last executing test programs: 37.733669372s ago: executing program 1 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x5814) 37.603415205s ago: executing program 0 (id=1754): r0 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000), 0x4) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket$inet(0x2b, 0x801, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000000)={0x7ff, 0x8, 0x4000000, {0x1, 0x10}, 0x100005, 0x5c6}) socket$inet_udp(0x2, 0x2, 0x0) 35.781463668s ago: executing program 1 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 31.87936768s ago: executing program 1 (id=1757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$null(0xffffff9c, &(0x7f0000000380), 0x220382, 0x0) r3 = eventfd2(0x6, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000480)={r3, 0x80000000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) 31.772758003s ago: executing program 3 (id=1758): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r1, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x2, 0x3, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0xccaa, 0x6}}) 31.722692443s ago: executing program 2 (id=1759): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./sys\x00', 0x2c4782, 0x189) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f000000e000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f00000003c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001839c8ec6822b037cc23c6ddf7a3da010000ba20702500000000002003007b1af8ff00000000bfa100000000007655b38cc613ee4a0d0007010008000000b70300000000000085000000b00000001801000020207025000000502c9b005ca4c60fff00000000bfa100000000000007010000f8ffffffb7020000000000b703000000000000850000009b00002695ef952a773f002160979524abaa5750598ee68ae588a79039825a7a03395757a08c68241ae42287524c8d211921e16d563d742ac32f526f98cba380edd5f44b0001da9d32413bb00f430a5a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x4c) write(r5, &(0x7f0000000100)='1\x00', 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5a9545, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r8, 0xaea3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0xffffffff, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 30.349739316s ago: executing program 2 (id=1760): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./sys\x00', 0x2c4782, 0x189) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f000000e000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f00000003c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001839c8ec6822b037cc23c6ddf7a3da010000ba20702500000000002003007b1af8ff00000000bfa100000000007655b38cc613ee4a0d0007010008000000b70300000000000085000000b00000001801000020207025000000502c9b005ca4c60fff00000000bfa100000000000007010000f8ffffffb7020000000000b703000000000000850000009b00002695ef952a773f002160979524abaa5750598ee68ae588a79039825a7a03395757a08c68241ae42287524c8d211921e16d563d742ac32f526f98cba380edd5f44b0001da9d32413bb00f430a5a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x4c) write(r5, &(0x7f0000000100)='1\x00', 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5a9545, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r8, 0xaea3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0xffffffff, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 30.235426079s ago: executing program 3 (id=1761): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000), 0x111, 0xa}}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x81, 0x0) write$snapshot(r2, 0x0, 0x2000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3b3, 0x8000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8, 0x2, 0x2, 0x2, 0xf501, 0x8}, &(0x7f0000000240)=0x20) write$snapshot(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 29.042409176s ago: executing program 2 (id=1762): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="1ae19327aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730909000000fd1bd24b7ffc8c1ece85108c1331c774d299a25a70745096cb268cbc6070d680e1be250700f758d02ae11ef24171ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c536689a4a62f872f9ca3b86cf3c645413f4afbcea0c99ded703499d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fadc02f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d1b8186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f95555a5ca6fdf75b86ea6171b046b856168f403b5253a5c0500430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f91ffffffffd51cfd73c1e06fba0900000000000000f95d242d6d05be2ce34dccd6005e944afa92b22ec9a698469c6ece06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a2a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fc5b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176d31b2db18dba54991a9553cedb7f585786388d400600000000000000a1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe021c773a6664b66ae04aa62c564d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000004000000000f800"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r3 = syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000090a01040000000000000000010100000900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000014000000f7ff010000000000000000000900000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) 28.993860408s ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x5814) 28.939209039s ago: executing program 1 (id=1764): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 27.008140125s ago: executing program 0 (id=1765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 26.732018071s ago: executing program 3 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="22f8", 0x2) 24.023431835s ago: executing program 3 (id=1767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 23.888526968s ago: executing program 2 (id=1768): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./sys\x00', 0x2c4782, 