves [ 393.381036][ T7985] hsr_slave_0: entered promiscuous mode [ 393.418133][ T7985] hsr_slave_1: entered promiscuous mode [ 393.732484][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.522159][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.660309][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.667525][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.811843][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.819123][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.860998][ T8136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 394.877973][ T8136] (unnamed net_device) (uninitialized): option ad_select: invalid value (101) [ 395.160843][ T7985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.856598][ T7985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.029578][ T7985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.121895][ T7985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.660147][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.801120][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.870696][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.877999][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.985956][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.993272][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.237088][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.565832][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.520193][ T8182] loop2: detected capacity change from 0 to 256 [ 402.513286][ T7773] veth0_vlan: entered promiscuous mode [ 402.904745][ T7773] veth1_vlan: entered promiscuous mode [ 403.339457][ T7773] veth0_macvtap: entered promiscuous mode [ 403.448502][ T7773] veth1_macvtap: entered promiscuous mode [ 403.618070][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.633549][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.646120][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.658941][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.679890][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.080520][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.098798][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.112820][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.124497][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.147026][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.214237][ T7773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.268181][ T7773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.292231][ T7773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.315699][ T7773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.381633][ T8208] loop2: detected capacity change from 0 to 256 [ 404.570082][ T8208] FAT-fs (loop2): Directory bread(block 64) failed [ 405.717289][ T8208] FAT-fs (loop2): Directory bread(block 65) failed [ 405.758829][ T8208] FAT-fs (loop2): Directory bread(block 66) failed [ 405.765466][ T8208] FAT-fs (loop2): Directory bread(block 67) failed [ 405.804671][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.821807][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.844964][ T8208] FAT-fs (loop2): Directory bread(block 68) failed [ 405.859745][ T8208] FAT-fs (loop2): Directory bread(block 69) failed [ 405.866491][ T8208] FAT-fs (loop2): Directory bread(block 70) failed [ 405.905767][ T8208] FAT-fs (loop2): Directory bread(block 71) failed [ 405.935857][ T8208] FAT-fs (loop2): Directory bread(block 72) failed [ 405.949579][ T7985] veth0_vlan: entered promiscuous mode [ 405.965535][ T8208] FAT-fs (loop2): Directory bread(block 73) failed [ 406.053034][ T7985] veth1_vlan: entered promiscuous mode [ 406.088964][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.096877][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.424046][ T7985] veth0_macvtap: entered promiscuous mode [ 407.453436][ T7985] veth1_macvtap: entered promiscuous mode [ 407.505130][ T1305] bio_check_eod: 1 callbacks suppressed [ 407.505148][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.505148][ T1305] loop2: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 407.540408][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.540408][ T1305] loop2: rw=1, sector=1864, nr_sectors = 6824 limit=256 [ 407.570937][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.570937][ T1305] loop2: rw=1, sector=8688, nr_sectors = 5472 limit=256 [ 407.596134][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.596134][ T1305] loop2: rw=1, sector=14160, nr_sectors = 3760 limit=256 [ 407.627020][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.627020][ T1305] loop2: rw=1, sector=17920, nr_sectors = 3840 limit=256 [ 407.654867][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.666545][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.696647][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.696647][ T1305] loop2: rw=1, sector=21760, nr_sectors = 3232 limit=256 [ 407.710765][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.737803][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.754494][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.754494][ T1305] loop2: rw=1, sector=24992, nr_sectors = 2048 limit=256 [ 407.778379][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.807128][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.831399][ T8221] loop5: detected capacity change from 0 to 16 [ 407.848868][ T8221] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 407.852047][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.866794][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.866794][ T1305] loop2: rw=1, sector=27040, nr_sectors = 2048 limit=256 [ 407.924421][ T1305] kworker/u4:6: attempt to access beyond end of device [ 407.924421][ T1305] loop2: rw=1, sector=29088, nr_sectors = 2048 limit=256 [ 407.940695][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.967794][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.001259][ T1305] kworker/u4:6: attempt to access beyond end of device [ 408.001259][ T1305] loop2: rw=1, sector=31136, nr_sectors = 2048 limit=256 [ 408.016365][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.047810][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.077713][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.123282][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.171115][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.227507][ T7985] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.255788][ T7985] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.283628][ T7985] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.300747][ T8227] loop5: detected capacity change from 0 to 256 [ 408.307162][ T7985] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.317221][ T8227] exfat: Deprecated parameter 'utf8' [ 408.425084][ T8227] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 408.662100][ T6802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.680226][ T6802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.810317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.834513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.862560][ T8261] loop2: detected capacity change from 0 to 512 [ 411.908132][ T8261] EXT4-fs: journaled quota format not specified [ 412.565306][ T8269] program syz.5.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.147832][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 413.848234][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.600'. [ 416.886202][ T23] usb 6-1: unable to read config index 0 descriptor/all [ 416.898080][ T23] usb 6-1: can't read configurations, error -71 [ 418.656812][ T8310] loop5: detected capacity change from 0 to 512 [ 418.748976][ T8310] EXT4-fs: Ignoring removed oldalloc option [ 418.831531][ T8310] EXT4-fs (loop5): 1 truncate cleaned up [ 418.989177][ T8310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.154906][ T28] audit: type=1800 audit(1766724726.391:8): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.613" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 419.916899][ T7773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.881970][ T8359] loop2: detected capacity change from 0 to 4096 [ 424.038416][ T8359] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 424.049907][ T8359] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 424.611402][ T8354] loop5: detected capacity change from 0 to 32768 [ 424.742691][ T8354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.621 (8354) [ 425.717302][ T8354] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.791397][ T8354] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 425.858795][ T8354] BTRFS info (device loop5): using free space tree [ 427.018378][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 427.019213][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 428.843429][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 428.871199][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 428.918666][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 429.065013][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 429.134919][ T8354] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 429.241032][ T8354] BTRFS error (device loop5): open_ctree failed: -12 [ 429.469672][ T8296] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (8296) [ 434.053503][ T8462] loop2: detected capacity change from 0 to 2048 [ 435.906290][ T8493] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 436.225979][ T8503] loop6: detected capacity change from 0 to 256 [ 436.304451][ T8503] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 436.343932][ T8499] loop2: detected capacity change from 0 to 4096 [ 436.428830][ T8499] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 436.605856][ T8499] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 436.626394][ T8499] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 436.781276][ T8509] loop6: detected capacity change from 0 to 512 [ 436.791499][ T28] audit: type=1800 audit(1766724744.041:9): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 436.874532][ T8509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.902657][ T8509] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.335496][ T8520] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 437.364359][ T8520] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 437.377317][ T8520] EXT4-fs (loop6): This should not happen!! Data will be lost [ 437.377317][ T8520] [ 437.387273][ T8520] EXT4-fs (loop6): Total free blocks count 0 [ 437.393480][ T8520] EXT4-fs (loop6): Free/Dirty block details [ 437.399715][ T8520] EXT4-fs (loop6): free_blocks=65280 [ 437.405244][ T8520] EXT4-fs (loop6): dirty_blocks=33 [ 437.410664][ T8520] EXT4-fs (loop6): Block reservation details [ 