last executing test programs: 7m51.770892903s ago: executing program 2 (id=1538): inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) 7m47.595361184s ago: executing program 2 (id=1552): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfa184000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r1, 0x18, 0x0, 0x4) 7m44.070701115s ago: executing program 2 (id=1563): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80006) 7m43.441625604s ago: executing program 2 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f00000002c0)={0x7, 0x3ff, 0xfffffffffffffffd, 0xc06, 0x4, 0x3}) 7m40.832867152s ago: executing program 2 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 7m39.55076297s ago: executing program 2 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 7m24.061229884s ago: executing program 32 (id=1575): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 34.318284543s ago: executing program 4 (id=2985): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000a7a000/0x2000)=nil, 0x2000, 0x1000001, 0x11, 0xffffffffffffffff, 0x40a8a000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x8010, r4, 0x49c7b000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 30.946741682s ago: executing program 4 (id=2986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff}, {0xfffffffe, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe, 0x4}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}}, 0x20044002) 30.074781035s ago: executing program 4 (id=2993): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) writev(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 28.191060382s ago: executing program 4 (id=2996): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) 26.95471312s ago: executing program 4 (id=3002): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x5, @raw_data="53bcc03ff97cada2871efbd3632433411fd9b8bef034ad7ead608a34f948129ba4be19893016391a70d29e6bc1bf84fe9cc5da90f0bda8dc6348dd0936338014cef1c77999e0c7e4c828d6c14cc3eaa80f270bec984f14bb400f235d395f9a5fa9b1cd1cd704ee4d2a8bf4bce4862e9068668837063e83ce37834db9ad0b6e68193d5cb50b1fac931cca723d29742caa0ca97a025ab311bde9e2fc6930785b41cc88697fd91ca86e98e7585ef26959ef776f67c9b7413191f81b96f2bb60285d77cdacf38e139900"}) 26.122023632s ago: executing program 4 (id=3005): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48080, 0x6d) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_rr_get_interval(0x0, &(0x7f0000000100)) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900ffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd7000000000000000020601000000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 20.251393927s ago: executing program 3 (id=3023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x9a1ea7263e15feb3) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$dri(0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) close(r3) fcntl$setstatus(r2, 0x4, 0x42000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 18.780682958s ago: executing program 3 (id=3025): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) close(0x3) 18.274749586s ago: executing program 3 (id=3026): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) readlink(&(0x7f00000008c0)='./cgroup\x00', &(0x7f0000000900)=""/239, 0xef) syz_usb_connect(0x0, 0x6c, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 12.642779507s ago: executing program 5 (id=3045): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x185083) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) sendmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="d96c3c51b0acb24d37ab5961a303e8f849abacd4264654ab77f9b7bfdfb47cbbd9f6601c58f5fe0c2821c40fdd5fbbab664fa84ecf1121328312f511ed213cdbb967f5410c784b3d3f", 0x49}], 0x1}, 0x20000040) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xffffffff, 0x6}, &(0x7f00000014c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 12.510891899s ago: executing program 1 (id=3046): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x1, 0x1) 12.489851979s ago: executing program 5 (id=3047): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x4065, r0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7aa, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x288202, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000940)='./\'{%-\x00', &(0x7f0000000980)='fsuuid', 0x0) recvmmsg(r1, &(0x7f000001e800)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/183, 0xb7}, {0x0}], 0x2}, 0x5}, {{&(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/50, 0x32}, {&(0x7f0000002280)=""/43, 0x2b}], 0x2}, 0x1}, {{&(0x7f0000002300)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f000001e700)=[{&(0x7f0000002380)=""/254, 0xfe}, {&(0x7f000001e940)=""/19, 0x13}, {&(0x7f000001d700)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000002580)=""/189, 0xbd}, {&(0x7f0000002640)=""/150, 0x96}], 0x6, &(0x7f000001e780)=""/78, 0x4e}, 0xc}], 0x3, 0x60000000, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0xc00}, {&(0x7f000001b700)="7cce00f9f2934eab94cbb6b8789b0e6505642f98151c8cc259e24aca037fbf52bfd2db1eda45e6b31edc2da31410b451302dccdd0992e1ab80cab59cb01f084345e812626143614a8d0c4f1e10442562e38dc910a57f95a805a21a417f7547495614f9cb730ccdf23e6ef2b163c9105bbfd5989fe1f2456252f667730c2828eb21c02c4ba1587f3bf502485d1b0da0057effe1e80a3159c23f954181c2b10abc02b5804c7335021c78405c688da1c1bc254cad3363176eadc1a095f2065a36c12ef1c2d09691529a0766c8b2d6f67cd6c06fb83fc35e73aff491d5dbfd7d922089e8217846fd1f9e76295e6534fd1070d8f5e4811a5d0bf965bea795d8dc27fa6bfafa14a30ce6c0fceb5d7c2afb38d195c653ed81fb3cd2c1e68756cbc6e591f4207c38f18bdf3821e60b90418eb76e2769f065d19c9325eb56fee43987addbef58218c5794ee19e52574a0814803e413b481eab3d384672e4245bec57ab04ba99d3ca7f58cafc36900c5baa529b5fe54ff43edb3ab963f2d7f50aed5a3bc4cdbee04be1d24902c2d7cc2f5e071bb6d94e6321d28fc316c451ba2653de8c0dea4fcdfad379b67ef45d95231d96b27972ec3236f86f09466b75e3c04f2b68ce33aca9d2775cba595f054505747b741f36d5a1f81aff24890d3cfe01c4356535532b11b208d686489888edf7379ed9c0b97eac1bb88d03120ad5c0b76ae3d883ea55a4cfbb4e4e2d5d4ee6a3983c5926de3e44adb0780a46e42d62a725de6a22d4b6f7158804839a2feb6b7df1ea9fc265db9c484262c07d68964a27ebc1d45271c152438c6754a3cd2cb377c88697a441108213e11dd90a1fcfdbcdf6190a07fb313ad737d017e1832e4fbbe5ad3e0b5b0d83552c3814f08a5b4cbc83a647b74d12f1e1d33995fb51b5a2265bf8af4ed7aa8cb0d51ffcf11f6e3197215e9b50156a64893618946be79953ab2a9634aa36b6d0d842ccd436c925f1ad2a721b47eac278f967b53e3d3d4aa10a0cd03124bb9d3697f19bb2df88b58c85d7f70a263b399a5c0d92e2d3d931b2cfb2ae35bd154149a2552e62aa41eca10a12483a99ec0183634f08aecaa610ac499186ff9ae8b538eb0122392a4756ae17193b986c05ea5b4e06d5a1bacd50b880169dabd629d03ae35b7f3f72d33d391b55cb1c9850f7f310b8245ca7effe7cad77ccc8e1d1d00973e95d26faffa79611059b064e53e0c1cc54bf79d8d8d5a79e7db9962354606012f6ebad340feba3ac6853f65d4d52c1127dea2b970efb1450c57f2d3a2ddc194f0bac7bf4a0b193f5cec6d65e3459b3523a13f18b5366a839aba18cdc8b6d791fb66e5f17400bf53002d5aaef340a8140211db90ad6c571ac0fb5c20097def154242129210532559e6448a4fed3abe9287a4a9e75a754e4ea9cf3bde3649e5b7cebc0a9b735836806ae3eac1ffce34c1d1c1b9d6707d71fbea0d4c1ad862e387bc2585f1a4089e0eb750a4523478297a037bb8b883f9c6c12928d5adf31b7d2763d2b5ebee7bb527cb57bc2ff014b8243c9e1c7c7fbc12470ba2f8bc6170d03abadbb46678da0b5e7814040b337869fb4c2378a7439e65b3e4d5eb1d47c988e82446ef66e063b7cdd7ce7ec7aea5b75f8177a85cd1f6b699596f8166c38d9ab13753e57843d5912f012a9c19efb802f95b66040392164395c7c566b177ec66da460032e115b2f24ae42a5b9880dc644a0ffde5fe2358fb7dadd30d105ecc76fbd88361e435613720552577d1f1389c0d49dca1c8ad6b758a19703877c99505cbe38673bade3d8ec16392843d34dd9279195702c8150893e82acd2e8e2d6ddcb8ed9f052569d09843a20cc1cac700f17a03100859c64f193edcba62f00c07e1a994bea9b044dcc1234199ca38618dc03d009200f27e09a8b152afb38e8404afde7623c8c19a49cdb46b8e4c967c79a7052b44c85ec7839fa477e70db29787061a0e6fb61c1dad80d6469e5cac7bed7d69557f619c3bebebb936b28be064b153ed17746fd690a5886bf50a39077542bfa6337c1e63782b9f69abceb8ba36ef4f418f2ed5b4fe0c7753ee78294cef83082b253d9ebf6e702cda267d8d91de87dd93b9c9d126fcdd93c202ec39e1e58add9dd97b3dd1d4e7a6447847f81aafb3cd8cc7109cecd3c7aad27786d61cbc65cb286d229f28f149c1287b7c5f4df30b6e8ee0ff4976c9d45b9316857c21cfd581dfcac92fb292c1eb583fff2cca47b71534bd15a219aceba9ff82660a4f2aca99694d3da60425922a6af37c77018246458ef90a2e734bb58a12953c71b25db8c5819f2ff9393f0c45b7c1b7a925f86000642ab0366d66659156f51b3a412bc0020996c6283a16e36fa9ff1c4b50c7f914e13c0a6a4f17f112b710f3e27bf51cd5908b34f1ef93a3ec930dedc79a77467c7981e7e3973e8489177db0daec33a0eb9c6508d5195263bf5c29da967115786b2d7215a47e22263d04a8a4453b3696e75f0a6226a21db276ec318452fc6f803c14f1bef380a76617a86e1461e7d2b2ad29f2cc142e02175d7297de374d08223f11299f04b4dbe494a552d714e02a57567d8bc6fd6ccfc55109672395daee45d059632bae6414cae1407eb6d11e03e4c55e115fde50842276c370bbded4e530957cefc1f88442b3538efd78baabde14c05ee6fcd3437cdf9eb5e0c3ca9e1f3971b220a4556309d74fe8c383817025eada0374320afcbd80a46e11570c46480d6a96c73f776d16d707b043ca54acde873614743dfce959c0a26466c481677fa4fa4cb354f58c39605858225a8444131e4ba7be4945aa1add2801ff8a63717339bbf90b1c25f2c6d23a06fa8686125e93e1c0acd3b1df690edf73b73385a9ec8a83fed47938b748a61d6cf76a8bc83e2e266f910f226cab47cfc37727cf98d722f33d57c880123a796b4cebc12a27d0114e654fc75e722408bebb23df69f26708ea0f475cecf949628754f5a0057b65cbe2a9d5a0fd824cbb0f598876d180d2d1718c6fad4bb1172ff4ed4a46d89a39b159039f8eeaeace03dbcf0a5dc5adb74da2a05d2f739d17d772b43a5ce59973a1183b7c4f57e824f4308ee8f04ec9283b1e9819174cb6e7667f27d51ba73611e276b7d46e449cff4142fa2cbbcbd6f32315301fa2b0489ee4d237a1d876de1f45259a7cad8e34987e17190fcb7f7da414827658f4b7ac10ac331e1c39cc8e31754351c034563bd6367b3a2246d64d0b72741eca1723c8d07cc5f06699af7bc6c21a0f32c569cb5a353a2b59be05020fbaa7a85674a761f0355e4c7351130239c2bf58452de1d276fad6942681323f9f3b3fc17af3468198610d6760691ba0884f67f5716dff09acc04fb9d8489c74fba1e0d468c821a4e963637e6eea5ea43280fb645983db4dc975a18ccb8293e1bd79c282a3a343c6cf63a92ea71e3def040dca2e665a9b426269e0dad7d037d3de43fb7c662ab46bb30635ae45b90f52aded992ff7f767d1d95e2aefe3b3ef8c66a75f6578cdf2864f53cf3f72e667a9eab381fb2df3e52d273c9ab2fb6b76961891f7453fd210970ce767db9d913ca4677f18f7a863f0742cb51a4575297f159c9b0c0b9137a16c13dde6bf0476f3b4d44287e85bc7017d8873e12cb4e8002f1fc10fce642751a22bb28d5c85de0319215b6265f29b1fc13e19365dd7d7c2873cf4bccb746b20a8a4b000d11bac9391d281fceb942bd3af9078d5c49ae512082a0c4d3b6faa2548afca2c47246311dba2221071e38b35cdebb826dba53e8235c726bd522cd99516c734c18c4df5aa64f20cde124a021668ce8e1ecd0e1011a5f7ef1d118b5254e5a5eabdd67bdc4b9c9fc1edd01c63ad0026c260be25163ae1231e7a08dc42a97f00ce4b7535bb4d293dc0aafef463b7c18a2b23d99c38941ef78d54df2aa090fc049af1d40fe005ea3731cc749496ba358c3c764fcbeb5b65df8517310ef51ad8dbabdcef601c5f90f71253e079d5d4a1ad56d8137acf4de6d8e973a78a0c109f615baa82042bc72074455b8b7bf25ce92143cc9d27055ba72da3d1bb59a9472f6e72375397a466f4fd7f467cffcba7f6de20ea2217f1f99e04479fc702b8f4a42b56693c5e4a61d8cb451c8000d8757f7de9f58605296620964aca67e68aec26024a05992cb840bcf7867f03800dab0b109dc8e80d8035499f31cd58069083afc9dbf57e3629b09af45fe58e7f8a5c00a5f4a4961f1850473e7f9555993e0896638a40cea883ba6c611e82d38cb89072f4a25a17f7c99d0aa200434da237298624345acaf8da28992cc1bbba3ac6e2f365e574c8a446b3e42d32ad339f49026d3bc2ebbb08db3d095279b50e2875c6f336059bc0a34fa9c6375678ccad6c5c24f47d964bfae179389a59e5a09a703937dcfb0ea5ee7bc1dfb26c8b9b5e8b8a68d1881e692f64aac227459a7a1e4a1d73e488b7ac7c17b90290098bd7b4a138bad4c4e0ef990aa6cee18b30fa8e03357d170c831e245e798099da1380a8517ba1320b467b640943877bf8afbc03054c2b3f39a8dd70ee3f7db1b351f46ea0b650bc106ee494a11108cb9c1d6184d94013289fa090644931dba6429a5439a4d20ccad23bc8f931f3f3694ff179e1ce0bf34f8965e50c2bb981931f71afad22ce58a6b62fa70da12d8f1780138d4fb9a0f714430168db097f208949d3470d8eab88dd23bcefa5f0e253a61b02ca974c4929309b8111d242bc6128cd829251d2f5c6c1827ad17cf079e786e2556d2f642ee64f185733848e0070c6ef390f402a6c3ed2cdd01d86f465f9107fe0203218c116a447d7ea558ac989483f77a96f3822f81fc17818c9dca8b015e3e904ad8842e511add75abee7f17eb75432bb079fa397d9c18f8749eb7feec6f5668e72043b9ce4ffa86d80c0b1702a4db409664a34ba9e778d3f81d7e33cfcf73050bf15969471a73386d58e4015506a63201a797d6b6a91dbfedac521fc20c2c29a2dae2450f5c05941f26052893e34b6d704cdf50e3e5523929d4de8b0081222f1bd592ddff56f9e3d2842ebcdc1e4d9191ed36869d309c238928ca3747f6ed853d1698f517c81b9dc07f63721d23b719c089fe3adb4706a29948daf1e80aba10e4be144e9691b99729a19fb1be8ca30f7a558eb521aa9e24f0dac272c3282a973d5231dd223479675643ad8932cbeb27f693486fcd99003e0c592931c03fd4ea01e352c59febb821c6872a2e0078db0977109ac3763a7f8d13c381f8cd89cf4cc2b40d78093e8677d030bcb315a5190c41afc6c0c240369d7d22a82d8b6c5c7d35483be1943552409563ad9734588cfe4f1f7d06b595296cd917c5c21a18065f22450f79578edaf005d5446bbd734426aeca84f575b3b3bbe4a35e7ce82edf0b9dc51f93548e6329481ddca99645907909273a9eaf0645333de394bb669df465ef35ee7900974992681c3674ab619c311f8a4765a24b84ab30dfbe9a070c3b5526a13933336195576554e0f423df15a4e311a39eba098c3a613c8a9129cfb587fb1454f00961c12be598dccb17605c9b70281abfbf5e0373b65478d7eae2f8849ccb25eb6985aa1d62282f3bbe986909f7213fceddb788cfe0ce15929c25cfadffc9ff0fb4fbada7d603da9e67b11ac35f7987ea94e6405ed716904dcb03b71c3dddb131154fceebe629bb4cb172d6f360c767cdedbbc6eede5feebee572f8d7c6d34dde11830ad55b482fa1475d43c6c91c8e7d1560775f9ecdc420cb03dc2b56f2845345704a9bc7efba6121b37f75704110c97ac", 0xff8}, {&(0x7f0000000280)}], 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 11.198515129s ago: executing program 5 (id=3050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x9a1ea7263e15feb3) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$dri(0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) close(r2) 8.99744094s ago: executing program 5 (id=3052): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 7.946907386s ago: executing program 1 (id=3054): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 7.59379658s ago: executing program 3 (id=3055): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4ea4, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @empty}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 4.645517903s ago: executing program 0 (id=3056): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x185083) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000880), 0x2}}], 0x34000, 0x81) sendmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="d96c3c51b0acb24d37ab5961a303e8f849abacd4264654ab77f9b7bfdfb47cbbd9f6601c58f5fe0c2821c40fdd5fbbab664fa84ecf1121328312f511ed213cdbb967f5410c784b3d3f", 0x49}], 0x1}, 0x20000040) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xffffffff, 0x6}, &(0x7f00000014c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 4.621248653s ago: executing program 1 (id=3057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf251b00000005001900dc00000008001500c000000008000100", @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 4.620840104s ago: executing program 3 (id=3058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000050d8e04f98a886c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) 4.552241655s ago: executing program 0 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x4, 0x1, 0xffffffff, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0xfd, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x5, 0x6, 0x0, '\x00', 0x4}, {0xa, 0x6, 0x5, '\x00', 0x40}, {0xb8, 0xda, 0xb, '\x00', 0x59}, {0xb, 0x3, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x5}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0xb, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x6, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0xfd}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x1}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x1}, {0x8a, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x1, 0x4, '\x00', 0x7b}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x60, r4, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x90) 3.805741905s ago: executing program 5 (id=3060): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = dup(r1) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x8}, 0x18) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) listen(r5, 0x4) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000580)=""/175, 0xaf}], 0x1) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 3.642556288s ago: executing program 1 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x9a1ea7263e15feb3) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$dri(0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) close(r2) 3.464405251s ago: executing program 0 (id=3063): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) io_uring_setup(0x64ce, 0x0) 2.670792482s ago: executing program 5 (id=3064): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="ed75c8ee939f0d727821b64a1170948a3294894ed9f34a7db6e8d60b74389c26826f4cbb3edf17284164a63cd8a529929564d8f408de52a69cebcf9b5f5c4b541a0300080bf05016ac2cb0f83b2137e182e3dceebb7bdf63eee9f230a89e523e549c293a70ba516ad67b388990b75cb194eb", @ANYRES16=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r2, 0x0) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x0, 0x1002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) msgget$private(0x0, 0x101) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000096a3b737a73532ff6f5b048113e4747c2bee4dce204095dbb184a87e2ceb1cdefdfcb1a98ae20801df4188233780a905af9e89d68243b706cdc0262b99b2d710a51551f60276b0a6d38827118dc5f9c36624e3623fd3cba1df7fb8029ceba19be57a20df39025c48580bb8bd11f961e2f26dbfb207726c6f17e3e896a93dc8ffdd2eefafdbd4288b6807bfa9503f0c9334bb43966b2332c4360f5339dc67cdac11775b64fc10d7f4cd1f03b3d8f3272dee1f1596f4abf"], 