0x189) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f000000e000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f00000003c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001839c8ec6822b037cc23c6ddf7a3da010000ba20702500000000002003007b1af8ff00000000bfa100000000007655b38cc613ee4a0d0007010008000000b70300000000000085000000b00000001801000020207025000000502c9b005ca4c60fff00000000bfa100000000000007010000f8ffffffb7020000000000b703000000000000850000009b00002695ef952a773f002160979524abaa5750598ee68ae588a79039825a7a03395757a08c68241ae42287524c8d211921e16d563d742ac32f526f98cba380edd5f44b0001da9d32413bb00f430a5a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x4c) write(r5, &(0x7f0000000100)='1\x00', 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5a9545, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r8, 0xaea3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0xffffffff, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 23.79598629s ago: executing program 1 (id=1769): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(r1, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x2, 0x3, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0xccaa, 0x6}}) 18.649405051s ago: executing program 0 (id=1770): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) 18.648804591s ago: executing program 1 (id=1771): r0 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000), 0x4) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket$inet(0x2b, 0x801, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000000)={0x7ff, 0x8, 0x4000000, {0x1, 0x10}, 0x100005, 0x5c6}) socket$inet_udp(0x2, 0x2, 0x0) 18.614556802s ago: executing program 2 (id=1772): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./sys\x00', 0x2c4782, 0x189) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f000000e000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f00000003c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001839c8ec6822b037cc23c6ddf7a3da010000ba20702500000000002003007b1af8ff00000000bfa100000000007655b38cc613ee4a0d0007010008000000b70300000000000085000000b00000001801000020207025000000502c9b005ca4c60fff00000000bfa100000000000007010000f8ffffffb7020000000000b703000000000000850000009b00002695ef952a773f002160979524abaa5750598ee68ae588a79039825a7a03395757a08c68241ae42287524c8d211921e16d563d742ac32f526f98cba380edd5f44b0001da9d32413bb00f430a5a"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x4c) write(r5, &(0x7f0000000100)='1\x00', 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5a9545, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r8, 0xaea3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0xffff, 0xffffffff, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 18.597027373s ago: executing program 0 (id=1773): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r3, r4) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r6, &(0x7f0000000500)=""/1024, 0x400) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2) 16.579832s ago: executing program 3 (id=1774): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000), 0x111, 0xa}}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x81, 0x0) write$snapshot(r2, 0x0, 0x2000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3b3, 0x8000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8, 0x2, 0x2, 0x2, 0xf501, 0x8}, &(0x7f0000000240)=0x20) write$snapshot(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 16.432524863s ago: executing program 2 (id=1775): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r1}) r2 = syz_open_dev$dri(0x0, 0x40100001, 0x48000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x7, &(0x7f0000000800)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @tail_call], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r4 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/469], 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x80) r6 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x187) r7 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x101240, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x339}}, './file0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.096521836s ago: executing program 0 (id=1776): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r3 = syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000090a01040000000000000000010100000900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000014000000f7ff010000000000000000000900000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) 12.031348047s ago: executing program 3 (id=1777): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) 0s ago: executing program 32 (id=1771): r0 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000), 0x4) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket$inet(0x2b, 0x801, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000000)={0x7ff, 0x8, 0x4000000, {0x1, 0x10}, 0x100005, 0x5c6}) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 77.938097][ T5763] cgroup: Unknown subsys name 'net' [ 78.076356][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.775042][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.361452][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.376083][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.384583][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.392501][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.402239][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.410107][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.413105][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.417759][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.439347][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.440796][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.447268][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.455079][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.461788][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.469711][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.478807][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.484069][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.489879][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.496823][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.503861][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.519095][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.519134][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.540033][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.551525][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.565474][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.021246][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.056515][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 