437.416800][ T8520] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 437.774152][ T8523] loop5: detected capacity change from 0 to 256 [ 437.840129][ T8523] exfat: Deprecated parameter 'utf8' [ 437.894505][ T7985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.967915][ T8523] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 439.799250][ T5853] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 440.153876][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 440.224274][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.284696][ T5853] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.345902][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.388709][ T5853] usb 3-1: config 0 descriptor?? [ 440.428224][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.434948][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.444120][ T5853] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 440.876131][ T8563] loop5: detected capacity change from 0 to 512 [ 440.914805][ T8563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.924525][ T8563] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 440.966231][ T8563] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 440.989618][ T8563] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 441.024274][ T8563] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 441.048304][ T8563] EXT4-fs (loop5): orphan cleanup on readonly fs [ 441.057478][ T8563] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.666: bg 0: block 34: padding at end of block bitmap is not set [ 441.084414][ T8563] Quota error (device loop5): write_blk: dquota write failed [ 441.093025][ T8563] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 441.103504][ T8563] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.666: Failed to acquire dquot type 1 [ 441.132778][ T8563] EXT4-fs (loop5): 1 truncate cleaned up [ 441.142859][ T8563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.560564][ T8579] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.666: deleted inode referenced: 12 [ 442.132417][ T7773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.649498][ T5833] usb 3-1: USB disconnect, device number 7 [ 443.697506][ T8592] loop5: detected capacity change from 0 to 4096 [ 444.934166][ T8602] loop6: detected capacity change from 0 to 131072 [ 444.982912][ T8602] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 444.991149][ T8602] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 445.015928][ T8602] F2FS-fs (loop6): invalid crc value [ 446.166696][ T8296] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.232077][ T8602] F2FS-fs (loop6): Found nat_bits in checkpoint [ 446.313307][ T8602] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 446.320618][ T8602] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 448.524876][ T8655] loop5: detected capacity change from 0 to 128 [ 448.562441][ T8657] loop2: detected capacity change from 0 to 128 [ 448.649096][ T8655] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 448.690922][ T8655] hpfs: filesystem error: improperly stopped [ 448.728056][ T8655] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 448.735886][ T8655] hpfs: You really don't want any checks? You are crazy... [ 448.788348][ T8655] hpfs: hpfs_map_sector(): read error [ 448.793803][ T8655] hpfs: code page support is disabled [ 448.849875][ T8655] hpfs: hpfs_map_4sectors(): unaligned read [ 448.874274][ T8655] hpfs: hpfs_map_4sectors(): unaligned read [ 448.898612][ T8655] hpfs: filesystem error: unable to find root dir [ 448.939553][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 449.221379][ T8670] loop2: detected capacity change from 0 to 8 [ 449.323442][ T8670] trusted_key: encrypted_key: insufficient parameters specified [ 449.480335][ T8673] xt_bpf: check failed: parse error [ 451.035841][ T8706] Bluetooth: MGMT ver 1.22 [ 453.149583][ T8732] loop6: detected capacity change from 0 to 256 [ 453.157674][ T8728] netlink: 27 bytes leftover after parsing attributes in process `syz.1.706'. [ 453.194148][ T8732] exfat: Deprecated parameter 'utf8' [ 453.252514][ T8732] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 453.445130][ T8737] 9pnet_fd: Insufficient options for proto=fd [ 453.970019][ T8747] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 455.082438][ T8756] loop6: detected capacity change from 0 to 1024 [ 456.991112][ T8775] loop6: detected capacity change from 0 to 128 [ 457.069261][ T8775] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.752309][ T8775] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.843230][ T8775] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.903857][ T8787] loop5: detected capacity change from 0 to 256 [ 458.945770][ T8787] exfat: Deprecated parameter 'utf8' [ 459.007314][ T7985] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.045896][ T8787] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 459.299726][ T8792] loop6: detected capacity change from 0 to 1024 [ 464.579881][ T8838] loop6: detected capacity change from 0 to 256 [ 464.609416][ T8838] exfat: Deprecated parameter 'utf8' [ 464.696037][ T8838] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 464.808122][ T1187] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 465.044760][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 465.046615][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 465.064405][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 465.092432][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.120259][ T1187] usb 3-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 465.149901][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.178897][ T1187] usb 3-1: config 0 descriptor?? [ 467.305459][ T1187] usb 3-1: language id specifier not provided by device, defaulting to English [ 467.578359][ T1187] usbhid 3-1:0.0: can't add hid device: -71 [ 467.584839][ T1187] usbhid: probe of 3-1:0.0 failed with error -71 [ 467.610815][ T1187] usb 3-1: USB disconnect, device number 8 [ 468.504749][ T8877] loop2: detected capacity change from 0 to 1024 [ 469.518431][ T8892] nft_compat: unsupported protocol 0 [ 472.376069][ T8911] loop6: detected capacity change from 0 to 256 [ 474.362259][ T8929] loop6: detected capacity change from 0 to 1024 [ 474.577447][ T8933] loop2: detected capacity change from 0 to 256 [ 474.603075][ T8933] exfat: Deprecated parameter 'utf8' [ 477.508157][ T8933] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 480.964130][ T8960] loop2: detected capacity change from 0 to 256 [ 482.688058][ T8975] overlay: Unknown parameter 'smackfsroot' [ 486.823154][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.766'. [ 489.022787][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 493.217926][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 493.501627][ T23] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 493.517995][ T23] usb 6-1: config 0 has no interface number 0 [ 493.550043][ T23] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 493.560306][ T23] usb 6-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 493.578250][ T23] usb 6-1: Manufacturer: syz [ 493.590466][ T23] usb 6-1: config 0 descriptor?? [ 493.600405][ T23] ftdi_sio 6-1:0.255: FTDI USB Serial Device converter detected [ 493.612157][ T23] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 493.627751][ T8306] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 494.418526][ T23] usb 6-1: USB disconnect, device number 4 [ 494.435365][ T23] ftdi_sio 6-1:0.255: device disconnected [ 495.697847][ T8306] usb 3-1: Using ep0 maxpacket: 8 [ 495.734181][ T8306] usb 3-1: device descriptor read/all, error -71 [ 498.078438][ T9085] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 498.444436][ T9093] Invalid ELF header magic: != ELF [ 499.137932][ T8306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 499.337830][ T8306] usb 6-1: Using ep0 maxpacket: 8 [ 499.355436][ T8306] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 499.378069][ T8306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.428389][ T8306] usb 6-1: config 0 descriptor?? [ 499.479986][ T1187] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 499.677739][ T1187] usb 7-1: device descriptor read/64, error -71 [ 499.764253][ T5756] usb 6-1: USB disconnect, device number 5 [ 500.610383][ T1187] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 501.866361][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.873096][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.897706][ T1187] usb 7-1: device descriptor read/64, error -71 [ 502.207941][ T1187] usb usb7-port1: attempt power cycle [ 503.938910][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 506.538392][ T9187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 516.617800][ T1187] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 516.772003][ T5865] kernel write not supported for file /snd/seq (pid: 5865 comm: kworker/1:5) [ 517.027837][ T1187] usb 6-1: Using ep0 maxpacket: 32 [ 517.214520][ T1187] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 518.197730][ T1187] usb 6-1: config 0 has no interface number 0 [ 518.242625][ T1187] usb 6-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 518.282655][ T1187] usb 6-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 518.342871][ T1187] usb 6-1: config 0 interface 255 has no altsetting 0 [ 518.647202][ T1187] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 519.378158][ T1187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.417653][ T1187] usb 6-1: Product: syz [ 519.421906][ T1187] usb 6-1: Manufacturer: syz [ 519.426546][ T1187] usb 6-1: SerialNumber: syz [ 519.476818][ T1187] usb 6-1: config 0 descriptor?? [ 519.534551][ T1187] usb 6-1: can't set config #0, error -71 [ 519.654521][ T1187] usb 6-1: USB disconnect, device number 6 [ 521.871212][ T9356] loop2: detected capacity change from 0 to 7 [ 521.902299][ T9356] Dev loop2: unable to read RDB block 7 [ 521.921825][ T9356] loop2: unable to read partition table [ 521.935804][ T9356] loop2: partition table beyond EOD, truncated [ 521.942383][ T9356] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 524.242838][ T9381] hub 6-0:1.0: USB hub found [ 524.248172][ T9381] hub 6-0:1.0: 1 port detected [ 529.241222][ T9459] loop6: detected capacity change from 0 to 256 [ 534.283499][ T9493] netlink: 'syz.2.871': attribute type 27 has an invalid length. [ 538.789774][ T9522] loop2: detected capacity change from 0 to 256 [ 542.838440][ T9576] loop5: detected capacity change from 0 to 256 [ 550.727776][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 552.425164][ T9636] random: crng reseeded on system resumption [ 553.429106][ T9649] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 553.462115][ T9649] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 553.719400][ T9655] loop5: detected capacity change from 0 to 256 [ 559.173879][ T9702] futex_wake_op: syz.5.924 tries to shift op by 32; fix this program [ 561.222357][ T5806] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 561.550419][ T5806] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 561.589372][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.648861][ T5806] usb 7-1: config 0 descriptor?? [ 561.668010][ T5806] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 563.319357][ T9740] ptrace attach of "./syz-executor exec"[7773] was attempted by " [ 563.327255][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.432110][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.160803][ T5806] usb 7-1: USB disconnect, device number 5 [ 565.987807][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 566.207737][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 566.229856][ T9778] loop2: detected capacity change from 0 to 256 [ 566.268367][ T9] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 566.433297][ T9] usb 6-1: config 2 has no interface number 0 [ 566.617099][ T9] usb 6-1: config 2 interface 31 has no altsetting 0 [ 566.833107][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 566.970115][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.074942][ T9] usb 6-1: Product: syz [ 567.119642][ T9] usb 6-1: Manufacturer: syz [ 567.124411][ T9] usb 6-1: SerialNumber: syz [ 567.753441][ T9] ch9200: probe of 6-1:2.31 failed with error -22 [ 568.500741][ T9] usb 6-1: USB disconnect, device number 7 [ 574.258072][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 579.977754][ T786] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 580.008198][ T9856] netlink: 48 bytes leftover after parsing attributes in process `syz.1.954'. [ 580.188433][ T786] usb 7-1: not running at top speed; connect to a high speed hub [ 580.198446][ T786] usb 7-1: config 8 has an invalid interface number: 83 but max is 0 [ 580.206584][ T786] usb 7-1: config 8 has no interface number 0 [ 580.268872][ T786] usb 7-1: config 8 interface 83 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 580.296537][ T786] usb 7-1: config 8 interface 83 altsetting 2 has an invalid endpoint descriptor of length 2, skipping [ 580.328904][ T786] usb 7-1: config 8 interface 83 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 580.348058][ T786] usb 7-1: config 8 interface 83 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.381023][ T786] usb 7-1: config 8 interface 83 has no altsetting 0 [ 580.393057][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 580.419866][ T786] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=8b.7c [ 580.440727][ T786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.477705][ T786] usb 7-1: Product: syz [ 580.481969][ T786] usb 7-1: Manufacturer: syz [ 580.486641][ T786] usb 7-1: SerialNumber: syz [ 582.246282][ T786] usb 7-1: USB disconnect, device number 6 [ 585.209783][ T51] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 589.405928][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 589.417182][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 589.429365][ T51] Bluetooth: hci3: hardware error 0x00 [ 589.507819][ T8306] IPVS: starting estimator thread 0... [ 589.679868][ T9918] IPVS: using max 18 ests per chain, 43200 per kthread [ 592.861990][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 595.547722][ T23] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 596.470124][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 596.603740][ T23] usb 7-1: config 7 has an invalid interface number: 13 but max is 1 [ 596.655608][ T23] usb 7-1: config 7 has an invalid interface number: 83 but max is 1 [ 596.687833][ T23] usb 7-1: config 7 has no interface number 0 [ 596.694014][ T23] usb 7-1: config 7 has no interface number 1 [ 596.730195][ T23] usb 7-1: config 7 interface 13 altsetting 32 endpoint 0x82 has invalid maxpacket 1112, setting to 64 [ 596.751740][ T23] usb 7-1: config 7 interface 13 has no altsetting 0 [ 596.761448][ T23] usb 7-1: config 7 interface 83 has no altsetting 0 [ 596.785920][ T23] usb 7-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=20.52 [ 596.834878][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.865773][ T9981] loop2: detected capacity change from 0 to 7 [ 596.914712][ T9981] Dev loop2: unable to read RDB block 7 [ 596.923885][ T9981] loop2: unable to read partition table [ 596.924879][ T23] usb 7-1: Product: syz [ 596.930142][ T9981] loop2: partition table beyond EOD, truncated [ 596.951502][ T9981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.978369][ T23] usb 7-1: Manufacturer: syz [ 596.983339][ T23] usb 7-1: SerialNumber: syz [ 597.450731][ T23] em28xx 7-1:7.13: New device syz syz @ 480 Mbps (eb1a:a313, interface 13, class 13) [ 597.460516][ T23] em28xx 7-1:7.13: Video interface 13 found: [ 597.717344][ T23] em28xx 7-1:7.13: unknown em28xx chip ID (0) [ 598.564916][ T23] em28xx 7-1:7.13: reading from i2c device at 0xa0 failed (error=-5) [ 598.575686][ T9992] netlink: 'syz.1.1004': attribute type 4 has an invalid length. [ 598.629633][ T23] em28xx 7-1:7.13: board has no eeprom [ 600.373384][ T23] em28xx 7-1:7.13: Identified as KWorld ATSC 315U HDTV TV Box (card=69) [ 600.412520][ T23] em28xx 7-1:7.13: [ 600.412520][ T23] [ 600.412520][ T23] The support for this board weren't valid yet. [ 600.412520][ T23] Please send a report of having this working [ 600.412520][ T23] not to V4L mailing list (and/or to other addresses) [ 600.412520][ T23] [ 600.454778][ T23] em28xx 7-1:7.13: analog set to bulk mode. [ 600.475669][ T8306] em28xx 7-1:7.13: Registering V4L2 extension [ 600.524536][ T23] usb 7-1: USB disconnect, device number 7 [ 600.552957][ T23] em28xx 7-1:7.13: Disconnecting em28xx [ 600.841516][ T8306] em28xx 7-1:7.13: Config register raw data: 0xffffffed [ 600.862151][ T8306] em28xx 7-1:7.13: AC97 chip type couldn't be determined [ 600.890430][ T8306] em28xx 7-1:7.13: No AC97 audio processor [ 600.942346][ T8306] usb 7-1: Decoder not found [ 600.949495][ T8306] em28xx 7-1:7.13: failed to create media graph [ 600.955877][ T8306] em28xx 7-1:7.13: V4L2 device video103 deregistered [ 600.986546][ T8306] em28xx 7-1:7.13: Binding DVB extension [ 601.000209][ T8306] em28xx 7-1:7.13: no endpoint for DVB mode and transfer type 0 [ 601.222703][ T8306] em28xx 7-1:7.13: failed to pre-allocate USB transfer buffers for DVB. [ 601.234105][ T8306] em28xx 7-1:7.13: Registering input extension [ 601.241319][ T23] em28xx 7-1:7.13: Closing input extension [ 601.279278][ T23] em28xx 7-1:7.13: Freeing device [ 607.727928][ T8306] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 607.949978][ T8306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.977865][ T8306] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 607.986992][ T8306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.066798][ T8306] usb 3-1: config 0 descriptor?? [ 608.420642][ T8306] usbhid 3-1:0.0: can't add hid device: -71 [ 608.426732][ T8306] usbhid: probe of 3-1:0.0 failed with error -71 [ 608.439749][ T8306] usb 3-1: USB disconnect, device number 11 [ 608.673503][ T23] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 609.056420][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 609.112437][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.157179][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.208260][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 609.245257][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 609.264752][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.296638][ T23] usb 7-1: config 0 descriptor?? [ 609.348361][ T8306] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 609.547664][ T8306] usb 3-1: Using ep0 maxpacket: 32 [ 609.559863][ T8306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.581215][ T8306] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 609.607786][ T8306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.637320][ T8306] usb 3-1: config 0 descriptor?? [ 609.660644][ T8306] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 609.691471][ T8306] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 609.739680][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.767222][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.778156][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.785789][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.806353][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.817947][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.825496][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.847635][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.865508][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.895870][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 609.916194][ T23] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 609.934897][ T23] plantronics 0003:047F:FFFF.0001: parse failed [ 609.952024][ T23] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 609.989738][ T23] usb 7-1: USB disconnect, device number 8 [ 610.099935][ T786] usb 3-1: USB disconnect, device number 12 [ 610.108941][ T786] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 611.793160][T10106] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1041'. [ 612.019462][ T28] audit: type=1326 audit(1766724919.271:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.045981][ T28] audit: type=1326 audit(1766724919.271:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.074813][ T28] audit: type=1326 audit(1766724919.291:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.103271][ T28] audit: type=1326 audit(1766724919.291:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.131135][ T28] audit: type=1326 audit(1766724919.291:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.163590][ T28] audit: type=1326 audit(1766724919.291:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.186679][ T28] audit: type=1326 audit(1766724919.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.216789][ T28] audit: type=1326 audit(1766724919.