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2.638300492s ago: executing program 3 (id=3065): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000901020000000000000000030100a7fa04610e29d24fb22849619a077e3a000000616e06c1da36af6dd7629ea77fd96fe903149fd0061ad365e1167fe9a73d00d43da6442457063bef"], 0x24}}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff82}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 968.195456ms ago: executing program 0 (id=3066): unshare(0x24020400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x1003fd}, {0x9, 0x1003fd}, 0xffffffff, 0x4}) 412.420885ms ago: executing program 1 (id=3067): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="183b00000400000000000000000000001847000008000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa1000000ffff0007010000f8ffffffb702000008000000b703000004000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 298.791766ms ago: executing program 0 (id=3068): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4ea4, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @empty}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 10.51756ms ago: executing program 0 (id=3069): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000946000/0x2000)=nil, 0x2000, 0x1000006, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0x0], 0x24}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) 0s ago: executing program 1 (id=3070): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001040)="f56f50", 0x3) kernel console output (not intermixed with test programs): ot work. [ 578.804995][T10446] vhci_hcd: connection reset by peer [ 578.834478][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 578.854446][ T4292] vhci_hcd: stop threads [ 578.858910][ T4292] vhci_hcd: release socket [ 578.889891][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 578.892315][ T4292] vhci_hcd: disconnect device [ 579.018520][ T2421] pvrusb2: Device being rendered inoperable [ 579.026280][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 579.033524][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 579.052298][ T2421] pvrusb2: Attached sub-driver cx25840 [ 579.058385][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 579.068780][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 579.153382][ T263] block nbd0: Attempted send on invalid socket [ 579.160084][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.413955][T10486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 583.645005][ T9494] vhci_hcd: vhci_device speed not set [ 583.924977][T10485] syz.0.1679 (10485): drop_caches: 2 [ 584.108663][T10485] syz.0.1679 (10485): drop_caches: 2 [ 586.241943][ T5737] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 586.340336][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 586.534178][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1685'. [ 587.284489][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 587.289714][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 587.328848][T10513] netdevsim netdevsim4: Direct firmware load for . [ 587.328848][T10513] failed with error -2 [ 587.428629][ T5737] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 587.586113][ T5737] usb 2-1: config 7 has no interface number 0 [ 587.605356][ T21] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 587.628047][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.775329][ T5737] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 587.785104][T10513] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 587.785104][T10513] [ 588.315499][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 588.332806][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.341401][ T21] pvrusb2: ********** [ 588.360431][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 588.375346][ T5737] usb 2-1: Product: syz [ 588.384079][ T5737] usb 2-1: Manufacturer: syz [ 588.391689][ T21] pvrusb2: Important functionality might not be entirely working. [ 588.403044][ T5737] usb 2-1: SerialNumber: syz [ 588.411506][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 588.436487][ T21] pvrusb2: ********** [ 588.476979][ T2421] pvrusb2: Invalid write control endpoint [ 588.488267][ T5737] comedi comedi5: Wrong number of endpoints [ 588.494169][ T5737] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 588.666487][T10524] pvrusb2: Invalid write control endpoint [ 588.799613][ T2421] pvrusb2: Invalid write control endpoint [ 588.808485][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 588.934731][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 588.942304][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 588.948665][ T4224] usb 6-1: USB disconnect, device number 2 [ 588.959850][ T9065] usb 2-1: USB disconnect, device number 27 [ 588.967322][ T2421] pvrusb2: Device being rendered inoperable [ 588.978075][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 588.985686][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 588.993931][ T2421] pvrusb2: Attached sub-driver cx25840 [ 588.999625][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.009946][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 590.161746][T10540] validate_nla: 42 callbacks suppressed [ 590.161761][T10540] netlink: 'syz.5.1695': attribute type 1 has an invalid length. [ 590.184531][T10540] netlink: 'syz.5.1695': attribute type 1 has an invalid length. [ 590.192366][T10540] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1695'. [ 592.110898][T10571] fuse: Bad value for 'fd' [ 592.361512][ T5737] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 592.561153][T10574] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1705'. [ 592.614622][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 592.704504][ T9494] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 592.744752][ T5737] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 592.758716][ T5737] usb 2-1: config 7 has no interface number 0 [ 592.974578][ T9494] usb 1-1: Using ep0 maxpacket: 8 [ 592.974685][ T5737] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 593.100239][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.114568][ T5737] usb 2-1: Product: syz [ 593.118866][ T5737] usb 2-1: Manufacturer: syz [ 593.123472][ T5737] usb 2-1: SerialNumber: syz [ 593.179257][ T5737] comedi comedi5: Wrong number of endpoints [ 593.184807][ T9494] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 593.201587][ T5737] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 594.066163][ T9494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.089707][ T5737] usb 2-1: USB disconnect, device number 28 [ 594.248742][ T9494] pvrusb2: Hardware description: Terratec Grabster AV400 [ 594.364786][ T4239] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 594.399501][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 594.409325][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 594.429414][T10590] netlink: 'syz.4.1710': attribute type 6 has an invalid length. [ 594.825047][ T9494] pvrusb2: ********** [ 594.832415][ T9494] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.857762][ T9494] pvrusb2: Important functionality might not be entirely working. [ 594.882493][ T9494] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.922799][ T9494] pvrusb2: ********** [ 594.964754][ T2421] pvrusb2: Invalid write control endpoint [ 595.004596][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 595.146037][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.195230][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.199065][T10026] usb 1-1: USB disconnect, device number 24 [ 595.232906][ T4239] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 595.269560][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.377873][ T4239] usb 4-1: config 0 descriptor?? [ 595.660951][ T2421] pvrusb2: Invalid write control endpoint [ 595.690818][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 595.712951][T10602] sp0: Synchronizing with TNC [ 595.874256][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 595.952612][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.071679][ T2421] pvrusb2: Device being rendered inoperable [ 596.140614][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 596.219256][T10583] delete_channel: no stack [ 596.246762][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 596.274532][ T4239] usbhid 4-1:0.0: can't add hid device: -71 [ 596.280592][ T4239] usbhid: probe of 4-1:0.0 failed with error -71 [ 596.365698][ T2421] pvrusb2: Attached sub-driver cx25840 [ 596.431613][T10599] [U] [ 597.099794][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 597.133214][ T4239] usb 4-1: USB disconnect, device number 21 [ 597.184707][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 600.734625][ T2339] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 600.969178][ T4224] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 600.994647][ T2339] usb 4-1: Using ep0 maxpacket: 16 [ 601.138282][ T2339] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 601.164606][ T2339] usb 4-1: config 7 has no interface number 0 [ 601.334480][ T4224] usb 6-1: Using ep0 maxpacket: 8 [ 601.364736][ T2339] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 601.382431][ T2339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.393065][ T2339] usb 4-1: Product: syz [ 601.474711][ T4224] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 601.490149][ T4224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.541111][ T2339] usb 4-1: Manufacturer: syz [ 601.545834][ T2339] usb 4-1: SerialNumber: syz [ 601.576237][ T4224] pvrusb2: Hardware description: Terratec Grabster AV400 [ 601.583276][ T4224] pvrusb2: ********** [ 601.587539][ T4224] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 601.597696][ T4224] pvrusb2: Important functionality might not be entirely working. [ 601.605662][ T4224] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 601.608666][ T2339] comedi comedi5: Wrong number of endpoints [ 601.617231][ T4224] pvrusb2: ********** [ 601.719422][T10649] process 'syz.0.1727' launched './file0' with NULL argv: empty string added [ 601.775944][ T2421] pvrusb2: Invalid write control endpoint [ 602.245035][ T9065] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 602.283739][ T2339] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 602.642466][ T2339] usb 6-1: USB disconnect, device number 3 [ 602.664744][ T9065] usb 5-1: Using ep0 maxpacket: 32 [ 602.718026][T10026] usb 4-1: USB disconnect, device number 22 [ 602.737071][ T2421] pvrusb2: Invalid write control endpoint [ 602.742832][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 602.773759][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 602.784684][ T9065] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 602.792894][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 602.792910][ T2421] pvrusb2: Device being rendered inoperable [ 602.792988][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 602.813491][ T9065] usb 5-1: config 0 has no interface number 0 [ 602.823453][ T9065] usb 5-1: config 0 interface 12 has no altsetting 0 [ 602.838829][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 602.853684][ T2421] pvrusb2: Attached sub-driver cx25840 [ 602.862994][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 602.880571][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 602.954939][ T4224] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 602.994719][ T9065] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 603.018570][ T9065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.033420][ T9065] usb 5-1: Product: syz [ 603.038931][ T9065] usb 5-1: Manufacturer: syz [ 603.043585][ T9065] usb 5-1: SerialNumber: syz [ 603.811312][ T9065] usb 5-1: config 0 descriptor?? [ 603.936339][ T4224] usb 2-1: Using ep0 maxpacket: 16 [ 604.397355][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.934635][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.999931][ T4224] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 605.014720][ T9065] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 605.028362][ T9065] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 605.041317][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.167471][ T9065] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 605.194668][ T9065] f81534: probe of 5-1:0.12 failed with error -71 [ 605.195572][ T4224] usb 2-1: config 0 descriptor?? [ 605.257263][ T9065] usb 5-1: USB disconnect, device number 22 [ 605.274753][ T263] block nbd3: Attempted send on invalid socket [ 605.281048][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.186399][T10654] delete_channel: no stack [ 606.204588][ T4224] usb 2-1: can't set config #0, error -71 [ 606.211304][ T4224] usb 2-1: USB disconnect, device number 29 [ 607.054843][ T2339] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 607.054931][ T21] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 607.417880][T10712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1748'. [ 607.484654][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 607.489686][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 607.514982][ T2339] usb 6-1: Using ep0 maxpacket: 8 [ 607.615207][ T21] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 607.631749][ T21] usb 4-1: config 7 has no interface number 0 [ 607.639587][ T2339] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 607.648814][ T2339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.768995][ T2339] pvrusb2: Hardware description: Terratec Grabster AV400 [ 607.777162][ T2339] pvrusb2: ********** [ 607.781517][ T2339] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 607.793851][ T2339] pvrusb2: Important functionality might not be entirely working. [ 607.801794][ T2339] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 607.825927][ T21] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 607.847457][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.856033][ T2339] pvrusb2: ********** [ 607.860843][ T21] usb 4-1: Product: syz [ 607.868281][ T21] usb 4-1: Manufacturer: syz [ 607.873831][ T21] usb 4-1: SerialNumber: syz [ 607.999387][ T21] comedi comedi5: Wrong number of endpoints [ 608.007088][ T2421] pvrusb2: Invalid write control endpoint [ 608.027843][ T21] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 608.106106][ T2421] pvrusb2: Invalid write control endpoint [ 608.123780][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 608.170568][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 608.394559][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 608.546889][ T2421] pvrusb2: Device being rendered inoperable [ 608.590016][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 608.640753][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 608.670688][ T2421] pvrusb2: Attached sub-driver cx25840 [ 608.677265][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 608.692134][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 608.717489][T10703] pvrusb2: Attempted to execute control transfer when device not ok [ 608.726409][ T21] usb 4-1: USB disconnect, device number 23 [ 608.759939][T10626] usb 6-1: USB disconnect, device number 4 [ 608.824493][ T4224] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 608.868103][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 609.094687][ T4224] usb 1-1: Using ep0 maxpacket: 16 [ 609.246920][ T4224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.300345][ T4224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.340650][ T4224] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 609.496189][ T4224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.061888][ T4224] usb 1-1: config 0 descriptor?? [ 611.045849][T10716] delete_channel: no stack [ 611.144757][ T4224] usbhid 1-1:0.0: can't add hid device: -71 [ 611.162888][ T4224] usbhid: probe of 1-1:0.0 failed with error -71 [ 611.193773][ T4224] usb 1-1: USB disconnect, device number 25 [ 612.218308][T10765] fuse: Unknown parameter '00000000000000000000' [ 615.184681][ T2339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 615.487419][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'. [ 615.504495][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'. [ 615.551848][T10813] netlink: 'syz.0.1783': attribute type 6 has an invalid length. [ 615.654502][ T2339] usb 6-1: Using ep0 maxpacket: 16 [ 615.774679][ T2339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.911242][ T2339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.940969][ T2339] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 615.964496][ T2339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.975049][ T2339] usb 6-1: config 0 descriptor?? [ 616.227560][T10800] delete_channel: no stack [ 616.374583][ T2339] usbhid 6-1:0.0: can't add hid device: -71 [ 616.380734][ T2339] usbhid: probe of 6-1:0.0 failed with error -71 [ 616.431181][ T2339] usb 6-1: USB disconnect, device number 5 [ 619.889902][ T150] block nbd1: Attempted send on invalid socket [ 619.917596][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 