82.114422][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 82.384397][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.480611][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.488324][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.496927][ T5786] bridge_slave_0: entered allmulticast mode [ 82.504525][ T5786] bridge_slave_0: entered promiscuous mode [ 82.514732][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.521990][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.529435][ T5786] bridge_slave_1: entered allmulticast mode [ 82.536315][ T5786] bridge_slave_1: entered promiscuous mode [ 82.543903][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.552204][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.559658][ T5775] bridge_slave_0: entered allmulticast mode [ 82.566495][ T5775] bridge_slave_0: entered promiscuous mode [ 82.575760][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.582962][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.590950][ T5775] bridge_slave_1: entered allmulticast mode [ 82.598090][ T5775] bridge_slave_1: entered promiscuous mode [ 82.621466][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.629538][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.636800][ T5780] bridge_slave_0: entered allmulticast mode [ 82.644862][ T5780] bridge_slave_0: entered promiscuous mode [ 82.688151][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.695579][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.702827][ T5780] bridge_slave_1: entered allmulticast mode [ 82.710423][ T5780] bridge_slave_1: entered promiscuous mode [ 82.730300][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.742791][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.769841][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.805164][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.846512][ T5775] team0: Port device team_slave_0 added [ 82.855088][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.868012][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.901325][ T5786] team0: Port device team_slave_0 added [ 82.908830][ T5775] team0: Port device team_slave_1 added [ 82.931761][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.939005][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.946273][ T5776] bridge_slave_0: entered allmulticast mode [ 82.954021][ T5776] bridge_slave_0: entered promiscuous mode [ 82.963111][ T5786] team0: Port device team_slave_1 added [ 82.999630][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.006785][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.014665][ T5776] bridge_slave_1: entered allmulticast mode [ 83.022851][ T5776] bridge_slave_1: entered promiscuous mode [ 83.043985][ T5780] team0: Port device team_slave_0 added [ 83.051982][ T5780] team0: Port device team_slave_1 added [ 83.061782][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.068781][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.097325][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.111888][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.118955][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.145219][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.213761][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.221017][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.247140][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.277226][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.284262][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.310466][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.337999][ T5775] hsr_slave_0: entered promiscuous mode [ 83.345087][ T5775] hsr_slave_1: entered promiscuous mode [ 83.354578][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.364572][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.371720][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.398720][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.421074][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.441190][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.448174][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.474126][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.538875][ T5786] hsr_slave_0: entered promiscuous mode [ 83.545383][ T5786] hsr_slave_1: entered promiscuous mode [ 83.552118][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.560419][ T5786] Cannot create hsr debugfs directory [ 83.589967][ T5784] Bluetooth: hci3: command tx timeout [ 83.589983][ T51] Bluetooth: hci2: command tx timeout [ 83.590181][ T51] Bluetooth: hci0: command tx timeout [ 83.606933][ T5086] Bluetooth: hci1: command tx timeout [ 83.620117][ T5776] team0: Port device team_slave_0 added [ 83.655996][ T5780] hsr_slave_0: entered promiscuous mode [ 83.662815][ T5780] hsr_slave_1: entered promiscuous mode [ 83.672035][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.679665][ T5780] Cannot create hsr debugfs directory [ 83.687303][ T5776] team0: Port device team_slave_1 added [ 83.756542][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.764040][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.790074][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.832100][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.839301][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.865702][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.073425][ T5776] hsr_slave_0: entered promiscuous mode [ 84.080244][ T5776] hsr_slave_1: entered promiscuous mode [ 84.086365][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.094017][ T5776] Cannot create hsr debugfs directory [ 84.217022][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.245830][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.257818][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.289670][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.341562][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.358368][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.389127][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.407874][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.488487][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.506149][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.535751][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.545977][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.612951][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.623970][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.637719][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.652342][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.811003][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.831705][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.876705][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.905237][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.912568][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.927522][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.955593][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.962808][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.979056][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.986282][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.003575][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.032876][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.040025][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.072006][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.113346][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.125942][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.154577][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.161818][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.174481][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.181681][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.211063][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.218214][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.263751][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.271091][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.365408][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.671814][ T5086] Bluetooth: hci1: command tx timeout [ 85.677536][ T5086] Bluetooth: hci0: command tx timeout [ 85.678642][ T51] Bluetooth: hci3: command tx timeout [ 85.683905][ T5086] Bluetooth: hci2: command tx timeout [ 85.734022][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.866725][ T5786] veth0_vlan: entered promiscuous mode [ 85.895433][ T5786] veth1_vlan: entered promiscuous mode [ 85.940254][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.950830][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.020775][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.060917][ T5775] veth0_vlan: entered promiscuous mode [ 86.067842][ T5786] veth0_macvtap: entered promiscuous mode [ 86.081035][ T5786] veth1_macvtap: entered promiscuous mode [ 86.117682][ T5780] veth0_vlan: entered promiscuous mode [ 86.132027][ T5775] veth1_vlan: entered promiscuous mode [ 86.156987][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.178444][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.187532][ T5780] veth1_vlan: entered promiscuous mode [ 86.209545][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218878][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.227564][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.237771][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.270976][ T5776] veth0_vlan: entered promiscuous mode [ 86.297797][ T5775] veth0_macvtap: entered promiscuous mode [ 86.323347][ T5775] veth1_macvtap: entered promiscuous mode [ 86.333703][ T5776] veth1_vlan: entered promiscuous mode [ 86.367734][ T5780] veth0_macvtap: entered promiscuous mode [ 86.380486][ T5780] veth1_macvtap: entered promiscuous mode [ 86.432608][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.444613][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.456332][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.484248][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.495783][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.506553][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.517394][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.531154][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.544688][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.557922][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.570087][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.604933][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.613999][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.623662][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.632893][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.646978][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.661125][ T5776] veth0_macvtap: entered promiscuous mode [ 86.668428][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.679331][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.691021][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.700955][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.712024][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.723194][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.737761][ T5776] veth1_macvtap: entered promiscuous mode [ 86.756582][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.765554][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774653][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783601][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.841274][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.866673][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.901857][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.916610][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.927355][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.938064][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.948639][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.960082][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.971903][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.019541][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.037265][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.050656][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.062351][ T970] cfg80211: failed to load regulatory.db [ 87.068758][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.079337][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.089851][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.102160][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.125375][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.152936][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.165585][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.176419][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.186629][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.199241][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.228035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.250118][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.354349][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.365161][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.406636][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.420083][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.525459][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 87.583714][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.615539][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.742385][ T5851] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.749544][ T5086] Bluetooth: hci2: command tx timeout [ 87.752125][ T5788] Bluetooth: hci3: command tx timeout [ 87.756974][ T5086] Bluetooth: hci0: command tx timeout [ 87.762797][ T51] Bluetooth: hci1: command tx timeout [ 87.785801][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.859895][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.771591][ T5865] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 88.988305][ T5865] (null): rxe_set_mtu: Set mtu to 1024 [ 89.052523][ T5865] wg2 speed is unknown, defaulting to 1000 [ 89.154876][ T5865] wg2 speed is unknown, defaulting to 1000 [ 89.224022][ T5865] wg2 speed is unknown, defaulting to 1000 [ 89.334689][ T5870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10'. [ 89.830260][ T5086] Bluetooth: hci0: command tx timeout [ 89.835712][ T5784] Bluetooth: hci3: command tx timeout [ 89.835746][ T5788] Bluetooth: hci2: command tx timeout [ 90.109318][ T970] wg2 speed is unknown, defaulting to 1000 [ 90.188772][ T5865] infiniband syz2: set active [ 90.193944][ T5865] infiniband syz2: added wg2 [ 90.215713][ T5865] syz2: rxe_create_cq: returned err = -12 [ 90.236232][ T5865] infiniband syz2: Couldn't create ib_mad CQ [ 90.271767][ T5865] infiniband syz2: Couldn't open port 1 [ 90.446554][ T5865] RDS/IB: syz2: added [ 90.480963][ T5865] smc: adding ib device syz2 with port count 1 [ 90.515599][ T5865] smc: ib device syz2 port 1 has pnetid [ 90.537001][ T5839] wg2 speed is unknown, defaulting to 1000 [ 90.552400][ T5865] wg2 speed is unknown, defaulting to 1000 [ 90.705364][ T5894] syzkaller0: entered promiscuous mode [ 90.782404][ T5898] ======================================================= [ 90.782404][ T5898] WARNING: The mand mount option has been deprecated and [ 90.782404][ T5898] and is ignored by this kernel. Remove the mand [ 90.782404][ T5898] option from the mount to silence this warning. [ 90.782404][ T5898] ======================================================= [ 90.821004][ T5898] NILFS (loop0): device size too small [ 90.865994][ T5894] syzkaller0: entered allmulticast mode [ 91.849908][ T5865] wg2 speed is unknown, defaulting to 1000 [ 91.929481][ T5903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.005600][ T5905] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 92.108150][ T5865] wg2 speed is unknown, defaulting to 1000 [ 92.561221][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 92.570027][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 92.581882][ T5788] Bluetooth: hci1: hardware error 0x00 [ 92.591293][ T5878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.132608][ T5865] wg2 speed is unknown, defaulting to 1000 [ 95.149643][ T5937] Invalid ELF header magic: != ELF [ 96.146976][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 96.397940][ T5942] jffs2: notice: (5942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.618929][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.819777][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 