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.245952][ T28] audit: type=1326 audit(1766724919.291:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.276392][ T28] audit: type=1326 audit(1766724919.301:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9918f749 code=0x7ffc0000 [ 612.804769][T10123] loop6: detected capacity change from 0 to 256 [ 613.793707][T10129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 617.654087][T10185] loop6: detected capacity change from 0 to 256 [ 621.090858][T10203] syz.2.1084 uses obsolete (PF_INET,SOCK_PACKET) [ 622.725040][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 622.942944][T10236] loop2: detected capacity change from 0 to 256 [ 624.223849][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 626.173625][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.180369][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.467666][ T1187] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 628.807094][T10276] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 628.814212][T10276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.000892][T10276] vhci_hcd vhci_hcd.0: Device attached [ 629.226299][T10277] vhci_hcd: connection closed [ 629.328675][ T786] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 629.372871][ T6479] vhci_hcd: stop threads [ 629.432562][ T6479] vhci_hcd: release socket [ 629.531237][ T6479] vhci_hcd: disconnect device [ 630.227717][ T1187] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 630.437965][ T1187] usb 7-1: Using ep0 maxpacket: 16 [ 630.447502][ T1187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.462064][ T1187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.475888][ T1187] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.489162][ T1187] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.498488][ T1187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.511288][ T1187] usb 7-1: config 0 descriptor?? [ 630.952032][ T1187] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 630.977372][ T1187] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 630.988645][ T1187] microsoft 0003:045E:07DA.0002: unexpected long global item [ 631.001036][ T1187] microsoft 0003:045E:07DA.0002: parse failed [ 631.007794][ T1187] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 632.249623][ T8697] usb 7-1: USB disconnect, device number 9 [ 634.590287][ T786] vhci_hcd: vhci_device speed not set [ 642.532497][T10343] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 648.310877][T10376] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 656.787924][ T23] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 656.963796][T10429] hsr0: entered promiscuous mode [ 656.986813][ T23] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 656.998384][T10429] macvtap1: entered promiscuous mode [ 657.017672][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 657.053272][ T23] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.069252][ T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 657.091409][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.124469][ T23] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 657.216950][ T23] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 657.349803][ T23] usb 6-1: USB disconnect, device number 9 [ 659.912508][T10455] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xaa [ 661.218123][T10465] loop5: detected capacity change from 0 to 256 [ 664.324814][T10477] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13) [ 666.042468][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1164'. [ 666.307766][ T5756] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 666.409024][T10504] Invalid ELF header magic: != ELF [ 667.424745][ T5756] usb 3-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 667.459525][ T5756] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 667.501253][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.696390][ T5756] usb 3-1: config 0 descriptor?? [ 668.726811][T10512] bio_check_eod: 1 callbacks suppressed [ 668.726830][T10512] syz.5.1182: attempt to access beyond end of device [ 668.726830][T10512] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 668.727186][ T5756] usb 3-1: bad CDC descriptors [ 668.735869][T10512] syz.5.1182: attempt to access beyond end of device [ 668.735869][T10512] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 668.873645][T10512] Mount JFS Failure: -5 [ 668.886207][T10512] jfs_mount failed w/return code = -5 [ 668.888707][ T5756] usb 3-1: bad CDC descriptors [ 668.958825][ T5756] usb 3-1: USB disconnect, device number 13 [ 679.585369][T10591] bridge: RTM_NEWNEIGH with invalid ether address [ 680.051350][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 680.051367][ T28] audit: type=1326 audit(1766724987.271:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10600 comm="syz.1.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x0 [ 686.937631][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.944047][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.295017][T10661] vivid-004: disconnect [ 691.245050][T10662] vivid-004: reconnect [ 694.517646][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 694.747613][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 694.762080][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 694.786644][ T9] usb 7-1: config 0 has no interface number 0 [ 694.802603][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 694.824753][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.845921][ T9] usb 7-1: Product: syz [ 694.857784][ T9] usb 7-1: Manufacturer: syz [ 694.868856][ T9] usb 7-1: SerialNumber: syz [ 694.887320][ T9] usb 7-1: config 0 descriptor?? [ 694.909248][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 694.928726][ T9] usb 7-1: selecting invalid altsetting 1 [ 694.946449][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 695.080474][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 695.146654][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 695.206846][ T9] usb 7-1: media controller created [ 696.925116][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.036634][ T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 697.090920][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 697.157674][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 697.291528][ T9] usb 7-1: USB disconnect, device number 10 [ 703.898971][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 704.087839][ T9] usb 3-1: device descriptor read/64, error -71 [ 705.747719][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 706.057740][ T9] usb 3-1: device descriptor read/64, error -71 [ 706.388563][ T9] usb usb3-port1: attempt power cycle [ 708.659903][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 708.882407][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.995558][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 709.081782][ T9] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 709.097653][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.109850][ T9] usb 3-1: Product: syz [ 709.116590][ T9] usb 3-1: Manufacturer: syz [ 709.129868][ T9] usb 3-1: SerialNumber: syz [ 709.165081][ T9] usb 3-1: config 0 descriptor?? [ 709.175850][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 710.867360][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.054070][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 711.099358][ T9] usb 3-1: media controller created [ 711.158292][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.350909][ T9] DVB: Unable to find symbol tda10046_attach() [ 711.357202][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 711.366490][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 712.378861][ T9] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 712.390200][ T9] usb 3-1: USB disconnect, device number 16 [ 726.824540][T10886] loop5: detected capacity change from 0 to 256 [ 735.766617][T10928] loop6: detected capacity change from 0 to 256 [ 741.294624][T10966] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.248504][T10970] block nbd2: NBD_DISCONNECT [ 743.525608][T10974] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 745.186659][T10984] loop6: detected capacity change from 0 to 256 [ 747.628229][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.634656][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.073826][T11013] capability: warning: `syz.1.1344' uses deprecated v2 capabilities in a way that may be insecure [ 751.738272][T11024] loop2: detected capacity change from 0 to 256 [ 759.238348][T11073] loop5: detected capacity change from 0 to 256 [ 760.427369][ T28] audit: type=1326 audit(1766725067.671:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 760.567974][ T28] audit: type=1326 audit(1766725067.671:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 761.097644][ T28] audit: type=1326 audit(1766725067.671:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 761.207789][ T28] audit: type=1326 audit(1766725067.671:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 761.504174][ T28] audit: type=1326 audit(1766725067.671:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 762.221770][ T28] audit: type=1326 audit(1766725067.671:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 762.356378][ T28] audit: type=1326 audit(1766725067.671:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 762.494129][ T28] audit: type=1326 audit(1766725067.671:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 762.565257][ T28] audit: type=1326 audit(1766725067.671:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 762.741553][ T28] audit: type=1326 audit(1766725067.701:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11078 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 787.307994][T11247] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 787.314593][T11247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 787.680604][T11247] vhci_hcd vhci_hcd.0: Device attached [ 788.155085][T11252] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 788.161740][T11252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.207717][ T8697] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 788.217578][T11255] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(11) [ 788.224282][T11255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 788.237722][T11252] vhci_hcd vhci_hcd.0: Device attached [ 788.258695][T11258] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(17) [ 788.265392][T11258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 788.318319][T11255] vhci_hcd vhci_hcd.0: Device attached [ 788.335912][T11247] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 788.342678][T11247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.381206][T11258] vhci_hcd vhci_hcd.0: Device attached [ 788.403280][T11255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 788.442898][T11247] vhci_hcd vhci_hcd.0: Device attached [ 788.473405][T11252] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(16) [ 788.480103][T11252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 788.480947][T11258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 788.626767][T11252] vhci_hcd vhci_hcd.0: Device attached [ 788.648201][T11247] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(31) [ 788.654897][T11247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 