620.762278][T10876] Bluetooth: hci4: Frame reassembly failed (-84) [ 620.772518][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 620.781572][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1799'. [ 623.239604][ T9065] Bluetooth: hci4: command 0x1003 tx timeout [ 623.254217][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 623.577399][T10902] delete_channel: no stack [ 623.969053][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.978972][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.004191][T10918] syz.0.1812 sent an empty control message without MSG_MORE. [ 624.605066][ T9065] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 624.820547][T10924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1815'. [ 624.995759][ T4253] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 625.010684][ T9065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 625.376240][ T9065] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 625.459464][ T13] Bluetooth: hci4: command 0x1001 tx timeout [ 625.466671][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 625.504461][ T4253] usb 1-1: Using ep0 maxpacket: 8 [ 625.707563][ T9065] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 625.717128][ T9065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.725752][ T9065] usb 6-1: Product: syz [ 625.730080][ T9065] usb 6-1: Manufacturer: syz [ 625.735084][ T9065] usb 6-1: SerialNumber: syz [ 625.742379][ T9065] usb 6-1: config 0 descriptor?? [ 625.754587][ T4253] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 625.763662][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.772446][T10908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 625.783002][T10908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 625.805302][ T9065] usb 6-1: ucan: probing device on interface #0 [ 625.811590][ T9065] usb 6-1: ucan: invalid EP count (1) [ 625.819572][ T4253] pvrusb2: Hardware description: Terratec Grabster AV400 [ 625.827161][ T4253] pvrusb2: ********** [ 625.831322][ T4253] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 625.842216][ T9065] usb 6-1: ucan: probe failed; try to update the device firmware [ 625.854254][ T4253] pvrusb2: Important functionality might not be entirely working. [ 625.862589][ T4253] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 625.874255][ T4253] pvrusb2: ********** [ 626.134657][ T2421] pvrusb2: Invalid write control endpoint [ 626.376815][T10922] pvrusb2: Invalid write control endpoint [ 626.785941][ T13] usb 1-1: USB disconnect, device number 26 [ 626.819333][ T2421] pvrusb2: Invalid write control endpoint [ 626.826464][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 626.855154][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 626.856721][T10941] delete_channel: no stack [ 626.863293][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 626.892613][ T2421] pvrusb2: Device being rendered inoperable [ 626.900301][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 626.909864][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 626.929607][ T2421] pvrusb2: Attached sub-driver cx25840 [ 627.113827][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 627.263875][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 627.270213][ T4253] usb 6-1: USB disconnect, device number 6 [ 627.495169][ T9065] Bluetooth: hci4: command 0x1009 tx timeout [ 628.586270][ T4224] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 628.954569][ T4224] usb 2-1: Using ep0 maxpacket: 16 [ 629.074607][ T4224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.086898][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 629.096949][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.108474][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.134856][ T4224] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 629.151905][ T4224] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.624571][ T4224] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.633660][ T4224] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.649417][ T4224] usb 2-1: Manufacturer: syz [ 630.654683][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 630.670844][ T4224] usb 2-1: config 0 descriptor?? [ 630.774628][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.792298][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.846852][ T13] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 630.921624][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.986318][ T13] usb 6-1: config 0 descriptor?? [ 630.994639][ T4224] rc_core: IR keymap rc-hauppauge not found [ 631.008852][ T4224] Registered IR keymap rc-empty [ 631.014180][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.086745][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.255924][ T4224] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 631.359984][T10975] delete_channel: no stack [ 631.440734][ T4224] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 631.454568][ T13] usbhid 6-1:0.0: can't add hid device: -71 [ 631.461427][ T13] usbhid: probe of 6-1:0.0 failed with error -71 [ 631.469704][ T13] usb 6-1: USB disconnect, device number 7 [ 631.536585][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.574561][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.614655][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.654651][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.821632][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 631.854557][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 632.624532][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 632.654982][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 633.184476][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 633.224588][ T4224] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 634.604550][ T4224] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 634.612579][ T4224] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 635.135454][ T4224] usb 2-1: USB disconnect, device number 30 [ 638.302448][ T263] block nbd3: Attempted send on invalid socket [ 638.310462][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.435388][T11131] fuse: Unknown parameter 'user_i00000000000000000000' [ 643.099856][ T4224] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 643.324776][ T4224] usb 4-1: device descriptor read/64, error -71 [ 643.594511][ T4224] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 644.504511][ T4224] usb 4-1: device descriptor read/64, error -71 [ 644.624589][ T4224] usb usb4-port1: attempt power cycle [ 644.686196][T11173] fuse: Unknown parameter 'user_i00000000000000000000' [ 644.729298][T11162] loop4: detected capacity change from 0 to 32768 [ 645.035231][ T4224] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 645.124749][ T4224] usb 4-1: device descriptor read/8, error -71 [ 645.497504][ T4224] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 645.594642][ T4224] usb 4-1: device descriptor read/8, error -71 [ 645.726184][ T4224] usb usb4-port1: unable to enumerate USB device [ 646.006745][T11179] loop4: detected capacity change from 0 to 32768 [ 646.334482][ T5737] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 646.368092][T11179] XFS (loop4): Mounting V5 Filesystem [ 646.559379][T11179] XFS (loop4): Ending clean mount [ 646.571696][T11179] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 646.584623][T11179] XFS (loop4): Unmount and run xfs_repair [ 646.590362][T11179] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 646.598816][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 646.604009][T11179] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 646.614800][T11179] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 646.623879][T11179] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 646.635194][T11179] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 646.644062][T11179] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 646.654065][T11179] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 646.663213][T11179] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 646.672610][T11179] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 646.682028][T11179] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 646.705019][T11179] XFS (loop4): Failed to initialize disk quotas. [ 646.734623][ T5737] usb 1-1: config 7 has an invalid interface number: 247 but max is 0 [ 646.742811][ T5737] usb 1-1: config 7 has no interface number 0 [ 646.854522][ T4224] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x8 [ 646.878815][ T21] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 646.901166][ T21] XFS (loop4): Unmount and run xfs_repair [ 646.904431][ T4224] XFS (loop4): Unmount and run xfs_repair [ 646.924907][ T21] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 646.930486][ T4224] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 646.944696][ T21] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 646.963869][ T4224] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 646.970176][ T21] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 646.982872][ T5737] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 647.000046][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.003372][ T4224] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 647.023793][ T5737] usb 1-1: Product: syz [ 647.034308][ T21] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 647.043552][ T4224] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 647.057041][ T5737] usb 1-1: Manufacturer: syz [ 647.084399][ T21] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 647.084497][ T4224] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 647.093411][ T5737] usb 1-1: SerialNumber: syz [ 647.128559][ T4224] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 647.131072][ T21] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 647.172717][ T4224] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 647.177461][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 647.202031][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 647.214499][ T4224] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 647.215568][ T5737] comedi comedi5: Wrong number of endpoints [ 647.241326][ T4224] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 647.250589][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 647.264527][ T5737] ni6501 1-1:7.247: driver 'ni6501' failed to auto-configure device. [ 647.274142][T10626] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 8 error 74 [ 647.299930][T11208] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 648.083214][T10626] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 648.134733][T10626] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 648.321119][T10626] usb 1-1: USB disconnect, device number 27 [ 648.336857][ T4182] XFS (loop4): Unmounting Filesystem [ 648.576503][T11220] comedi comedi2: pcl730: I/O port conflict (0x9e1,4) [ 649.719543][T10026] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 649.745435][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.821580][T11233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.876665][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.984509][T10026] usb 2-1: device descriptor read/64, error -71 [ 650.254713][T10026] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 651.014494][T10026] usb 2-1: device descriptor read/64, error -71 [ 651.813138][T10026] usb usb2-port1: attempt power cycle [ 651.847578][T11249] fuse: Unknown parameter 'user_id00000000000000000000' [ 651.923122][T11253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 652.288616][T11263] Bluetooth: hci4: Frame reassembly failed (-84) [ 652.296770][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 652.305743][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'. [ 652.391479][ T4340] Bluetooth: hci4: Frame reassembly failed (-84) [ 652.407793][ T4340] Bluetooth: hci4: Frame reassembly failed (-84) [ 652.494658][ T2339] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 652.774725][ T2339] usb 5-1: Using ep0 maxpacket: 16 [ 652.896956][ T2339] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 652.921022][ T2339] usb 5-1: config 7 has no interface number 0 [ 653.244808][ T2339] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 653.594273][ T2339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.748665][ T2339] usb 5-1: Product: syz [ 653.834200][ T2339] usb 5-1: Manufacturer: syz [ 654.003069][ T2339] usb 5-1: SerialNumber: syz [ 654.088984][ T2339] comedi comedi5: Wrong number of endpoints [ 654.113492][ T2339] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 654.776595][ T2339] Bluetooth: hci4: command 0x1003 tx timeout [ 655.736874][T11289] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 655.790088][ T4253] usb 5-1: USB disconnect, device number 23 [ 656.780892][T11301] comedi comedi1: 8255: I/O port conflict (0xffffffff80008000,4) [ 656.789838][T11301] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 656.796486][T11301] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 657.744581][T11308] binder: 11302:11308 ioctl c0306201 0 returned -14 [ 658.259448][ T4186] Bluetooth: hci4: command 0x1001 tx timeout [ 658.270293][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 660.574632][ T5737] Bluetooth: hci4: command 0x1009 tx timeout [ 660.654501][ T4186] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 661.460275][ T4186] usb 5-1: Using ep0 maxpacket: 16 [ 661.584651][ T4186] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 661.592855][ T4186] usb 5-1: config 7 has no interface number 0 [ 661.684604][T10026] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 661.784706][ T4186] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 661.793786][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.829352][ T4186] usb 5-1: Product: syz [ 661.833589][ T4186] usb 5-1: Manufacturer: syz [ 661.861375][ T4186] usb 5-1: SerialNumber: syz [ 661.924908][ T4186] comedi comedi5: Wrong number of endpoints [ 661.951778][ T4186] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 662.044678][T10026] usb 1-1: config 0 has no interfaces? [ 662.205531][T10026] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.234575][T10026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.283750][T10026] usb 1-1: Product: syz [ 662.358705][T10026] usb 1-1: Manufacturer: syz [ 662.363389][T10026] usb 1-1: SerialNumber: syz [ 662.507802][T10026] usb 1-1: config 0 descriptor?? [ 662.610120][ T4186] usb 5-1: USB disconnect, device number 24 [ 663.014873][ T2339] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 663.169578][T11326] Set syz1 is full, maxelem 65536 reached [ 663.423185][ T2339] usb 6-1: Using ep0 maxpacket: 8 [ 663.544646][ T2339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.565524][ T2339] usb 6-1: config 0 has no interfaces? [ 663.775470][ T2339] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 663.871283][ T2339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.010254][ T2339] usb 6-1: Product: syz [ 664.196399][ T2339] usb 6-1: Manufacturer: syz [ 664.245519][ T2339] usb 6-1: SerialNumber: syz [ 664.262247][ T2339] usb 6-1: config 0 descriptor?? [ 664.757072][ T4186] usb 6-1: USB disconnect, device number 8 [ 664.812393][ T4253] usb 1-1: USB disconnect, device number 28 [ 665.164654][ T2339] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 665.414675][ T2339] usb 2-1: Using ep0 maxpacket: 16 [ 665.534673][ T2339] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 665.549310][ T2339] usb 2-1: config 7 has no interface number 0 [ 665.724806][ T2339] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 665.733945][ T2339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.747362][ T2339] usb 2-1: Product: syz [ 665.761078][ T2339] usb 2-1: Manufacturer: syz [ 665.787220][ T2339] usb 2-1: SerialNumber: syz [ 665.914287][ T2339] comedi comedi5: Wrong number of endpoints [ 665.930050][ T2339] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 666.036079][T11407] loop5: detected capacity change from 0 to 32768 [ 666.249589][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 666.260023][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'. [ 666.796059][T11407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1973 (11407) [ 666.804547][T11414] netlink: 'syz.4.1975': attribute type 6 has an invalid length. [ 667.066853][ T21] usb 2-1: USB disconnect, device number 34 [ 667.541426][T11407] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 667.934624][T11407] BTRFS info (device loop5): enabling disk space caching [ 667.947066][T11407] BTRFS info (device loop5): enabling auto defrag [ 668.107507][T11407] BTRFS info (device loop5): doing ref verification [ 668.140647][T11407] BTRFS info (device loop5): use no compression [ 668.151018][T11407] BTRFS info (device loop5): force clearing of disk cache [ 668.174864][T11407] BTRFS info (device loop5): disabling disk space caching [ 668.203450][T11407] BTRFS info (device loop5): has skinny extents [ 668.736803][T11407] BTRFS error (device loop5): open_ctree failed: -12 [ 668.957802][ T150] block nbd4: Attempted send on invalid socket [ 