98.852038][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.882653][ T5816] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.892201][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.900799][ T5816] usb 3-1: Product: syz [ 98.905136][ T5816] usb 3-1: Manufacturer: syz [ 98.910409][ T5816] usb 3-1: SerialNumber: syz [ 98.926803][ T5816] usb 3-1: config 0 descriptor?? [ 98.943651][ T5816] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.954651][ T5816] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 99.387094][ T5943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.543064][ T5816] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.758812][ T5987] binder: 5984:5987 unknown command 1074553619 [ 99.765198][ T5987] binder: 5984:5987 ioctl c0306201 200000000040 returned -22 [ 100.668708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.683561][ T5816] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 101.698835][ T5816] em28xx 3-1:0.0: board has no eeprom [ 101.788965][ T5816] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 101.817332][ T5816] em28xx 3-1:0.0: dvb set to bulk mode. [ 101.830932][ T5840] em28xx 3-1:0.0: Binding DVB extension [ 101.888766][ T5816] usb 3-1: USB disconnect, device number 2 [ 101.896158][ T5816] em28xx 3-1:0.0: Disconnecting em28xx [ 102.017792][ T5840] em28xx 3-1:0.0: Registering input extension [ 102.036916][ T5816] em28xx 3-1:0.0: Closing input extension [ 102.084542][ T5816] em28xx 3-1:0.0: Freeing device [ 102.149790][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.338675][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 102.371486][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.407601][ T5839] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 102.450167][ T5839] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 102.458513][ T5839] usb 1-1: config 14 has no interface number 0 [ 102.478837][ T5839] usb 1-1: config 14 has no interface number 1 [ 102.496025][ T5839] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 102.721840][ T5839] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 102.733267][ T5839] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 102.744697][ T5839] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.757937][ T5839] usb 1-1: config 14 interface 57 has no altsetting 0 [ 102.764818][ T5839] usb 1-1: config 14 interface 228 has no altsetting 0 [ 102.778816][ T5839] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 102.787904][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.816783][ T5839] usb 1-1: Product: syz [ 103.848761][ T6018] process 'syz.3.56' launched './file2' with NULL argv: empty string added [ 104.188129][ T5839] usb 1-1: Manufacturer: syz [ 104.209162][ T5839] usb 1-1: SerialNumber: syz [ 104.814392][ T5839] legousbtower 1-1:14.57: interrupt endpoints not found [ 105.027858][ T5839] legousbtower 1-1:14.228: interrupt endpoints not found [ 105.075039][ T5839] usb 1-1: USB disconnect, device number 2 [ 105.406341][ T6032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.435793][ T6032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.510975][ T6032] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.525936][ T6032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.532932][ T6032] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.545489][ T6032] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.565080][ T6032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.605567][ T6032] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.608196][ T6049] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 105.648285][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 105.660329][ T6032] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.892956][ T6053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.65'. [ 105.921652][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.65'. [ 106.751654][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.204268][ T6064] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 107.588920][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.595056][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.028710][ T2178] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.189365][ T2178] usb 2-1: device descriptor read/64, error -71 [ 108.468765][ T2178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.668946][ T2178] usb 2-1: device descriptor read/64, error -71 [ 108.789252][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.902220][ T2178] usb usb2-port1: attempt power cycle [ 109.387827][ T6096] tipc: Enabling of bearer rejected, failed to enable media [ 109.409111][ T2178] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.472452][ T2178] usb 2-1: device descriptor read/8, error -71 [ 109.668768][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.675064][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.768705][ T2178] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.800144][ T2178] usb 2-1: device descriptor read/8, error -71 [ 109.919921][ T2178] usb usb2-port1: unable to enumerate USB device [ 110.623171][ T6127] Zero length message leads to an empty skb [ 110.868768][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.851680][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.859890][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.375199][ T6152] tipc: Enabling of bearer rejected, failed to enable media [ 113.910139][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.267297][ T6185] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 117.265156][ T6195] geneve2: entered allmulticast mode [ 117.483766][ T6203] tipc: Enabling of bearer rejected, failed to enable media [ 118.633152][ T6211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.697946][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'. [ 