788.727935][T11271] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(21) [ 788.734642][T11271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.775710][T11252] vhci_hcd vhci_hcd.0: port 0 already used [ 788.797753][T11247] vhci_hcd vhci_hcd.0: Device attached [ 788.837673][T11271] vhci_hcd vhci_hcd.0: Device attached [ 788.858369][T11254] vhci_hcd: connection closed [ 788.866445][ T1108] vhci_hcd: stop threads [ 788.877674][T11260] vhci_hcd: connection closed [ 788.878804][T11250] vhci_hcd: connection reset by peer [ 788.900134][T11265] vhci_hcd: connection closed [ 788.915660][ T1108] vhci_hcd: release socket [ 788.947906][T11262] vhci_hcd: connection closed [ 790.137596][ T1108] vhci_hcd: disconnect device [ 790.148437][T11268] vhci_hcd: connection closed [ 790.246768][ T1108] vhci_hcd: stop threads [ 790.301939][ T1108] vhci_hcd: release socket [ 790.317185][ T1108] vhci_hcd: disconnect device [ 790.346408][T11274] vhci_hcd: connection closed [ 790.356873][ T1108] vhci_hcd: stop threads [ 790.417589][ T1108] vhci_hcd: release socket [ 790.438507][ T1108] vhci_hcd: disconnect device [ 790.463790][ T1108] vhci_hcd: stop threads [ 790.484074][ T1108] vhci_hcd: release socket [ 790.514519][ T1108] vhci_hcd: disconnect device [ 790.535157][ T1108] vhci_hcd: stop threads [ 790.543800][ T1108] vhci_hcd: release socket [ 790.567620][ T1108] vhci_hcd: disconnect device [ 790.592889][ T1108] vhci_hcd: stop threads [ 790.597223][ T1108] vhci_hcd: release socket [ 790.626061][ T1108] vhci_hcd: disconnect device [ 791.211340][T11287] vivid-004: disconnect [ 792.214901][T11288] vivid-004: reconnect [ 792.268327][ T1108] vhci_hcd: stop threads [ 792.297753][ T1108] vhci_hcd: release socket [ 792.314792][ T1108] vhci_hcd: disconnect device [ 792.338940][T11272] vhci_hcd: connection closed [ 792.394058][ T1108] vhci_hcd: stop threads [ 792.460581][ T1108] vhci_hcd: release socket [ 792.615899][ T1108] vhci_hcd: disconnect device [ 793.417675][ T8697] vhci_hcd: vhci_device speed not set [ 796.790071][ T1187] usb usb46-port1: attempt power cycle [ 796.814023][T11312] loop6: detected capacity change from 0 to 256 [ 797.984618][ T1187] usb usb46-port1: unable to enumerate USB device [ 799.945187][T11327] vivid-004: disconnect [ 800.932367][T11328] vivid-004: reconnect [ 806.718481][T11376] loop5: detected capacity change from 0 to 256 [ 807.667668][ T786] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 807.930028][ T786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.948406][ T786] usb 6-1: not running at top speed; connect to a high speed hub [ 807.975698][ T786] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=91.0c [ 808.028096][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.036999][ T786] usb 6-1: Product: syz [ 808.067933][ T786] usb 6-1: Manufacturer: syz [ 808.072719][ T786] usb 6-1: SerialNumber: syz [ 808.142465][T11383] input: syz1 as /devices/virtual/input/input11 [ 808.397829][ T786] option 6-1:2.0: GSM modem (1-port) converter detected [ 808.464302][ T786] usb 6-1: USB disconnect, device number 10 [ 808.495562][ T786] option 6-1:2.0: device disconnected [ 809.849403][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.855825][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.193163][T11416] vivid-002: disconnect [ 815.240311][T11417] vivid-002: reconnect [ 824.300665][T11472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 824.615294][T11472] CIFS: Unable to determine destination address [ 826.607810][ T786] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 826.818133][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 826.826104][ T786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 826.870537][ T786] usb 3-1: config 4 has an invalid interface number: 143 but max is 0 [ 828.006364][ T786] usb 3-1: config 4 has no interface number 0 [ 828.027620][ T786] usb 3-1: config 4 interface 143 has no altsetting 0 [ 828.080553][ T786] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=c8.48 [ 828.105688][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.134461][ T786] usb 3-1: Product: syz [ 828.154365][ T786] usb 3-1: Manufacturer: syz [ 828.167535][ T786] usb 3-1: SerialNumber: syz [ 828.416864][ T786] powermate: probe of 3-1:4.143 failed with error -22 [ 828.467283][ T786] usb 3-1: USB disconnect, device number 17 [ 836.109708][T11538] loop5: detected capacity change from 0 to 256 [ 846.252080][T11587] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1508'. [ 846.287631][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1508'. [ 847.249842][T11594] vivid-004: disconnect [ 848.242304][T11595] vivid-004: reconnect [ 850.792417][T11612] loop6: detected capacity change from 0 to 256 [ 852.166326][T11620] program syz.6.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.496817][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 856.496837][ T28] audit: type=1326 audit(1766725163.711:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.1529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff25af8f749 code=0x0 [ 857.886014][T11667] vivid-004: disconnect [ 858.884851][T11668] vivid-004: reconnect [ 864.246681][T11704] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 866.387075][T11704] syz.1.1542 (11704) used greatest stack depth: 20240 bytes left [ 866.747736][ T786] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 866.827409][T11723] loop2: detected capacity change from 0 to 256 [ 866.977940][ T786] usb 6-1: Using ep0 maxpacket: 16 [ 867.000310][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.033902][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.071267][ T786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 867.097691][ T786] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 867.121699][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.369526][ T786] usb 6-1: config 0 descriptor?? [ 870.777544][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.783967][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.939519][ T786] usbhid 6-1:0.0: can't add hid device: -71 [ 870.946075][ T786] usbhid: probe of 6-1:0.0 failed with error -71 [ 870.987739][ T786] usb 6-1: USB disconnect, device number 11 [ 871.395617][ T28] audit: type=1800 audit(1766725178.641:101): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1554" name="/" dev="tmpfs" ino=223 res=0 errno=0 [ 877.283932][ T28] audit: type=1326 audit(1766725184.531:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.402045][ T28] audit: type=1326 audit(1766725184.531:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.473473][ T28] audit: type=1326 audit(1766725184.531:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.500913][ T28] audit: type=1326 audit(1766725184.531:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.546188][ T28] audit: type=1326 audit(1766725184.531:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.627726][ T28] audit: type=1326 audit(1766725184.531:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.655174][ T28] audit: type=1326 audit(1766725184.531:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.680588][ T28] audit: type=1326 audit(1766725184.531:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.727601][ T28] audit: type=1326 audit(1766725184.531:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 877.852007][ T28] audit: type=1326 audit(1766725184.531:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11772 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2fd38f749 code=0x7ffc0000 [ 879.261335][T11789] loop5: detected capacity change from 0 to 256 [ 884.167562][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 884.377572][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 884.385267][ T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.408342][ T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.439426][ T23] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 884.664982][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 884.672415][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 884.681600][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.698717][ T23] usb 6-1: config 0 descriptor?? [ 886.108828][T11807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.238538][T11807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.053526][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 888.060191][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 889.810132][ T23] usb 6-1: USB disconnect, device number 12 [ 893.052703][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 894.437604][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 894.909369][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803440ac00: rx timeout, send abort [ 895.409756][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803440a000: rx timeout, send abort [ 895.427546][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803440ac00: abort rx timeout. Force session deactivation [ 895.918109][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803440a000: abort rx timeout. Force session deactivation [ 895.958688][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.977672][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 895.986957][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.018393][ T23] usb 3-1: config 0 descriptor?? [ 896.046835][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 897.832004][ T23] pwc: send_video_command error -71 [ 897.867649][ T23] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 897.876793][ T23] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 897.942909][ T23] usb 3-1: USB disconnect, device number 18 [ 903.179339][T11906] loop5: detected capacity change from 0 to 256 [ 907.568380][T11929] vivid-004: disconnect [ 908.568707][T11930] vivid-004: reconnect [ 915.104244][T11963] vivid-004: disconnect [ 916.100219][T11964] vivid-004: reconnect [ 916.170793][T11966] overlayfs: failed to clone lowerpath [ 916.564548][T11966] overlayfs: failed to clone lowerpath [ 916.707311][T11973] loop5: detected capacity change from 0 to 256 [ 927.135173][ T786] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 927.349257][ T786] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 927.364835][ T786] usb 6-1: config 0 has no interface number 0 [ 927.908197][T12032] vivid-004: disconnect [ 928.907820][T12033] vivid-004: reconnect [ 929.193657][ T786] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 930.124973][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.133914][ T786] usb 6-1: Product: syz [ 930.138480][ T786] usb 6-1: Manufacturer: syz [ 930.143150][ T786] usb 6-1: SerialNumber: syz [ 930.243795][ T786] usb 6-1: config 0 descriptor?? [ 930.345648][ T786] usb 6-1: can't set config #0, error -71 [ 930.388071][ T786] usb 6-1: USB