668.964101][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.629293][T10531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (10531) [ 671.142068][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'. [ 671.151580][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'. [ 671.164253][T11484] netlink: 'syz.5.1990': attribute type 6 has an invalid length. [ 671.734839][T11491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.741795][T11491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.749622][T11491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.756041][T11491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.763603][T11491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.770042][T11491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.781622][T11491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.788036][T11491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 671.810549][T11491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.817001][T11491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 672.398975][T11505] comedi comedi0: pcmmio: I/O port conflict (0xee,32) [ 673.144791][T11499] loop5: detected capacity change from 0 to 32768 [ 673.227213][T11499] XFS (loop5): Mounting V5 Filesystem [ 673.653516][T11499] XFS (loop5): Ending clean mount [ 674.234833][T11499] XFS (loop5): Quotacheck needed: Please wait. [ 674.389781][T11499] XFS (loop5): Quotacheck: Done. [ 674.907644][T11535] syz.5.1996 (11535): drop_caches: 2 [ 675.514420][ T5737] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 675.554548][T10262] XFS (loop5): Unmounting Filesystem [ 675.754484][ T5737] usb 4-1: Using ep0 maxpacket: 16 [ 675.874649][ T5737] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 675.893085][ T5737] usb 4-1: config 7 has no interface number 0 [ 676.064748][ T5737] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 676.084137][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.104464][ T5737] usb 4-1: Product: syz [ 676.108738][ T5737] usb 4-1: Manufacturer: syz [ 676.134975][ T5737] usb 4-1: SerialNumber: syz [ 676.199214][ T5737] comedi comedi5: Wrong number of endpoints [ 676.213829][ T5737] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 676.891336][T11457] usb 4-1: USB disconnect, device number 28 [ 677.035760][T11550] loop4: detected capacity change from 0 to 65536 [ 677.207811][T11550] XFS (loop4): Mounting V5 Filesystem [ 677.312545][T11550] XFS (loop4): Ending clean mount [ 678.114488][ T9065] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 678.195832][T11574] net_ratelimit: 66 callbacks suppressed [ 678.195849][T11574] IPv6: addrconf: prefix option has invalid lifetime [ 678.476340][ T9065] usb 2-1: device descriptor read/all, error -71 [ 678.634092][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2017'. [ 678.643640][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2017'. [ 678.656563][T11583] netlink: 'syz.5.2017': attribute type 6 has an invalid length. [ 679.639699][T11599] loop5: detected capacity change from 0 to 2048 [ 679.775472][T11599] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 679.794755][T11599] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.823251][ T4182] XFS (loop4): Unmounting Filesystem [ 679.935622][ T4231] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 680.194490][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 680.335398][ T4231] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 680.343649][ T4231] usb 4-1: config 7 has no interface number 0 [ 680.507405][ T9] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.725653][ T4231] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 680.795435][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.909828][ T4231] usb 4-1: Product: syz [ 681.008767][ T4231] usb 4-1: Manufacturer: syz [ 681.092906][ T4231] usb 4-1: SerialNumber: syz [ 681.264389][ T9] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.299243][ T4231] comedi comedi5: Wrong number of endpoints [ 681.307150][ T4231] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 681.426496][ T9] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.798855][ T9] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.829928][T11626] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 681.888722][T11626] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 681.905017][T11626] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 681.913140][T11626] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 681.924610][T11626] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 681.933002][T11626] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 682.032696][T11626] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 682.039839][T11626] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 682.058180][T11626] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 682.074541][T11626] comedi comedi3: 8255: I/O port conflict (0x200,4) [ 682.091610][T11626] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 682.128460][ T7148] usb 4-1: USB disconnect, device number 29 [ 682.137280][T11626] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 682.194550][T11626] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 682.224641][T11626] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 683.431677][ T263] block nbd3: Attempted send on invalid socket [ 683.438285][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 685.406967][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.413617][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.868255][T11666] syz.1.2044 (11666): drop_caches: 2 [ 686.947877][T11668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2046'. [ 687.252506][T11662] loop3: detected capacity change from 0 to 32768 [ 687.742343][T11662] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 687.757603][T11662] BTRFS info (device loop3): enabling auto defrag [ 687.764206][T11662] BTRFS info (device loop3): doing ref verification [ 687.770974][T11662] BTRFS info (device loop3): use no compression [ 687.777533][T11662] BTRFS info (device loop3): force clearing of disk cache [ 687.784887][T11662] BTRFS info (device loop3): max_inline at 4096 [ 687.791341][T11662] BTRFS info (device loop3): disabling free space tree [ 687.798344][T11662] BTRFS info (device loop3): has skinny extents [ 689.275157][T11716] Bluetooth: hci4: Frame reassembly failed (-84) [ 689.583807][T11662] BTRFS error (device loop3): open_ctree failed: -12 [ 689.616476][T10531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (10531) [ 689.673447][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 689.682656][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2051'. [ 690.475639][ T9] device hsr_slave_0 left promiscuous mode [ 690.491145][T11728] comedi comedi0: dt2815: I/O port conflict (0x3,2) [ 690.757901][T11721] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 690.784519][ T9] device hsr_slave_1 left promiscuous mode [ 690.793419][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.806387][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.827690][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.835844][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.883161][ T9] device bridge_slave_1 left promiscuous mode [ 691.016575][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.387970][T10626] Bluetooth: hci4: command 0x1003 tx timeout [ 691.394059][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 691.408646][ T9] device bridge_slave_0 left promiscuous mode [ 691.420051][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.503261][ T9] device veth1_macvtap left promiscuous mode [ 691.515772][ T9] device veth0_macvtap left promiscuous mode [ 691.559485][ T9] device veth1_vlan left promiscuous mode [ 691.583970][ T9] device veth0_vlan left promiscuous mode [ 691.842192][T11754] syz.4.2058 (11754): drop_caches: 2 [ 691.855733][T11754] syz.4.2058 (11754): drop_caches: 2 [ 693.572462][ T7148] Bluetooth: hci4: command 0x1001 tx timeout [ 693.578719][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 693.602205][ T9] team0 (unregistering): Port device team_slave_1 removed [ 693.616940][ T9] team0 (unregistering): Port device team_slave_0 removed [ 693.634087][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.651737][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.717080][ T9] bond0 (unregistering): Released all slaves [ 693.789480][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2054'. [ 693.803557][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2054'. [ 693.812931][T11733] netlink: 'syz.3.2054': attribute type 6 has an invalid length. [ 694.361814][ T263] block nbd5: Attempted send on invalid socket [ 694.370401][ T263] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 695.276909][T11787] loop5: detected capacity change from 0 to 512 [ 695.409483][T11787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 695.444469][T11787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 695.655889][T11721] Bluetooth: hci4: command 0x1009 tx timeout [ 696.300893][T11787] EXT4-fs (loop5): 1 truncate cleaned up [ 696.306871][T11787] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,mb_optimize_scan=0x0000000000000000,stripe=0x0000000000000003,noinit_itable,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 696.664455][T11721] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 696.674926][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 696.674940][ T26] audit: type=1804 audit(1751679359.967:54): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2065" name="/newroot/71/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 696.754517][ T26] audit: type=1800 audit(1751679359.997:55): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2065" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 697.014506][T11721] usb 4-1: Using ep0 maxpacket: 16 [ 697.154631][T11721] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 697.993365][T11721] usb 4-1: config 7 has no interface number 0 [ 698.204798][T11721] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 698.213916][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.254597][T11721] usb 4-1: Product: syz [ 698.258800][T11721] usb 4-1: Manufacturer: syz [ 698.263404][T11721] usb 4-1: SerialNumber: syz [ 698.286937][ T4224] Bluetooth: hci5: command 0x0406 tx timeout [ 698.394826][T11721] comedi comedi5: Wrong number of endpoints [ 698.410939][T11721] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 699.289382][T10626] usb 4-1: USB disconnect, device number 30 [ 699.361367][T11836] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2072'. [ 699.597150][T11820] loop4: detected capacity change from 0 to 32768 [ 699.639066][ T26] audit: type=1326 audit(1751679362.937:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.0.2073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fc4996929 code=0xffff0000 [ 699.779228][T11820] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 699.799115][T11820] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 699.814697][T11820] XFS (loop4): DAX and reflink cannot be used together! [ 702.511706][T11895] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2087'. [ 702.644484][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 702.891214][T11901] Bluetooth: hci4: Frame reassembly failed (-84) [ 702.908949][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 702.918041][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2084'. [ 703.009089][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 703.244960][ T23] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 703.262652][ T23] usb 2-1: config 7 has no interface number 0 [ 703.421997][ T4378] Bluetooth: hci4: Frame reassembly failed (-84) [ 703.471594][ T4378] Bluetooth: hci4: Frame reassembly failed (-84) [ 703.624669][ T23] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 703.648621][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.699252][ T23] usb 2-1: Product: syz [ 703.727240][ T23] usb 2-1: Manufacturer: syz [ 703.757573][ T23] usb 2-1: SerialNumber: syz [ 703.844932][ T23] comedi comedi5: Wrong number of endpoints [ 703.950873][ T23] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 704.531224][ T23] usb 2-1: USB disconnect, device number 37 [ 705.084939][ T23] Bluetooth: hci4: command 0x1003 tx timeout [ 705.105063][ T9] Bluetooth: hci4: Frame reassembly failed (-84) [ 705.157202][ T9] Bluetooth: hci4: Frame reassembly failed (-84) [ 707.415786][T11721] Bluetooth: hci4: command 0x1001 tx timeout [ 707.501793][ T4192] Bluetooth: hci4: sending frame failed (-49) [ 707.678694][T11948] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2098'. [ 707.704712][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 707.764743][T11951] 8021q: VLANs not supported on nlmon0 [ 708.727302][ T9065] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 708.967618][ T4224] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 709.375654][ T9065] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 709.393080][ T9065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.564531][ T4253] Bluetooth: hci4: command 0x1009 tx timeout [ 709.624523][ T4224] usb 4-1: Using ep0 maxpacket: 16 [ 709.706265][ T9065] usb 1-1: config 0 descriptor?? [ 709.924738][ T4224] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 710.183414][ T4224] usb 4-1: config 7 has no interface number 0 [ 710.246466][ T9065] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 710.293619][ T9065] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 710.484553][ T9065] [drm:udl_init] *ERROR* Selecting channel failed [ 710.504532][ T4224] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 710.528447][ T4224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.575735][ T9065] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 710.584589][ T4224] usb 4-1: Product: syz [ 710.623904][ T4224] usb 4-1: Manufacturer: syz [ 710.628917][ T9065] [drm] Initialized udl on minor 2 [ 710.635738][ T4224] usb 4-1: SerialNumber: syz [ 710.659839][ T9065] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 710.681171][ T9065] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 710.694939][ T4224] comedi comedi5: Wrong number of endpoints [ 710.700866][ T4224] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 710.721004][ T9065] usb 1-1: USB disconnect, device number 29 [ 711.538148][ T23] usb 4-1: USB disconnect, device number 31 [ 716.032137][T12051] IPVS: Scheduler module ip_vs_sip not found [ 716.050411][T12054] IPVS: length: 8 != 1690580952 [ 716.088695][T12047] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2122'. [ 716.284877][T12032] netlink: 'syz.3.2117': attribute type 16 has an invalid length. [ 716.436524][T12032] loop3: detected capacity change from 0 to 2048 [ 717.280630][T12032] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 717.425949][T12032] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 717.754908][T12079] Bluetooth: hci4: Frame reassembly failed (-84) [ 717.763037][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 717.772014][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2128'. [ 717.964489][ T4562] Bluetooth: hci4: Frame reassembly failed (-84) [ 718.191819][ T4562] Bluetooth: hci4: Frame reassembly failed (-84) [ 720.047355][T10626] Bluetooth: hci4: command 0x1003 tx timeout [ 722.656702][ T150] block nbd1: Attempted send on invalid socket [ 722.662915][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 723.644488][T10626] Bluetooth: hci4: command 0x1001 tx timeout [ 723.650672][ T4192] Bluetooth: hci4: sending frame failed (-49) [ 723.854488][T10626] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 724.104525][T10626] usb 2-1: Using ep0 maxpacket: 16 [ 724.884639][T10626] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 724.892924][T10626] usb 2-1: config 7 has no interface number 0 [ 725.064670][T10626] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 725.073843][T10626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.126471][T10626] usb 2-1: Product: syz [ 725.130673][T10626] usb 2-1: Manufacturer: syz [ 725.140898][T10626] usb 2-1: SerialNumber: syz [ 725.377811][T10626] comedi comedi5: Wrong number of endpoints [ 725.419016][T10626] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 725.751088][T10626] Bluetooth: hci4: command 0x1009 tx timeout [ 728.115800][ T23] usb 2-1: USB disconnect, device number 38 [ 730.515317][T12269] Bluetooth: hci4: Frame reassembly failed (-84) [ 730.523768][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 730.532923][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2174'. [ 730.561465][ T7148] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 730.588276][ T4292] Bluetooth: hci4: Frame reassembly failed (-84) [ 730.617189][ T4292] Bluetooth: hci4: Frame reassembly failed (-84) [ 730.824680][ T7148] usb 6-1: Using ep0 maxpacket: 16 [ 731.014911][ T7148] usb 6-1: config 7 has an invalid interface number: 247 but max is 0 [ 731.029068][ T7148] usb 6-1: config 7 has no interface number 0 [ 733.131591][ T23] Bluetooth: hci4: command 0x1003 tx timeout [ 733.139336][ T4378] Bluetooth: hci4: Frame reassembly failed (-84) [ 733.194732][ T7148] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 733.236857][ T7148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.325832][ T7148] usb 6-1: Product: syz [ 733.349093][ T7148] usb 6-1: Manufacturer: syz [ 733.377870][ T7148] usb 6-1: SerialNumber: syz [ 733.577539][ T7148] usb 6-1: can't set config #7, error -71 [ 733.601286][ T7148] usb 6-1: USB disconnect, device number 10 [ 735.244735][ T7148] Bluetooth: hci4: command 0x1001 tx timeout [ 735.254758][ T4192] Bluetooth: hci4: sending frame failed (-49) [ 735.869183][T12335] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 735.878263][T12335] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 736.522110][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2191'. [ 737.324566][T10626] Bluetooth: hci4: command 0x1009 tx timeout [ 737.835395][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2193'. [ 739.824605][T12395] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 739.864478][T12395] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 742.093558][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 742.257303][T12432] overlayfs: failed to resolve './file0': -2 [ 743.513887][T12458] Bluetooth: hci4: Frame reassembly failed (-84) [ 743.628156][T11075] Bluetooth: hci4: Frame reassembly failed (-84) [ 743.751169][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 743.760115][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 743.794248][T12455] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2215'. [ 744.298392][ T150] block nbd0: Attempted send on invalid socket [ 744.304747][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 745.802225][ T13] Bluetooth: hci4: command 0x1003 tx timeout [ 746.706247][ T4192] Bluetooth: hci4: sending frame failed (-49) [ 746.864771][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.871102][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.210297][T12509] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 747.533048][T12512] overlayfs: failed to resolve './file0': -2 [ 747.992317][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'. [ 748.549613][ T150] block nbd3: Attempted send on invalid socket [ 748.555957][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.764574][ T13] Bluetooth: hci4: command 0x1001 tx timeout [ 748.771380][ T4192] Bluetooth: hci4: sending frame failed (-49) [ 749.497917][T12570] overlayfs: failed to resolve './file0': -2 [ 751.005487][ T4224] Bluetooth: hci4: command 0x1009 tx timeout [ 753.836986][T12594] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 753.861913][T12594] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 757.058963][T12638] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2259'. [ 757.068235][T12638] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2259'. [ 758.849662][T12664] 9pnet: Insufficient options for proto=fd [ 758.857548][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 760.750098][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 760.759692][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2273'. [ 760.771845][T12680] netlink: 'syz.0.2273': attribute type 6 has an invalid length. [ 761.927698][T12699] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2279'. [ 762.639125][ T7148] kernel write not supported for file /vbi5 (pid: 7148 comm: kworker/1:10) [ 762.681561][ T26] audit: type=1326 audit(1751679425.977:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 762.774700][ T26] audit: type=1326 audit(1751679426.007:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 762.858951][ T26] audit: type=1326 audit(1751679426.007:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 762.971524][ T26] audit: type=1326 audit(1751679426.007:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 762.995096][ T26] audit: type=1326 audit(1751679426.007:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 763.018559][ T26] audit: type=1326 audit(1751679426.007:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 763.087490][ T26] audit: type=1326 audit(1751679426.017:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 763.363373][ T26] audit: type=1326 audit(1751679426.027:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 763.421948][ T26] audit: type=1326 audit(1751679426.027:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 763.466106][T12714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.540259][ T26] audit: type=1326 audit(1751679426.027:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12702 comm="syz.5.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc97669e929 code=0x7ffc0000 [ 768.522633][T12778] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2305'. [ 768.641555][T12785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2304'. [ 769.199681][T12804] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 769.208702][T12804] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 771.574716][ T4267] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 771.874563][ T4267] usb 1-1: Using ep0 maxpacket: 8 [ 772.110086][ T4267] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 772.539286][ T4267] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 772.579787][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.165095][T12857] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 773.174134][T12857] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 775.139517][T11721] usb 1-1: USB disconnect, device number 30 [ 776.408134][T12878] netlink: 'syz.3.2337': attribute type 3 has an invalid length. [ 776.472541][T12901] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 776.481770][T12901] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 780.134479][T11721] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 781.180279][T12943] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 781.189388][T12943] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 781.560201][T12947] set match dimension is over the limit! [ 781.604818][T11721] usb 4-1: Using ep0 maxpacket: 8 [ 781.725143][T11721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 781.734802][T11721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.967676][T11721] pvrusb2: Hardware description: Terratec Grabster AV400 [ 781.975275][T11721] pvrusb2: ********** [ 781.979415][T11721] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 781.993717][T11721] pvrusb2: Important functionality might not be entirely working. [ 782.004260][T11721] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 782.017391][T11721] pvrusb2: ********** [ 782.165887][ T2421] pvrusb2: Invalid write control endpoint [ 782.401412][ T2421] pvrusb2: Invalid write control endpoint [ 782.413011][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 782.423777][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 782.431406][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 782.441439][ T2421] pvrusb2: Device being rendered inoperable [ 782.447482][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 782.462088][ T7148] usb 4-1: USB disconnect, device number 32 [ 783.045408][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 783.126028][ T2421] pvrusb2: Attached sub-driver cx25840 [ 783.131527][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 783.145459][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 786.311048][T12998] [U]  [ 787.856661][ T150] block nbd4: Attempted send on invalid socket [ 787.862914][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 787.894526][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 788.194411][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 788.535190][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 788.568699][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.755093][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 788.819039][ T23] pvrusb2: ********** [ 788.901412][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 788.944435][ T23] pvrusb2: Important functionality might not be entirely working. [ 789.010464][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 789.061080][ T23] pvrusb2: ********** [ 789.144596][ T2421] pvrusb2: Invalid write control endpoint [ 789.157324][T13025] x_tables: duplicate underflow at hook 2 [ 789.224934][ T2421] pvrusb2: Invalid write control endpoint [ 789.230775][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 789.261069][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 789.281397][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 789.311970][ T2421] pvrusb2: Device being rendered inoperable [ 789.324542][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 789.346949][T10626] usb 6-1: USB disconnect, device number 11 [ 789.363939][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 789.385090][ T2421] pvrusb2: Attached sub-driver cx25840 [ 789.390585][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 789.415555][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 791.108664][T13062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.178280][T13067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.681925][T12408] block nbd5: Attempted send on invalid socket [ 792.688335][T12408] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 794.518786][T13113] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 795.034948][T13121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2407'. [ 800.543510][T13165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2425'. [ 802.499430][T13200] netlink: 'syz.0.2426': attribute type 16 has an invalid length. [ 803.249813][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 803.354422][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 803.424629][T13215] netlink: 'syz.3.2438': attribute type 6 has an invalid length. [ 804.143887][T13228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2442'. [ 804.306604][T13232] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 804.503787][T13218] loop5: detected capacity change from 0 to 32768 [ 804.657492][T13218] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2440 (13218) [ 804.818027][T13218] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 805.529103][T13218] BTRFS info (device loop5): using free space tree [ 805.604504][T13218] BTRFS info (device loop5): has skinny extents [ 806.307079][T13218] BTRFS info (device loop5): enabling ssd optimizations [ 807.025654][T12408] block nbd4: Attempted send on invalid socket [ 807.031862][T12408] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 807.084003][T10531] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop5 scanned by udevd (10531) [ 808.349799][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.400480][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.958906][T13331] usb usb8: usbfs: process 13331 (syz.4.2467) did not claim interface 3 before use [ 814.073865][T13377] kAFS: No cell specified [ 816.694577][T13401] xt_TCPMSS: Only works on TCP SYN packets [ 817.034422][T13403] tmpfs: Bad value for 'mpol' [ 817.431034][T13409] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 817.439990][T13409] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 818.011096][T13426] fuse: Bad value for 'fd' [ 819.317762][T13442] block device autoloading is deprecated and will be removed. [ 824.094995][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 824.104321][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 824.113480][T13512] netlink: 'syz.0.2525': attribute type 6 has an invalid length. [ 824.334479][T11721] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 824.684505][T11721] usb 4-1: Using ep0 maxpacket: 16 [ 824.766118][T13519] netlink: 'syz.5.2529': attribute type 1 has an invalid length. [ 824.773938][T13519] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2529'. [ 824.790627][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2529'. [ 825.265112][T11721] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 825.278014][T11721] usb 4-1: config 7 has no interface number 0 [ 825.685698][T11721] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 825.716035][T11721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.745356][T11721] usb 4-1: Product: syz [ 825.758561][T11721] usb 4-1: Manufacturer: syz [ 825.771099][T11721] usb 4-1: SerialNumber: syz [ 825.828102][T11721] comedi comedi5: Wrong number of endpoints [ 825.839818][T11721] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 826.038635][T13303] usb 4-1: USB disconnect, device number 33 [ 829.163464][T13560] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 829.557878][T13570] sg_write: data in/out 2387/14 bytes for SCSI command 0x0-- guessing data in; [ 829.557878][T13570] program syz.1.2543 not setting count and/or reply_len properly [ 830.314714][T11721] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 830.944716][T11721] usb 1-1: Using ep0 maxpacket: 16 [ 831.104755][T11721] usb 1-1: config 7 has an invalid interface number: 247 but max is 0 [ 831.177974][T11721] usb 1-1: config 7 has no interface number 0 [ 831.535316][T11721] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 831.695852][T11721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.790878][T11721] usb 1-1: Product: syz [ 831.833383][T11721] usb 1-1: Manufacturer: syz [ 831.873474][T11721] usb 1-1: SerialNumber: syz [ 832.031692][T11721] comedi comedi5: Wrong number of endpoints [ 832.097126][T11721] ni6501 1-1:7.247: driver 'ni6501' failed to auto-configure device. [ 832.301193][T13594] binder: 13593:13594 ioctl 4018620d 0 returned -22 [ 832.735414][T13594] binder: 13593:13594 ioctl c018620c 0 returned -14 [ 832.745657][T11458] usb 1-1: USB disconnect, device number 31 [ 833.520762][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2557'. [ 834.905454][T13631] sp0: Synchronizing with TNC [ 835.679948][T13626] [U] [ 838.508901][T13642] netlink: 'syz.0.2565': attribute type 10 has an invalid length. [ 839.114051][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.855146][T13642] team0: Device bond0 failed to register rx_handler [ 840.115052][T13659] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 840.816689][T13642] syz.0.2565 (13642) used greatest stack depth: 19648 bytes left [ 841.368804][T13684] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 841.377820][T13684] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 841.735691][T10626] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 842.344604][T10626] usb 2-1: Using ep0 maxpacket: 16 [ 844.000919][T10626] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.011683][T10626] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 844.184619][T10626] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.193907][T10626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.311044][T10626] usb 2-1: Product: syz [ 844.331653][T10626] usb 2-1: Manufacturer: syz [ 844.444186][T10626] usb 2-1: SerialNumber: syz [ 844.523840][T13713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2589'. [ 844.686183][T10626] usb 2-1: can't set config #1, error -71 [ 845.925032][T13724] bridge: RTM_NEWNEIGH with invalid ether address [ 846.531692][T10626] usb 2-1: USB disconnect, device number 39 [ 850.830345][T13764] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.199297][T13744] usb usb5: usbfs: process 13744 (syz.5.2598) did not claim interface 0 before use [ 851.208800][T13744] usb usb5: selecting invalid altsetting 2 [ 856.056454][T13800] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 856.065441][T13800] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 856.272285][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2615'. [ 860.204500][T13302] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 860.817842][T13862] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 860.826780][T13862] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 861.024426][T13302] usb 6-1: device descriptor read/all, error -71 [ 861.816134][T13860] 9pnet_virtio: no channels available for device @ [ 866.525619][T13927] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2650'. [ 869.727135][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.733630][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.165089][T13938] 9pnet_virtio: no channels available for device @ [ 871.174811][T13981] usb usb8: usbfs: process 13981 (syz.5.2665) did not claim interface 3 before use [ 872.691061][T13992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2667'. [ 872.823326][T14000] xt_TCPMSS: Only works on TCP SYN packets [ 873.919905][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 873.919916][ T26] audit: type=1326 audit(1751679537.217:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc4996929 code=0x7fc00000 [ 874.470605][T14021] usb usb8: usbfs: process 14021 (syz.1.2677) did not claim interface 3 before use [ 874.497747][T14027] usb usb8: usbfs: process 14027 (syz.5.2676) did not claim interface 3 before use [ 874.859259][T10626] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 876.604589][T10626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.364476][T10626] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 877.390217][T10626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.404810][T10626] usb 6-1: Product: syz [ 877.409008][T10626] usb 6-1: Manufacturer: syz [ 877.413619][T10626] usb 6-1: SerialNumber: syz [ 877.947211][T10626] usb 6-1: config 