disconnect, device number 13 [ 930.667870][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 930.879765][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.900477][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 930.925007][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.970217][ T9] usb 7-1: config 0 descriptor?? [ 931.002470][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 931.942261][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.948781][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.088150][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 932.118680][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 932.166225][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 932.186505][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 932.212998][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 932.235150][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 932.256667][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 932.276549][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 932.294575][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 932.313216][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 932.332458][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 934.246613][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 934.253691][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 934.277570][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 934.284533][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 934.338882][ T9] pwc: Registered as video103. [ 934.345772][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 934.400874][ T9] usb 7-1: USB disconnect, device number 11 [ 937.782994][T12067] 9pnet_virtio: no channels available for device syz [ 941.117572][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 942.277530][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 942.287387][ T9] usb 7-1: device descriptor read/all, error -71 [ 949.847555][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 952.821431][T12140] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 952.821431][T12140] program syz.2.1671 not setting count and/or reply_len properly [ 953.954458][ T9] usb 3-1: device not accepting address 19, error -71 [ 991.000162][T12218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.037303][T12218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.058301][T12218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.120559][T12218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.148658][T12218] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 991.164855][T12218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.627727][ T51] Bluetooth: hci4: command tx timeout [ 993.635368][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.647741][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.732806][ T51] Bluetooth: hci4: command tx timeout [ 996.291904][T12218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.329599][T12218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.348285][T12218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.398595][T12218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.409438][T12218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 996.438373][T12218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 997.779431][ T51] Bluetooth: hci4: command tx timeout [ 998.587568][ T51] Bluetooth: hci5: command tx timeout [ 998.653907][T12216] chnl_net:caif_netlink_parms(): no params data found [ 999.858906][ T51] Bluetooth: hci4: command tx timeout [ 1000.657610][ T51] Bluetooth: hci5: command tx timeout [ 1000.774085][T12216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.650536][ T51] Bluetooth: hci5: command tx timeout [ 1004.384834][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.459056][T12216] bridge_slave_0: entered allmulticast mode [ 1004.539384][T12216] bridge_slave_0: entered promiscuous mode [ 1004.625888][T12216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.650221][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.692418][T12216] bridge_slave_1: entered allmulticast mode [ 1004.747644][T12216] bridge_slave_1: entered promiscuous mode [ 1005.701728][ T51] Bluetooth: hci5: command tx timeout [ 1006.010717][T12216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.211366][T12216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.961988][T12223] chnl_net:caif_netlink_parms(): no params data found [ 1007.463470][T12216] team0: Port device team_slave_0 added [ 1007.806758][T12216] team0: Port device team_slave_1 added [ 1009.879016][T12216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.886431][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.107762][T12216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.238452][T12216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.245704][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.417491][T12216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.701932][T12218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1010.727951][T12218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1010.744451][T12218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1010.763422][T12218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.798521][ T5768] bridge0: port 3(syz_tun) entered disabled state [ 1010.828728][T12218] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1010.888758][T12218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1011.564393][ T5768] syz_tun (unregistering): left allmulticast mode [ 1011.598732][ T5768] syz_tun (unregistering): left promiscuous mode [ 1011.629372][ T5768] bridge0: port 3(syz_tun) entered disabled state [ 1012.725836][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1012.831562][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1012.856354][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1012.880298][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1012.924489][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1012.934402][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1013.149167][ T51] Bluetooth: hci1: command tx timeout [ 1014.649998][ T6479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.136022][T12216] hsr_slave_0: entered promiscuous mode [ 1015.147076][ T51] Bluetooth: hci6: command tx timeout [ 1015.217559][ T51] Bluetooth: hci1: command tx timeout [ 1015.234702][T12216] hsr_slave_1: entered promiscuous mode [ 1015.244289][T12216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.267949][T12216] Cannot create hsr debugfs directory [ 1015.384638][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.419634][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.446341][T12223] bridge_slave_0: entered allmulticast mode [ 1015.473312][T12223] bridge_slave_0: entered promiscuous mode [ 1015.555679][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.602869][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.642563][T12223] bridge_slave_1: entered allmulticast mode [ 1015.731258][T12223] bridge_slave_1: entered promiscuous mode [ 1016.191908][ T6479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.220364][ T51] Bluetooth: hci6: command tx timeout [ 1017.298269][ T51] Bluetooth: hci1: command tx timeout [ 1019.299849][ T51] Bluetooth: hci6: command tx timeout [ 1019.377626][ T51] Bluetooth: hci1: command tx timeout [ 1019.653402][ T6479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.112867][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.650187][ T6479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.379310][ T51] Bluetooth: hci6: command tx timeout [ 1021.708600][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.646388][T12223] team0: Port device team_slave_0 added [ 1023.765212][T12223] team0: Port device team_slave_1 added [ 1024.639980][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.647194][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.697748][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.758770][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.765936][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.847839][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.524603][T12223] hsr_slave_0: entered promiscuous mode [ 1027.560781][T12223] hsr_slave_1: entered promiscuous mode [ 1027.598494][T12223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.606529][T12223] Cannot create hsr debugfs directory [ 1029.648915][T12246] chnl_net:caif_netlink_parms(): no params data found [ 1033.990549][T12218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1034.048134][T12218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1034.089156][T12218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1034.139684][T12218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1034.156959][T12218] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1034.198934][T12218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1036.444555][T12218] Bluetooth: hci7: command tx timeout [ 1038.498644][T12218] Bluetooth: hci7: command tx timeout [ 1038.635861][T12250] chnl_net:caif_netlink_parms(): no params data found [ 1040.588939][T12218] Bluetooth: hci7: command tx timeout [ 1041.122024][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1041.170735][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1041.186874][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1041.267601][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1041.290341][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1041.313302][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1041.909038][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.971351][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.013816][T12246] bridge_slave_0: entered allmulticast mode [ 1042.091194][T12246] bridge_slave_0: entered promiscuous mode [ 1042.173484][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.218149][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.258557][T12246] bridge_slave_1: entered allmulticast mode [ 1042.333384][T12246] bridge_slave_1: entered promiscuous mode [ 1042.674914][ T51] Bluetooth: hci7: command tx timeout [ 1043.517860][ T51] Bluetooth: hci4: command tx timeout [ 1043.984171][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.638850][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.539329][ T51] Bluetooth: hci4: command tx timeout [ 1045.706296][T12246] team0: Port device team_slave_0 added [ 1046.145310][T12246] team0: Port device team_slave_1 added [ 1046.566083][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.628078][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.635520][T12250] bridge_slave_0: entered allmulticast mode [ 1046.643348][T12250] bridge_slave_0: entered promiscuous mode [ 1046.652202][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.775470][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.799539][T12250] bridge_slave_1: entered allmulticast mode [ 1046.848682][T12250] bridge_slave_1: entered promiscuous mode [ 1047.321640][ T6479] hsr_slave_0: left promiscuous mode [ 1047.363641][ T6479] hsr_slave_1: left promiscuous mode [ 1047.388423][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.396285][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.439198][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.468604][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.500707][ T6479] bridge_slave_1: left allmulticast mode [ 1047.506612][ T6479] bridge_slave_1: left promiscuous mode [ 1047.535591][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.604348][ T6479] bridge_slave_0: left allmulticast mode [ 1047.610857][ T6479] bridge_slave_0: left promiscuous mode [ 1047.617328][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.625285][ T51] Bluetooth: hci4: command tx timeout [ 1047.664648][ T6479] veth1_macvtap: left promiscuous mode [ 1047.678603][ T6479] veth0_macvtap: left promiscuous mode [ 1047.684869][ T6479] veth1_vlan: left promiscuous mode [ 1047.707161][ T6479] veth0_vlan: left promiscuous mode [ 1049.645681][ T6479] bond1 (unregistering): Released all slaves [ 1049.733543][ T51] Bluetooth: hci4: command tx timeout [ 1054.879593][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.886290][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.621150][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 1055.932300][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 1056.625815][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.017823][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.338877][ T6479] bond0 (unregistering): Released all slaves [ 1064.649950][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.656993][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.789458][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.965823][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.252428][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.323735][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.377940][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.597870][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.844860][T12250] team0: Port device team_slave_0 added [ 1067.244550][T12250] team0: Port device team_slave_1 added [ 1071.284428][T12218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1071.370309][T12218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1071.408538][T12218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1071.489571][T12218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1071.528137][T12218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1071.540203][T12218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1074.819655][T12218] Bluetooth: hci5: command tx timeout [ 1075.586124][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1075.637798][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1075.649312][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1075.657748][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1075.671048][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1075.689438][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1076.946459][ T51] Bluetooth: hci5: command tx timeout [ 1077.653870][T12278] chnl_net:caif_netlink_parms(): no params data found [ 1077.871195][ T51] Bluetooth: hci1: command tx timeout [ 1078.393963][ T6479] IPVS: stop unused estimator thread 0... [ 1078.978745][ T51] Bluetooth: hci5: command tx timeout [ 1079.943917][ T51] Bluetooth: hci1: command tx timeout [ 1081.059106][ T51] Bluetooth: hci5: command tx timeout [ 1082.018132][ T51] Bluetooth: hci1: command tx timeout [ 1082.206995][T12294] chnl_net:caif_netlink_parms(): no params data found [ 1084.098809][ T51] Bluetooth: hci1: command tx timeout [ 1084.632623][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.655402][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.792440][T12278] bridge_slave_0: entered allmulticast mode [ 1084.833194][T12278] bridge_slave_0: entered promiscuous mode [ 1085.471586][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.518715][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.526997][T12278] bridge_slave_1: entered allmulticast mode [ 1085.604745][T12278] bridge_slave_1: entered promiscuous mode [ 1086.045652][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.875723][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.642224][T12294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.657688][T12294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.665705][T12294] bridge_slave_0: entered allmulticast mode [ 1087.712441][T12294] bridge_slave_0: entered promiscuous mode [ 1088.638677][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.645983][T12294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.656571][T12294] bridge_slave_1: entered allmulticast mode [ 1088.833593][T12294] bridge_slave_1: entered promiscuous mode [ 1089.301252][T12278] team0: Port device team_slave_0 added [ 1089.830941][T12278] team0: Port device team_slave_1 added [ 1091.640075][T12294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.889175][T12294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.004411][T12317] chnl_net:caif_netlink_parms(): no params data found [ 1093.652732][T12294] team0: Port device team_slave_0 added [ 1093.951180][T12294] team0: Port device team_slave_1 added [ 1095.302657][T12218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1095.338778][T12218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1095.358379][T12218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1095.418636][T12218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1095.429759][T12218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1095.449485][T12218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1097.551691][T12218] Bluetooth: hci6: command tx timeout [ 1099.637483][T12218] Bluetooth: hci6: command tx timeout [ 1100.657215][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.714242][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.828813][T12317] bridge_slave_0: entered allmulticast mode [ 1100.966228][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1101.002418][T12317] bridge_slave_0: entered promiscuous mode [ 1101.043072][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1101.107878][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1101.164978][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.179641][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1101.204479][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1101.225882][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1101.368439][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.376529][T12317] bridge_slave_1: entered allmulticast mode [ 1101.528970][T12317] bridge_slave_1: entered promiscuous mode [ 1101.653522][T12327] chnl_net:caif_netlink_parms(): no params data found [ 1101.698004][ T51] Bluetooth: hci6: command tx timeout [ 1103.378897][ T51] Bluetooth: hci7: command tx timeout [ 1103.644027][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.787722][ T51] Bluetooth: hci6: command tx timeout [ 1104.672520][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.460681][ T51] Bluetooth: hci7: command tx timeout [ 1105.736946][T12317] team0: Port device team_slave_0 added [ 1106.623788][T12317] team0: Port device team_slave_1 added [ 1107.538166][ T51] Bluetooth: hci7: command tx timeout [ 1108.284109][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.308460][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.427730][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.657000][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.787085][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.812028][T12327] bridge_slave_0: entered allmulticast mode [ 1108.848872][T12327] bridge_slave_0: entered promiscuous mode [ 1108.954505][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.025603][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.059007][T12327] bridge_slave_1: entered allmulticast mode [ 1109.101881][T12327] bridge_slave_1: entered promiscuous mode [ 1109.323057][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.371143][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.487708][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.628429][ T51] Bluetooth: hci7: command tx timeout [ 1110.905764][ T6479] bridge_slave_1: left allmulticast mode [ 1110.968312][ T6479] bridge_slave_1: left promiscuous mode [ 1110.974826][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.204689][ T6479] bridge_slave_0: left allmulticast mode [ 1111.261086][ T6479] bridge_slave_0: left promiscuous mode [ 1111.318256][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.544527][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.630233][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.652029][ T6479] bridge_slave_1: left allmulticast mode [ 1111.658809][ T6479] bridge_slave_1: left promiscuous mode [ 1111.708667][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.741390][ T6479] bridge_slave_0: left allmulticast mode [ 1111.747329][ T6479] bridge_slave_0: left promiscuous mode [ 1111.765531][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.912973][ T6479] hsr_slave_0: left promiscuous mode [ 1111.944811][ T6479] hsr_slave_1: left promiscuous mode [ 1111.989094][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.015119][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.035053][ T6479] bridge_slave_1: left allmulticast mode [ 1112.057811][ T6479] bridge_slave_1: left promiscuous mode [ 1112.065606][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.115425][ T6479] bridge_slave_0: left allmulticast mode [ 1112.141578][ T6479] bridge_slave_0: left promiscuous mode [ 1112.178304][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.313952][ T6479] hsr_slave_0: left promiscuous mode [ 1112.330858][ T6479] hsr_slave_1: left promiscuous mode [ 1112.351131][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.392902][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.429696][ T6479] bridge_slave_1: left allmulticast mode [ 1112.435780][ T6479] bridge_slave_1: left promiscuous mode [ 1112.459164][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.536928][ T6479] bridge_slave_0: left allmulticast mode [ 1112.557938][ T6479] bridge_slave_0: left promiscuous mode [ 1112.564614][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.260784][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 1113.635108][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 