0 descriptor?? [ 877.964584][T10626] usb 6-1: can't set config #0, error -71 [ 878.012269][T10626] usb 6-1: USB disconnect, device number 14 [ 880.143887][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'. [ 880.192394][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'. [ 880.203257][T14115] netlink: 'syz.4.2710': attribute type 6 has an invalid length. [ 880.848690][T14122] usb usb8: usbfs: process 14122 (syz.4.2713) did not claim interface 3 before use [ 883.298843][T14165] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 884.994663][T14168] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.093274][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2723'. [ 885.102331][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2723'. [ 885.111409][T14162] netlink: 'syz.0.2723': attribute type 6 has an invalid length. [ 885.120727][T14162] cgroup: Unknown subsys name 'euid' [ 888.011759][T14204] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 888.208820][T14210] usb usb8: usbfs: process 14210 (syz.1.2738) did not claim interface 3 before use [ 889.550132][T10626] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 889.738261][T14228] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.078513][T14224] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2742'. [ 890.114664][T10626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.214029][T14232] cgroup: Unknown subsys name 'euid' [ 890.794404][T10626] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 890.829289][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 890.835098][T10626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.847731][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 890.849181][T10626] usb 2-1: Product: syz [ 890.861038][T14231] netlink: 'syz.3.2743': attribute type 6 has an invalid length. [ 890.866772][T10626] usb 2-1: Manufacturer: syz [ 892.084437][T10626] usb 2-1: SerialNumber: syz [ 892.235348][T10626] usb 2-1: config 0 descriptor?? [ 892.260976][T10626] usb 2-1: can't set config #0, error -71 [ 892.279397][T10626] usb 2-1: USB disconnect, device number 40 [ 892.544420][T13304] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 893.007485][T13304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.285010][T13304] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 893.330681][T13304] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 894.061550][T13304] usb 6-1: Manufacturer: syz [ 895.764988][T13304] usb 6-1: SerialNumber: syz [ 895.846664][T13304] usb 6-1: config 0 descriptor?? [ 895.946608][T14260] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 895.974470][T13304] usb 6-1: can't set config #0, error -71 [ 896.021004][T13304] usb 6-1: USB disconnect, device number 15 [ 897.256490][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2759'. [ 897.265649][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2759'. [ 897.274788][T14286] netlink: 'syz.4.2759': attribute type 6 has an invalid length. [ 897.298819][T14286] cgroup: Unknown subsys name 'euid' [ 899.442148][T14303] sg_write: data in/out 2387/14 bytes for SCSI command 0x0-- guessing data in; [ 899.442148][T14303] program syz.1.2762 not setting count and/or reply_len properly [ 900.366108][T14310] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 903.690987][T14345] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 903.700117][T14345] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 903.827009][T14347] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 904.551657][T14350] usb usb8: usbfs: process 14350 (syz.3.2779) did not claim interface 3 before use [ 904.726778][ T26] audit: type=1326 audit(1751679568.027:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14352 comm="syz.4.2778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff7abfe929 code=0x0 [ 905.674341][ T4267] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 906.808049][ T4267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.024434][ T4267] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 907.033667][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.932932][ T4267] usb 4-1: Product: syz [ 907.937453][ T4267] usb 4-1: Manufacturer: syz [ 907.942060][ T4267] usb 4-1: SerialNumber: syz [ 907.949071][ T4267] usb 4-1: config 0 descriptor?? [ 907.974396][ T4267] usb 4-1: can't set config #0, error -71 [ 907.984599][ T4267] usb 4-1: USB disconnect, device number 34 [ 910.595393][T14419] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 910.604374][T14419] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 911.733247][T14428] usb usb8: usbfs: process 14428 (syz.3.2803) did not claim interface 3 before use [ 912.082575][ T4231] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 912.474715][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.491688][T14437] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 912.805522][ T4231] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 912.899299][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.084390][ T4231] usb 4-1: Product: syz [ 913.090311][ T4231] usb 4-1: Manufacturer: syz [ 913.114484][ T4231] usb 4-1: SerialNumber: syz [ 914.235072][ T4231] usb 4-1: config 0 descriptor?? [ 914.638542][ T4231] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 914.644943][ T4231] ims_pcu: probe of 4-1:0.0 failed with error -22 [ 914.696248][ T4231] usb 4-1: USB disconnect, device number 35 [ 918.805263][T14502] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 918.814342][T14502] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 923.419372][T14565] sg_write: data in/out 2387/14 bytes for SCSI command 0x0-- guessing data in; [ 923.419372][T14565] program syz.0.2843 not setting count and/or reply_len properly [ 926.276704][T14575] chnl_net:caif_netlink_parms(): no params data found [ 926.635314][T14575] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.682801][T14575] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.699579][T14575] device bridge_slave_0 entered promiscuous mode [ 926.708712][T14575] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.716157][T14575] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.724230][T14575] device bridge_slave_1 entered promiscuous mode [ 926.779264][T14575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.800952][T14575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.094842][T11715] Bluetooth: hci0: command 0x0409 tx timeout [ 927.703927][T14575] team0: Port device team_slave_0 added [ 927.723184][T14575] team0: Port device team_slave_1 added [ 928.169259][T14575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.371845][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.614544][T14575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.640268][T14575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.647346][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.652988][T14614] usb usb8: usbfs: process 14614 (syz.3.2856) did not claim interface 3 before use [ 928.684623][T14575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.754556][T14575] device hsr_slave_0 entered promiscuous mode [ 928.793685][T14575] device hsr_slave_1 entered promiscuous mode [ 928.911876][T14575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.989338][T14575] Cannot create hsr debugfs directory [ 929.214429][ T4267] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 929.524619][T11715] Bluetooth: hci0: command 0x041b tx timeout [ 929.624628][ T4267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.804540][ T4267] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 929.854398][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.894923][ T4267] usb 4-1: Product: syz [ 929.899120][ T4267] usb 4-1: Manufacturer: syz [ 929.945847][ T4267] usb 4-1: SerialNumber: syz [ 929.962793][ T4267] usb 4-1: config 0 descriptor?? [ 930.006504][ T4267] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 930.034437][ T4267] ims_pcu: probe of 4-1:0.0 failed with error -22 [ 930.131122][T14575] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.209022][ T4267] usb 4-1: USB disconnect, device number 36 [ 930.252441][T14575] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.510960][T14575] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.166343][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.172682][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.184065][T14575] device vlan2 left promiscuous mode [ 931.227476][T14575] device netdevsim0 left promiscuous mode [ 931.279973][T14575] bridge0: port 3(vlan2) entered disabled state [ 931.403438][T14575] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.158707][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 933.478180][T14575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.507368][T14575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.546969][T14575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.564190][T14575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.205108][ T7148] Bluetooth: hci0: command 0x0419 tx timeout [ 935.270526][T14575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.303132][T14675] usb usb8: usbfs: process 14675 (syz.5.2873) did not claim interface 3 before use [ 935.408555][ T4292] device hsr_slave_0 left promiscuous mode [ 935.424824][ T4292] device hsr_slave_1 left promiscuous mode [ 935.437276][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.452299][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.464894][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.475624][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.489643][ T4292] device bridge_slave_1 left promiscuous mode [ 935.496105][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.504644][ T4292] device bridge_slave_0 left promiscuous mode [ 935.510884][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.539011][ T4292] device veth1_macvtap left promiscuous mode [ 935.551923][ T4292] device veth0_macvtap left promiscuous mode [ 935.566610][ T4292] device veth1_vlan left promiscuous mode [ 935.578586][ T4292] device veth0_vlan left promiscuous mode [ 936.536477][ T13] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 936.713660][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 936.913727][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 936.921716][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.114809][ T13] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 937.157661][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.245137][ T13] usb 6-1: Product: syz [ 937.285497][ T13] usb 6-1: Manufacturer: syz [ 937.330022][ T13] usb 6-1: SerialNumber: syz [ 937.436031][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.444911][ T13] usb 6-1: config 0 descriptor?? [ 937.486497][ T13] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 937.493640][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.505682][ T13] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 937.690745][ T13] usb 6-1: USB disconnect, device number 16 [ 937.792964][ T4292] bond0 (unregistering): Released all slaves [ 937.962054][T14700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.969991][T14700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.987713][T14700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.995460][T14700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.565014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 938.590687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 938.653716][T14575] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.754096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.770717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.781284][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.788507][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.929190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 938.942342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 938.952166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.959257][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.970654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 938.985070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 939.064275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 939.165236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 939.216776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 939.312103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 939.350551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 939.371240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.380414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 939.389298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 939.527431][T14575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.614845][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 939.686519][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 939.762908][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.267483][T14716] ceph: No mds server is up or the cluster is laggy [ 943.431404][ T13] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 943.468922][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 943.484826][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 943.618581][T14575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.731315][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 943.757962][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 943.816508][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 943.831210][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 943.862203][T14575] device veth0_vlan entered promiscuous mode [ 943.873900][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 944.014704][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 944.030073][T14575] device veth1_vlan entered promiscuous mode [ 944.211112][T14575] device veth0_macvtap entered promiscuous mode [ 944.251196][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 944.280203][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 944.328224][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 944.365567][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 944.412247][T14575] device veth1_macvtap entered promiscuous mode [ 944.439654][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.500998][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.578211][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.681132][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.893926][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.138304][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.264668][T14575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.317582][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.328510][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.338463][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.348938][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.362890][T14575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.373498][T14575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.402818][T14575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.515363][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 945.580313][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 945.626259][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 945.650071][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 945.864611][ T4267] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 945.985913][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 946.021950][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 946.062363][T14575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.089682][T14575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.119185][T14575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.132633][T14575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.283231][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.326168][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.363098][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 946.375644][ T4267] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.399848][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.421793][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.456331][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 946.604647][ T4267] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 946.621155][T14769] tipc: Started in network mode [ 946.635325][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.643340][ T4267] usb 6-1: Product: syz [ 946.662692][T14769] tipc: Node identity a61a35cb94ef, cluster identity 4711 [ 946.668106][ T4267] usb 6-1: Manufacturer: syz [ 946.700089][T14769] tipc: Enabled bearer , priority 10 [ 946.826027][ T4267] usb 6-1: SerialNumber: syz [ 946.833510][ T4267] usb 6-1: config 0 descriptor?? [ 946.876180][ T4267] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 947.561309][T14768] tipc: Resetting bearer [ 947.618126][ T4267] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 947.644969][ T4267] usb 6-1: USB disconnect, device number 17 [ 947.705399][ T4231] tipc: Node number set to 854930891 [ 947.748075][T14768] tipc: Disabling bearer [ 952.963825][T14839] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 953.494653][T11715] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 954.104411][T11715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.309829][T11715] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 954.347474][T11715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.392702][T11715] usb 2-1: Product: syz [ 954.406653][T11715] usb 2-1: Manufacturer: syz [ 954.420797][T11715] usb 2-1: SerialNumber: syz [ 954.475034][T11715] usb 2-1: config 0 descriptor?? [ 955.263954][T11715] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 955.270478][T11715] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 955.286276][T11715] usb 2-1: USB disconnect, device number 41 [ 956.713784][ T4292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.060415][ T4292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.178326][ T4292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.249455][T14880] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 957.354825][ T4292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.447901][T14860] chnl_net:caif_netlink_parms(): no params data found [ 957.523582][ T4253] Bluetooth: hci4: command 0x0409 tx timeout [ 958.290792][T14860] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.351934][T14860] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.404667][T14860] device bridge_slave_0 entered promiscuous mode [ 958.452839][ T4292] tipc: Left network mode [ 958.477642][T14860] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.591189][T14860] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.599767][T14860] device bridge_slave_1 entered promiscuous mode [ 958.681166][T14860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.754098][T14860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.058990][T14860] team0: Port device team_slave_0 added [ 959.087959][T14860] team0: Port device team_slave_1 added [ 959.173370][T14860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.194282][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.204317][T11715] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 959.261474][T14860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.305547][T14860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.312656][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.387227][T14860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.521780][T14860] device hsr_slave_0 entered promiscuous mode [ 959.540385][T14860] device hsr_slave_1 entered promiscuous mode [ 959.556829][T14860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.569108][T13302] Bluetooth: hci4: command 0x041b tx timeout [ 959.587777][T14860] Cannot create hsr debugfs directory [ 960.073690][T11715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.233963][ T4292] device hsr_slave_0 left promiscuous mode [ 960.254046][ T4292] device hsr_slave_1 left promiscuous mode [ 960.284811][ T4292] device bridge_slave_1 left promiscuous mode [ 960.311549][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.357785][ T4292] device bridge_slave_0 left promiscuous mode [ 960.394158][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.463381][ T4292] device veth1_macvtap left promiscuous mode [ 960.478100][ T4292] device veth0_macvtap left promiscuous mode [ 960.486913][ T4292] device veth1_vlan left promiscuous mode [ 960.492732][ T4292] device veth0_vlan left promiscuous mode [ 960.736874][T11715] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 960.753980][T11715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.933714][T11715] usb 2-1: Product: syz [ 960.938383][T11715] usb 2-1: Manufacturer: syz [ 960.942996][T11715] usb 2-1: SerialNumber: syz [ 960.957683][T11715] usb 2-1: config 0 descriptor?? [ 960.996245][T11715] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 961.654536][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 961.725760][T11715] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 961.734540][T11715] usb 2-1: USB disconnect, device number 42 [ 961.883502][ T4292] bond1 (unregistering): Released all slaves [ 962.063986][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 962.084189][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 962.108140][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.131805][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.148504][ T7148] infiniband syz1: ib_query_port failed (-19) [ 962.227195][ T4292] bond0 (unregistering): Released all slaves [ 962.427993][ T4267] bond0 speed is unknown, defaulting to 1000 [ 963.724512][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 963.869294][T14860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 964.139372][T14860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 964.646572][T14860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 964.715676][T14860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 965.004433][ T7148] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 965.073762][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.127722][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 965.154836][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 965.177904][T14860] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.204724][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 965.223862][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 965.244576][ T7148] usb 2-1: Using ep0 maxpacket: 16 [ 965.250105][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.257218][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.305070][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 965.332299][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 965.366340][ T7148] usb 2-1: config 7 has an invalid interface number: 247 but max is 0 [ 965.383309][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 965.392167][ T7148] usb 2-1: config 7 has no interface number 0 [ 965.415266][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.422339][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.464748][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 965.492288][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 965.516184][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 965.551500][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 965.565180][ T7148] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 965.584878][ T7148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.589474][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 965.597718][ T7148] usb 2-1: Product: syz [ 965.641819][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 965.665292][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 965.692606][ T7148] usb 2-1: Manufacturer: syz [ 965.697533][ T7148] usb 2-1: SerialNumber: syz [ 965.706669][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 965.769708][ T7148] comedi comedi5: Wrong number of endpoints [ 965.789406][ T7148] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 965.905257][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 966.007978][T14860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.629879][T14860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 966.669778][ T2339] usb 2-1: USB disconnect, device number 43 [ 966.766516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 966.798561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 967.234878][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 967.255842][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 967.327103][T14860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.458281][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 967.483937][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 967.600759][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 967.620185][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 967.666570][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 967.690032][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 967.808575][T14860] device veth0_vlan entered promiscuous mode [ 968.198318][T11715] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 969.221726][T14860] device veth1_vlan entered promiscuous mode [ 969.284667][T11715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.309635][T15083] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 969.402413][T15087] bond1: (slave gretap1): making interface the new active one [ 969.415718][T15087] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 969.464197][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 969.501725][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 969.504572][T11715] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 969.521822][T14860] device veth0_macvtap entered promiscuous mode [ 969.557784][T14860] device veth1_macvtap entered promiscuous mode [ 969.575363][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.586161][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.596623][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.607478][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.617634][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.645425][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.711953][T11715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.720572][T11715] usb 1-1: Product: syz [ 969.752616][T11715] usb 1-1: Manufacturer: syz [ 969.762969][T11715] usb 1-1: SerialNumber: syz [ 969.799218][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.835787][T11715] usb 1-1: config 0 descriptor?? [ 970.008854][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.024828][T14860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.053668][T11715] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 970.062306][T11715] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 970.086686][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 970.102332][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 970.244062][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 970.263259][ T4231] usb 1-1: USB disconnect, device number 32 [ 970.275511][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 970.288251][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.329316][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.349700][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.398388][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.435400][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.464422][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.480935][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.506127][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.553442][T14860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.580806][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 970.595345][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 970.616916][T14860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.632473][T14860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.651678][T14860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.672328][T14860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.992694][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.201180][T10465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.220621][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.238159][T10465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.301274][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 971.323641][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 973.465236][T15136] overlayfs: failed to resolve './file1': -2 [ 977.845492][T15163] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 977.853518][T15163] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2990'. [ 977.893173][T15165] netlink: 'syz.0.2991': attribute type 6 has an invalid length. [ 978.107224][T15168] Unknown options in mask 5 [ 978.583259][T15173] overlayfs: failed to resolve './file1': -2 [ 980.715595][T15189] xt_SECMARK: invalid mode: 2 [ 981.079967][T15194] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 981.088970][T15194] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 982.862122][T15211] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 983.201928][T15208] overlayfs: failed to resolve './file1': -2 [ 983.849915][T15226] program syz.1.3010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.295123][T15240] usb usb8: usbfs: process 15240 (syz.3.3015) did not claim interface 0 before use [ 987.145239][T15254] overlayfs: failed to resolve './file1': -2 [ 987.316697][ T4340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.404489][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 987.794939][ T4340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.093261][ T4340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.141773][T15241] chnl_net:caif_netlink_parms(): no params data found [ 988.234201][ T4340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.284347][T15275] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 989.293356][T15275] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 989.626790][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 990.375992][T15241] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.392192][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.420860][T15241] device bridge_slave_0 entered promiscuous mode [ 990.517331][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.547312][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.623951][T10465] Bluetooth: hci2: Frame reassembly failed (-84) [ 990.633923][T10465] Bluetooth: hci2: Frame reassembly failed (-84) [ 990.650341][T15241] device bridge_slave_1 entered promiscuous mode [ 990.721526][T15241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.765223][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 990.774143][T15298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 990.802033][T15241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.998432][T15241] team0: Port device team_slave_0 added [ 991.184600][T15308] overlayfs: failed to resolve './file1': -2 [ 991.258621][T15241] team0: Port device team_slave_1 added [ 991.843634][T15241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.845554][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 991.934900][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.966164][T15241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.089337][T15241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.107081][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.169750][T15241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.243377][T15241] device hsr_slave_0 entered promiscuous mode [ 992.390347][T15241] device hsr_slave_1 entered promiscuous mode [ 992.429094][T15241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.439869][T15241] Cannot create hsr debugfs directory [ 992.614826][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.725437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.864471][ T4267] Bluetooth: hci2: command 0x1003 tx timeout [ 992.871106][ T4192] Bluetooth: hci2: sending frame failed (-49) [ 993.940499][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 993.964113][ T4340] device hsr_slave_0 left promiscuous mode [ 993.970148][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 993.996691][ T4340] device hsr_slave_1 left promiscuous mode [ 994.012526][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.033582][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.061910][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.084133][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.103635][ T4340] device bridge_slave_1 left promiscuous mode [ 994.116756][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.135407][ T4340] device bridge_slave_0 left promiscuous mode [ 994.141611][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.177274][ T4340] device veth1_macvtap left promiscuous mode [ 994.183676][ T4340] device veth0_macvtap left promiscuous mode [ 994.189846][ T4340] device veth1_vlan left promiscuous mode [ 994.196062][ T4340] device veth0_vlan left promiscuous mode [ 994.600830][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 994.630896][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 994.660918][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.691314][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.817621][ T4340] bond0 (unregistering): Released all slaves [ 994.934500][ T4253] Bluetooth: hci2: command 0x1001 tx timeout [ 994.940678][ T4192] Bluetooth: hci2: sending frame failed (-49) [ 995.380311][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3043'. [ 996.105346][T15241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 996.208700][T15241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 996.235118][T15241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 996.262694][T15241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 996.410169][T15375] xt_TCPMSS: Only works on TCP SYN packets [ 997.014533][ T4253] Bluetooth: hci2: command 0x1009 tx timeout [ 997.394773][T15241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.838239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 998.244897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 