1113.728631][ T29] INFO: task syz.6.1670:12162 blocked for more than 143 seconds. [ 1113.736637][ T29] Not tainted syzkaller #0 [ 1113.757723][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1113.766564][ T29] task:syz.6.1670 state:D stack:27912 pid:12162 ppid:7985 flags:0x00004004 [ 1113.807900][ T29] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1113.837608][ T29] [ 1113.840791][ T29] __schedule+0x14d2/0x44d0 [ 1113.845725][ T29] ? asan.module_dtor+0x20/0x20 [ 1113.894879][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 1113.938954][ T29] ? __mutex_trylock_common+0x84/0x250 [ 1113.944754][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1113.977904][ T29] schedule+0xbd/0x170 [ 1113.982301][ T29] schedule_preempt_disabled+0x13/0x20 [ 1114.038079][ T29] __mutex_lock+0x6b7/0xcc0 [ 1114.042886][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 1114.097794][ T29] ? comedi_open+0xc0/0x590 [ 1114.102716][ T29] ? mutex_lock_nested+0x20/0x20 [ 1114.243317][ T29] comedi_open+0xc0/0x590 [ 1114.287937][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1114.293464][ T29] chrdev_open+0x59e/0x670 [ 1114.399450][ T29] ? cd_forget+0x160/0x160 [ 1114.404197][ T29] ? fsnotify_perm+0x3ed/0x5e0 [ 1114.498531][ T29] ? cd_forget+0x160/0x160 [ 1114.503359][ T29] do_dentry_open+0x8c6/0x1500 [ 1114.602890][ T29] path_openat+0x274b/0x3190 [ 1114.638891][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 1114.717493][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.725863][ T29] ? verify_lock_unused+0x140/0x140 [ 1114.819344][ T29] ? do_filp_open+0x3d0/0x3d0 [ 1114.877602][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1114.883067][ T29] do_filp_open+0x1c5/0x3d0 [ 1114.921260][ T29] ? vfs_tmpfile+0x490/0x490 [ 1114.957787][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1114.962934][ T29] ? alloc_fd+0x58f/0x630 [ 1115.011377][ T29] do_sys_openat2+0x12c/0x1c0 [ 1115.016354][ T29] ? do_sys_open+0xe0/0xe0 [ 1115.051252][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1115.084660][ T29] ? lock_chain_count+0x20/0x20 [ 1115.097539][ T29] __x64_sys_openat+0x139/0x160 [ 1115.102680][ T29] do_syscall_64+0x55/0xb0 [ 1115.107301][ T29] ? clear_bhb_loop+0x40/0x90 [ 1115.157697][ T29] ? clear_bhb_loop+0x40/0x90 [ 1115.162778][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.217432][ T29] RIP: 0033:0x7f90e098f749 [ 1115.222065][ T29] RSP: 002b:00007f90e17f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1115.251995][ T29] RAX: ffffffffffffffda RBX: 00007f90e0be5fa0 RCX: 00007f90e098f749 [ 1115.285461][ T29] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1115.307705][ T29] RBP: 00007f90e0a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1115.315932][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.361198][ T29] R13: 00007f90e0be6038 R14: 00007f90e0be5fa0 R15: 00007fff0e4ee478 [ 1115.379572][ T29] [ 1115.392413][ T29] [ 1115.392413][ T29] Showing all locks held in the system: [ 1115.451164][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.481232][ T29] 1 lock held by khungtaskd/29: [ 1115.486342][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1115.537573][ T29] 3 locks held by kworker/u4:6/1305: [ 1115.557468][ T29] 3 locks held by kworker/u4:7/1320: [ 1115.562979][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1115.607725][ T29] #1: ffffc90004ddfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1115.627629][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1115.636890][ T29] 3 locks held by kworker/u4:8/3520: [ 1115.642836][ T29] #0: ffff88802c54a938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1115.654583][ T29] #1: ffffc9000ccb7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1115.717648][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x14e0 [ 1115.737423][ T29] 2 locks held by dhcpcd/5430: [ 1115.742305][ T29] #0: ffff888019ee1690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 1115.787761][ T29] #1: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x71f/0xde0 [ 1115.837766][ T29] 2 locks held by getty/5526: [ 1115.842671][ T29] #0: ffff88802d0d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1115.888491][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1115.924708][ T29] 3 locks held by kworker/0:3/5756: [ 1115.947952][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1115.984983][ T29] #1: ffffc900036f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1116.009871][ T29] #2: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1116.041431][ T29] 5 locks held by kworker/u4:11/6479: [ 1116.047002][ T29] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1116.094706][ T29] #1: ffffc90004c0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1116.119840][ T29] #2: ffffffff8dfa8610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 1116.157725][ T29] #3: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa60 [ 1116.191125][ T29] #4: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 1116.228600][ T29] 2 locks held by kworker/u4:12/10991: [ 1116.234280][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1116.310574][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.317397][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.380841][ T29] #1: ffffc90004f2fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1116.419952][ T29] 2 locks held by syz.5.1676/12157: [ 1116.425442][ T29] 1 lock held by syz.6.1670/12162: [ 1116.447609][ T29] #0: ffff88814c4fc0f8 (&dev->mutex#3){+.+.}-{3:3}, at: comedi_open+0xc0/0x590 [ 1116.457323][ T29] 1 lock held by syz-executor/12317: [ 1116.497879][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 1116.522767][ T29] 1 lock held by syz-executor/12327: [ 1116.537876][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 1116.559571][ T29] 1 lock held by syz-executor/12375: [ 1116.581907][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 1116.622475][ T29] 1 lock held by syz-executor/12383: [ 1116.637539][ T29] #0: ffffffff8dfb5448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 1116.656953][ T29] [ 1116.659454][ T29] ============================================= [ 1116.659454][ T29] [ 1116.668589][ T29] NMI backtrace for cpu 1 [ 1116.672986][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1116.680240][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.690366][ T29] Call Trace: [ 1116.693701][ T29] [ 1116.696679][ T29] dump_stack_lvl+0x16c/0x230 [ 1116.701427][ T29] ? preempt_count_add+0x91/0x1a0 [ 1116.706522][ T29] ? show_regs_print_info+0x20/0x20 [ 1116.711791][ T29] ? load_image+0x3b0/0x3b0 [ 1116.716360][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1116.721442][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1116.727645][ T29] ? _printk+0xd0/0x110 [ 1116.731842][ T29] ? load_image+0x3b0/0x3b0 [ 1116.736386][ T29] ? load_image+0x3b0/0x3b0 [ 1116.740924][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1116.747034][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1116.753091][ T29] watchdog+0xf41/0xf80 [ 1116.757286][ T29] ? watchdog+0x1e1/0xf80 [ 1116.761653][ T29] kthread+0x2fa/0x390 [ 1116.765750][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1116.770806][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1116.775421][ T29] ret_from_fork+0x48/0x80 [ 1116.779868][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1116.784493][ T29] ret_from_fork_asm+0x11/0x20 [ 1116.789309][ T29] [ 1116.793315][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1116.798752][ C0] NMI backtrace for cpu 0 [ 1116.798763][ C0] CPU: 0 PID: 1305 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1116.798780][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.798791][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1116.798816][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 1116.798839][ C0] Code: 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 9c 92 c4 0c 48 89 de 5b e9 43 9d 56 00 cc cc cc f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d f0 24 7e 7e 65 8b 15 f1 24 7e 7e 81 e2 00 [ 1116.798854][ C0] RSP: 0018:ffffc90004d8fa70 EFLAGS: 00000293 [ 1116.798867][ C0] RAX: ffffffff885c7533 RBX: ffffffff863da2bf RCX: ffff8880247b8000 [ 1116.798880][ C0] RDX: 0000000000000000 RSI: ffffffff863da2bf RDI: ffff88805f362b40 [ 1116.798892][ C0] RBP: 0000000000000001 R08: ffff88805f362c27 R09: 1ffff1100be6c584 [ 1116.798904][ C0] R10: dffffc0000000000 R11: ffffed100be6c585 R12: dffffc0000000000 [ 1116.798916][ C0] R13: ffff88805f362b40 R14: ffff88805f362b40 R15: dffffc0000000000 [ 1116.798928][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1116.798942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.798954][ C0] CR2: 000055fdefd30a38 CR3: 000000002df98000 CR4: 00000000003506f0 [ 1116.798968][ C0] Call Trace: [ 1116.798974][ C0] [ 1116.798980][ C0] trace_consume_skb+0x1d/0x1c0 [ 1116.799001][ C0] consume_skb+0x73/0x110 [ 1116.799019][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 1116.799048][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1116.799070][ C0] process_scheduled_works+0xa45/0x15b0 [ 1116.799105][ C0] ? assign_work+0x400/0x400 [ 1116.799128][ C0] ? assign_work+0x39e/0x400 [ 1116.799150][ C0] worker_thread+0xa55/0xfc0 [ 1116.799184][ C0] kthread+0x2fa/0x390 [ 1116.799198][ C0] ? pr_cont_work+0x560/0x560 [ 1116.799218][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1116.799233][ C0] ret_from_fork+0x48/0x80 [ 1116.799251][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1116.799267][ C0] ret_from_fork_asm+0x11/0x20 [ 1116.799298][ C0] [ 1116.874091][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1116.874140][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1116.874202][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.874235][ T29] Call Trace: [ 1116.874256][ T29] [ 1116.874279][ T29] dump_stack_lvl+0x16c/0x230 [ 1116.874401][ T29] ? show_regs_print_info+0x20/0x20 [ 1116.874501][ T29] ? load_image+0x3b0/0x3b0 [ 1116.874599][ T29] panic+0x2c0/0x710 [ 1116.874663][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1116.874752][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1116.874816][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1116.874891][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1116.874971][ T29] watchdog+0xf80/0xf80 [ 1116.875050][ T29] ? watchdog+0x1e1/0xf80 [ 1116.875154][ T29] kthread+0x2fa/0x390 [ 1116.875220][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1116.875299][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1116.875352][ T29] ret_from_fork+0x48/0x80 [ 1116.875418][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1116.875472][ T29] ret_from_fork_asm+0x11/0x20 [ 1116.875581][ T29] [ 1116.876750][ T29] Kernel Offset: disabled [ 1117.122297][ T29] Rebooting in 86400 seconds..