998.303893][T15241] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.091752][T11075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.529000][T11075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.598703][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.605850][T11075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.614002][T11075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 999.664451][T15280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.673126][T15280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.893202][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.900344][T15280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.919399][T15280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.664465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.687039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.850509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.900026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.293792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1003.928575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1004.013975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1004.063656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1004.246208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1004.715545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1004.812557][T15241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1007.330691][T15466] loop9: detected capacity change from 0 to 7 [ 1007.350215][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.361386][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.529316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1007.547411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1007.557921][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.568861][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.577406][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.588309][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1007.649743][T15241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.245414][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.256389][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.338671][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.349627][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.357832][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.368805][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.407360][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.418282][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.426763][T15466] ldm_validate_partition_table(): Disk read failed. [ 1008.464378][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.475324][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.493984][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.504931][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.512991][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1008.523948][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.552967][T15466] Dev loop9: unable to read RDB block 0 [ 1008.569823][T15466] loop9: unable to read partition table [ 1008.575707][T15466] loop9: partition table beyond EOD, truncated [ 1008.581915][T15466] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1008.581915][T15466] ) failed (rc=-5) [ 1008.695433][T15466] [ 1008.697806][T15466] ====================================================== [ 1008.704828][T15466] WARNING: possible circular locking dependency detected [ 1008.711860][T15466] 5.15.186-syzkaller #0 Not tainted [ 1008.717060][T15466] ------------------------------------------------------ [ 1008.724078][T15466] syz.5.3064/15466 is trying to acquire lock: [ 1008.730143][T15466] ffff88805ec13938 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 1008.739902][T15466] [ 1008.739902][T15466] but task is already holding lock: [ 1008.747265][T15466] ffff88801fff5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1008.756067][T15466] [ 1008.756067][T15466] which lock already depends on the new lock. [ 1008.756067][T15466] [ 1008.766451][T15466] [ 1008.766451][T15466] the existing dependency chain (in reverse order) is: [ 1008.775447][T15466] [ 1008.775447][T15466] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 1008.782910][T15466] __mutex_lock_common+0x1eb/0x2390 [ 1008.788717][T15466] mutex_lock_killable_nested+0x17/0x20 [ 1008.794772][T15466] lo_open+0x6a/0x100 [ 1008.799271][T15466] blkdev_get_whole+0x90/0x390 [ 1008.804547][T15466] blkdev_get_by_dev+0x2d0/0xa60 [ 1008.810000][T15466] blkdev_open+0x12d/0x2c0 [ 1008.814922][T15466] do_dentry_open+0x7ff/0xf80 [ 1008.820192][T15466] path_openat+0x2682/0x2f30 [ 1008.825287][T15466] do_filp_open+0x1b3/0x3e0 [ 1008.830303][T15466] do_sys_openat2+0x142/0x4a0 [ 1008.835491][T15466] __x64_sys_openat+0x135/0x160 [ 1008.840845][T15466] do_syscall_64+0x4c/0xa0 [ 1008.845790][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1008.852192][T15466] [ 1008.852192][T15466] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 1008.859989][T15466] __mutex_lock_common+0x1eb/0x2390 [ 1008.865809][T15466] mutex_lock_nested+0x17/0x20 [ 1008.871091][T15466] blkdev_get_by_dev+0x157/0xa60 [ 1008.876561][T15466] swsusp_check+0x9b/0x2a0 [ 1008.881754][T15466] software_resume+0xc6/0x3b0 [ 1008.886951][T15466] resume_store+0xe4/0x130 [ 1008.891885][T15466] kernfs_fop_write_iter+0x379/0x4c0 [ 1008.897684][T15466] vfs_write+0x712/0xd00 [ 1008.902445][T15466] ksys_write+0x14d/0x250 [ 1008.907291][T15466] do_syscall_64+0x4c/0xa0 [ 1008.912218][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1008.918625][T15466] [ 1008.918625][T15466] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 1008.927126][T15466] __mutex_lock_common+0x1eb/0x2390 [ 1008.932839][T15466] mutex_lock_nested+0x17/0x20 [ 1008.938117][T15466] software_resume+0x7c/0x3b0 [ 1008.943302][T15466] resume_store+0xe4/0x130 [ 1008.948588][T15466] kernfs_fop_write_iter+0x379/0x4c0 [ 1008.954380][T15466] vfs_write+0x712/0xd00 [ 1008.959130][T15466] ksys_write+0x14d/0x250 [ 1008.963961][T15466] do_syscall_64+0x4c/0xa0 [ 1008.968881][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1008.975284][T15466] [ 1008.975284][T15466] -> #3 (&of->mutex){+.+.}-{3:3}: [ 1008.982479][T15466] __mutex_lock_common+0x1eb/0x2390 [ 1008.988198][T15466] mutex_lock_nested+0x17/0x20 [ 1008.993468][T15466] kernfs_seq_start+0x51/0x3c0 [ 1008.998748][T15466] seq_read_iter+0x3c4/0xd50 [ 1009.003839][T15466] vfs_read+0x725/0xcf0 [ 1009.008510][T15466] ksys_read+0x14d/0x250 [ 1009.013275][T15466] do_syscall_64+0x4c/0xa0 [ 1009.018223][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1009.024630][T15466] [ 1009.024630][T15466] -> #2 (&p->lock){+.+.}-{3:3}: [ 1009.031644][T15466] __mutex_lock_common+0x1eb/0x2390 [ 1009.037348][T15466] mutex_lock_nested+0x17/0x20 [ 1009.042623][T15466] seq_read_iter+0xad/0xd50 [ 1009.047738][T15466] do_iter_readv_writev+0x497/0x600 [ 1009.053465][T15466] do_iter_read+0x20b/0x7c0 [ 1009.058489][T15466] loop_process_work+0x18dc/0x2480 [ 1009.064122][T15466] process_one_work+0x863/0x1000 [ 1009.069563][T15466] worker_thread+0xaa8/0x12a0 [ 1009.074856][T15466] kthread+0x436/0x520 [ 1009.079438][T15466] ret_from_fork+0x1f/0x30 [ 1009.084403][T15466] [ 1009.084403][T15466] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1009.093509][T15466] process_one_work+0x7bf/0x1000 [ 1009.099049][T15466] worker_thread+0xaa8/0x12a0 [ 1009.104248][T15466] kthread+0x436/0x520 [ 1009.108826][T15466] ret_from_fork+0x1f/0x30 [ 1009.113752][T15466] [ 1009.113752][T15466] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 1009.121840][T15466] __lock_acquire+0x2c33/0x7c60 [ 1009.127291][T15466] lock_acquire+0x197/0x3f0 [ 1009.132300][T15466] flush_workqueue+0x142/0x1380 [ 1009.137663][T15466] drain_workqueue+0xcf/0x380 [ 1009.142848][T15466] destroy_workqueue+0x7b/0xb20 [ 1009.148211][T15466] __loop_clr_fd+0x234/0xb90 [ 1009.153331][T15466] blkdev_put+0x53f/0x7d0 [ 1009.158186][T15466] blkdev_close+0x76/0xa0 [ 1009.163026][T15466] __fput+0x234/0x930 [ 1009.167528][T15466] task_work_run+0x125/0x1a0 [ 1009.172655][T15466] get_signal+0x1222/0x12c0 [ 1009.177675][T15466] arch_do_signal_or_restart+0xc1/0x1300 [ 1009.183833][T15466] exit_to_user_mode_loop+0x9e/0x130 [ 1009.189631][T15466] exit_to_user_mode_prepare+0xb1/0x140 [ 1009.195702][T15466] syscall_exit_to_user_mode+0x16/0x40 [ 1009.201687][T15466] do_syscall_64+0x58/0xa0 [ 1009.206627][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1009.213041][T15466] [ 1009.213041][T15466] other info that might help us debug this: [ 1009.213041][T15466] [ 1009.223270][T15466] Chain exists of: [ 1009.223270][T15466] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 1009.223270][T15466] [ 1009.236762][T15466] Possible unsafe locking scenario: [ 1009.236762][T15466] [ 1009.244209][T15466] CPU0 CPU1 [ 1009.249584][T15466] ---- ---- [ 1009.254942][T15466] lock(&lo->lo_mutex); [ 1009.259175][T15466] lock(&disk->open_mutex); [ 1009.266264][T15466] lock(&lo->lo_mutex); [ 1009.273011][T15466] lock((wq_completion)loop9); [ 1009.277855][T15466] [ 1009.277855][T15466] *** DEADLOCK *** [ 1009.277855][T15466] [ 1009.285986][T15466] 2 locks held by syz.5.3064/15466: [ 1009.291169][T15466] #0: ffff88801fce1918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1009.300547][T15466] #1: ffff88801fff5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1009.309759][T15466] [ 1009.309759][T15466] stack backtrace: [ 1009.315647][T15466] CPU: 1 PID: 15466 Comm: syz.5.3064 Not tainted 5.15.186-syzkaller #0 [ 1009.323914][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1009.333956][T15466] Call Trace: [ 1009.337229][T15466] [ 1009.340151][T15466] dump_stack_lvl+0x168/0x230 [ 1009.344850][T15466] ? load_image+0x3b0/0x3b0 [ 1009.349427][T15466] ? show_regs_print_info+0x20/0x20 [ 1009.354651][T15466] ? print_circular_bug+0x12b/0x1a0 [ 1009.359838][T15466] check_noncircular+0x274/0x310 [ 1009.364299][ T13] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1009.364787][T15466] ? add_chain_block+0x940/0x940 [ 1009.364805][T15466] ? lockdep_lock+0xdc/0x1e0 [ 1009.381840][T15466] ? mark_lock+0x94/0x320 [ 1009.386180][T15466] ? _find_first_zero_bit+0xce/0xf0 [ 1009.391385][T15466] __lock_acquire+0x2c33/0x7c60 [ 1009.396228][T15466] ? __lock_acquire+0x13ad/0x7c60 [ 1009.401247][T15466] ? verify_lock_unused+0x140/0x140 [ 1009.406471][T15466] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1009.412447][T15466] ? verify_lock_unused+0x140/0x140 [ 1009.417630][T15466] ? verify_lock_unused+0x140/0x140 [ 1009.422817][T15466] ? memset+0x1e/0x40 [ 1009.426804][T15466] lock_acquire+0x197/0x3f0 [ 1009.431328][T15466] ? flush_workqueue+0x126/0x1380 [ 1009.436342][T15466] ? finish_task_switch+0x1e4/0x640 [ 1009.441528][T15466] ? __mutex_trylock_common+0x14f/0x250 [ 1009.447069][T15466] ? read_lock_is_recursive+0x10/0x10 [ 1009.452430][T15466] ? __init_swait_queue_head+0xa5/0x150 [ 1009.457968][T15466] flush_workqueue+0x142/0x1380 [ 1009.462803][T15466] ? flush_workqueue+0x126/0x1380 [ 1009.467817][T15466] ? __lock_acquire+0x7c60/0x7c60 [ 1009.472831][T15466] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1009.478197][T15466] ? rcu_work_rcufn+0x110/0x110 [ 1009.483037][T15466] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1009.488665][T15466] ? finish_wait+0xc0/0x1d0 [ 1009.493159][T15466] drain_workqueue+0xcf/0x380 [ 1009.497827][T15466] destroy_workqueue+0x7b/0xb20 [ 1009.502666][T15466] __loop_clr_fd+0x234/0xb90 [ 1009.507254][T15466] ? lo_release+0x172/0x1f0 [ 1009.511744][T15466] ? lo_open+0x100/0x100 [ 1009.515973][T15466] blkdev_put+0x53f/0x7d0 [ 1009.520291][T15466] blkdev_close+0x76/0xa0 [ 1009.524613][T15466] ? blkdev_open+0x2c0/0x2c0 [ 1009.529199][T15466] __fput+0x234/0x930 [ 1009.533180][T15466] task_work_run+0x125/0x1a0 [ 1009.537770][T15466] get_signal+0x1222/0x12c0 [ 1009.542264][T15466] ? kasan_save_stack+0x4b/0x60 [ 1009.547121][T15466] ? kasan_save_stack+0x35/0x60 [ 1009.551960][T15466] ? kasan_record_aux_stack+0xb8/0x100 [ 1009.557417][T15466] ? task_work_add+0x2f/0x1d0 [ 1009.562087][T15466] ? fput_many+0xde/0x1a0 [ 1009.566415][T15466] ? __se_sys_ioctl+0x157/0x170 [ 1009.571258][T15466] ? do_syscall_64+0x4c/0xa0 [ 1009.575839][T15466] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1009.581903][T15466] arch_do_signal_or_restart+0xc1/0x1300 [ 1009.587540][T15466] ? get_sigframe_size+0x10/0x10 [ 1009.592606][T15466] ? kick_process+0xd4/0x140 [ 1009.597199][T15466] ? exit_to_user_mode_loop+0x3b/0x130 [ 1009.602652][T15466] exit_to_user_mode_loop+0x9e/0x130 [ 1009.607933][T15466] exit_to_user_mode_prepare+0xb1/0x140 [ 1009.613471][T15466] syscall_exit_to_user_mode+0x16/0x40 [ 1009.618924][T15466] do_syscall_64+0x58/0xa0 [ 1009.623330][T15466] ? clear_bhb_loop+0x30/0x80 [ 1009.627997][T15466] ? clear_bhb_loop+0x30/0x80 [ 1009.632670][T15466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1009.638572][T15466] RIP: 0033:0x7fc97669e929 [ 1009.642983][T15466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.662602][T15466] RSP: 002b:00007fc9744c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.671018][T15466] RAX: 0000000000000000 RBX: 00007fc9768c6160 RCX: 00007fc97669e929 [ 1009.678979][T15466] RDX: 0000200000000140 RSI: 0000000000004c0a RDI: 0000000000000006 [ 1009.686941][T15466] RBP: 00007fc976720b39 R08: 0000000000000000 R09: 0000000000000000 [ 1009.694899][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.702862][T15466] R13: 0000000000000000 R14: 00007fc9768c6160 R15: 00007ffc93f139b8 [ 1009.710834][T15466] [ 1009.713901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1009.863039][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1009.943288][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1010.148939][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1010.165527][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1010.186146][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1010.196022][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1010.206721][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1010.216727][T15241] device veth0_vlan entered promiscuous mode [ 1010.229778][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.245250][T15241] device veth1_vlan entered promiscuous mode [ 1010.259262][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1010.283273][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.290312][T15241] device veth0_macvtap entered promiscuous mode [ 1010.300162][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1010.308283][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1010.316320][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1010.325083][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1010.344932][T15241] device veth1_macvtap entered promiscuous mode [ 1010.355259][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1010.373761][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1010.390221][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.409236][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.419384][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.429993][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.439866][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.450688][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.461463][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.475140][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.486748][T15241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.495116][T15280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1010.505370][T15280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1010.515577][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.526611][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.538061][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.551671][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.561768][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.576690][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.586694][ T13] usb 2-1: usb_control_msg returned -32 [ 1010.592306][ T13] usbtmc 2-1:16.0: can't read capabilities [ 1010.597496][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.609824][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.624706][T15241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.632579][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1010.641815][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1010.654250][T15241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.665170][T15241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.673888][T15241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.683157][T15241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.712752][T15241] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1010.736296][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.744152][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.755504][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1010.765813][T15241] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 1010.789490][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.797920][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.806274][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1011.944828][ T13] usb 2-1: USB disconnect, device number 44