121.647881][ T1062] device offline error, dev sda, sector 704982 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.667427][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88122) [ 121.680077][ T1062] Buffer I/O error on device sda1, logical block 88084 [ 121.687878][ T1062] device offline error, dev sda, sector 705110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.698532][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88138) [ 121.710522][ T1062] Buffer I/O error on device sda1, logical block 88100 [ 121.717721][ T1062] device offline error, dev sda, sector 705142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.728379][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88142) [ 121.740783][ T1062] Buffer I/O error on device sda1, logical block 88104 [ 121.750082][ T1062] device offline error, dev sda, sector 705318 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.760736][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88164) [ 121.773677][ T1062] Buffer I/O error on device sda1, logical block 88126 [ 121.788176][ T1062] Buffer I/O error on device sda1, logical block 88127 [ 121.796182][ T1062] device offline error, dev sda, sector 705366 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.806778][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88170) [ 121.821861][ T1062] Buffer I/O error on device sda1, logical block 88132 [ 121.829498][ T1062] device offline error, dev sda, sector 705390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.840132][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88173) [ 121.860044][ T1062] Buffer I/O error on device sda1, logical block 88135 [ 121.867928][ T1062] device offline error, dev sda, sector 705406 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.878651][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88175) [ 121.890275][ T1062] Buffer I/O error on device sda1, logical block 88137 [ 121.897274][ T1062] Buffer I/O error on device sda1, logical block 88138 [ 121.904708][ T1062] Buffer I/O error on device sda1, logical block 88139 [ 121.917026][ T1062] device offline error, dev sda, sector 705446 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 121.931237][ T1062] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88180) [ 122.061279][ T1152] device offline error, dev sda, sector 705478 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 122.314448][ T1152] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88184) [ 122.986277][ T1152] device offline error, dev sda, sector 705542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 123.013578][ T5103] Aborting journal on device sda1-8. [ 123.111604][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 123.121847][ T5103] JBD2: I/O error when updating journal superblock for sda1-8. [ 123.168724][ T1152] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88192) [ 123.182251][ T5763] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 123.245413][ T6270] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.129: Detected aborted journal [ 123.314878][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 123.344783][ T6261] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 123.357963][ T6270] EXT4-fs (sda1): previous I/O error to superblock detected [ 123.689687][ T6261] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 123.722921][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 123.731386][ T5763] EXT4-fs (sda1): I/O error while writing superblock [ 123.749170][ T6270] EXT4-fs (sda1): I/O error while writing superblock [ 124.389274][ T5763] EXT4-fs (sda1): Remounting filesystem read-only [ 124.396236][ T6270] EXT4-fs (sda1): Remounting filesystem read-only [ 124.398760][ T6261] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 124.411827][ T6261] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 124.421273][ T6261] Buffer I/O error on dev sda1, logical block 64971, lost async page write [ 124.774489][ T6261] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 128.400311][ T6335] syzkaller0: entered promiscuous mode [ 128.416109][ T6335] syzkaller0: entered allmulticast mode [ 128.549391][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 128.589903][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 128.983125][ T6349] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 128.997180][ T6351] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 129.028613][ T6349] binder: 6346:6349 unknown command 1074553619 [ 129.035923][ T6349] binder: 6346:6349 ioctl c0306201 200000000040 returned -22 [ 131.421138][ T5788] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 131.523859][ T6356] syz.3.158: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 131.552065][ T6356] CPU: 1 PID: 6356 Comm: syz.3.158 Not tainted syzkaller #0 [ 131.559606][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.564527][ T6368] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 131.569702][ T6356] Call Trace: [ 131.569740][ T6356] [ 131.569749][ T6356] dump_stack_lvl+0x18c/0x250 [ 131.569779][ T6356] ? show_regs_print_info+0x20/0x20 [ 131.594297][ T6356] ? load_image+0x420/0x420 [ 131.598813][ T6356] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.605229][ T6356] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 131.611743][ T6356] warn_alloc+0x246/0x340 [ 131.616087][ T6356] ? zone_watermark_ok_safe+0x230/0x230 [ 131.621745][ T6356] ? _raw_spin_unlock+0x28/0x40 [ 131.626708][ T6356] ? netlink_unicast+0x7b1/0x930 [ 131.631671][ T6356] __vmalloc_node_range+0x661/0x1320 [ 131.636978][ T6356] ? __asan_memset+0x22/0x40 [ 131.641588][ T6356] ? free_vm_area+0x50/0x50 [ 131.646112][ T6356] ? kvmalloc_node+0x70/0x180 [ 131.650793][ T6356] ? rcu_is_watching+0x15/0xb0 [ 131.655745][ T6356] ? kvmalloc_node+0x70/0x180 [ 131.660435][ T6356] ? trace_kmalloc+0x1f/0xa0 [ 131.665026][ T6356] kvmalloc_node+0x13f/0x180 [ 131.669616][ T6356] ? hash_netport4_resize+0x24e/0x19f0 [ 131.675183][ T6356] hash_netport4_resize+0x24e/0x19f0 [ 131.680499][ T6356] ? hash_netport4_uadt+0xf70/0xf70 [ 131.685715][ T6356] ? hash_netport4_kadt+0x5b0/0x5b0 [ 131.690920][ T6356] ? lockdep_hardirqs_on+0x98/0x150 [ 131.696165][ T6356] call_ad+0x42a/0xb30 [ 131.700250][ T6356] ? ip_set_ad+0x9c0/0x9c0 [ 131.704674][ T6356] ? __nla_parse+0x40/0x50 [ 131.709103][ T6356] ip_set_ad+0x81a/0x9c0 [ 131.713346][ T6356] ? ip_set_dump_done+0x320/0x320 [ 131.718363][ T6356] ? rcu_is_watching+0x15/0xb0 [ 131.723149][ T6356] nfnetlink_rcv_msg+0xcaf/0x1290 [ 131.728166][ T6356] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.734229][ T6356] ? nfnetlink_rcv_msg+0x228/0x1290 [ 131.739434][ T6356] ? nfnetlink_unbind+0x160/0x160 [ 131.744466][ T6356] ? __dev_queue_xmit+0x198c/0x3630 [ 131.749662][ T6356] ? __netlink_deliver_tap+0x579/0x7f0 [ 131.755132][ T6356] ? netlink_deliver_tap+0x19c/0x1b0 [ 131.760411][ T6356] ? netlink_unicast+0x77b/0x930 [ 131.765353][ T6356] ? netlink_sendmsg+0x8d0/0xbf0 [ 131.770283][ T6356] ? ____sys_sendmsg+0x61b/0x980 [ 131.775229][ T6356] ? ___sys_sendmsg+0x2a6/0x360 [ 131.780102][ T6356] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 131.785124][ T6356] ? do_syscall_64+0x55/0xb0 [ 131.789717][ T6356] netlink_rcv_skb+0x235/0x4c0 [ 131.794477][ T6356] ? nfnetlink_unbind+0x160/0x160 [ 131.799584][ T6356] ? netlink_ack+0x1160/0x1160 [ 131.804348][ T6356] ? apparmor_capable+0x137/0x1a0 [ 131.809397][ T6356] ? bpf_lsm_capable+0x9/0x10 [ 131.814094][ T6356] ? security_capable+0x89/0xb0 [ 131.818983][ T6356] nfnetlink_rcv+0x2c9/0x2490 [ 131.823671][ T6356] ? __local_bh_enable_ip+0x13a/0x1c0 [ 131.829045][ T6356] ? lockdep_hardirqs_on+0x98/0x150 [ 131.834247][ T6356] ? __local_bh_enable_ip+0x13a/0x1c0 [ 131.839615][ T6356] ? _local_bh_enable+0xa0/0xa0 [ 131.844468][ T6356] ? __dev_queue_xmit+0x275/0x3630 [ 131.849579][ T6356] ? __dev_queue_xmit+0x1bc2/0x3630 [ 131.854776][ T6356] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 131.860334][ T6356] ? __dev_queue_xmit+0x275/0x3630 [ 131.865460][ T6356] ? ref_tracker_free+0x686/0x830 [ 131.870500][ T6356] ? refcount_inc+0x70/0x70 [ 131.874998][ T6356] ? __asan_memcpy+0x40/0x70 [ 131.879609][ T6356] ? __skb_clone+0x5c/0x6c0 [ 131.884117][ T6356] ? __skb_clone+0x446/0x6c0 [ 131.888722][ T6356] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.893933][ T6356] ? __lock_acquire+0x7d80/0x7d80 [ 131.898962][ T6356] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.904167][ T6356] netlink_unicast+0x7b1/0x930 [ 131.908945][ T6356] netlink_sendmsg+0x8d0/0xbf0 [ 131.913730][ T6356] ? netlink_getsockopt+0x590/0x590 [ 131.918958][ T6356] ? apparmor_socket_sendmsg+0x8e/0x330 [ 131.924518][ T6356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.929800][ T6356] ? security_socket_sendmsg+0x80/0xa0 [ 131.935259][ T6356] ? netlink_getsockopt+0x590/0x590 [ 131.940454][ T6356] ____sys_sendmsg+0x61b/0x980 [ 131.945221][ T6356] ? __asan_memset+0x22/0x40 [ 131.949811][ T6356] ? __sys_sendmsg_sock+0x30/0x30 [ 131.954838][ T6356] ? __import_iovec+0x5f2/0x850 [ 131.959698][ T6356] ? import_iovec+0x73/0xa0 [ 131.964288][ T6356] ___sys_sendmsg+0x2a6/0x360 [ 131.968981][ T6356] ? __sys_sendmsg+0x2b0/0x2b0 [ 131.973791][ T6356] __se_sys_sendmsg+0x1d0/0x2c0 [ 131.978684][ T6356] ? __x64_sys_sendmsg+0x80/0x80 [ 131.983734][ T6356] ? lockdep_hardirqs_on+0x98/0x150 [ 131.988942][ T6356] do_syscall_64+0x55/0xb0 [ 131.993356][ T6356] ? clear_bhb_loop+0x40/0x90 [ 131.998028][ T6356] ? clear_bhb_loop+0x40/0x90 [ 132.002723][ T6356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.008661][ T6356] RIP: 0033:0x7fd71b39e0d9 [ 132.013114][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.032731][ T6356] RSP: 002b:00007fd71c2e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.041146][ T6356] RAX: ffffffffffffffda RBX: 00007fd71b625fa0 RCX: 00007fd71b39e0d9 [ 132.049117][ T6356] RDX: 0000000004008010 RSI: 00002000000001c0 RDI: 0000000000000007 [ 132.057086][ T6356] RBP: 00007fd71b435024 R08: 0000000000000000 R09: 0000000000000000 [ 132.065068][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.073043][ T6356] R13: 00007fd71b626038 R14: 00007fd71b625fa0 R15: 00007ffd4d4a9a88 [ 132.081128][ T6356] [ 132.084251][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.116392][ T6356] Mem-Info: [ 132.147059][ T6356] active_anon:9433 inactive_anon:0 isolated_anon:0 [ 132.147059][ T6356] active_file:10773 inactive_file:38633 isolated_file:0 [ 132.147059][ T6356] unevictable:0 dirty:160 writeback:0 [ 132.147059][ T6356] slab_reclaimable:10137 slab_unreclaimable:94044 [ 132.147059][ T6356] mapped:28489 shmem:4236 pagetables:602 [ 132.147059][ T6356] sec_pagetables:0 bounce:0 [ 132.147059][ T6356] kernel_misc_reclaimable:0 [ 132.147059][ T6356] free:1348396 free_pcp:9616 free_cma:0 [ 132.198885][ T6356] Node 0 active_anon:36276kB inactive_anon:0kB active_file:43092kB inactive_file:154400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113868kB dirty:648kB writeback:0kB shmem:15408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 132.231064][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.550436][ T6356] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 132.580805][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.587081][ T6356] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.614383][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.633612][ T6356] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 132.639676][ T6356] Node 0 DMA32 free:1477092kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36172kB inactive_anon:0kB active_file:43092kB inactive_file:153596kB unevictable:0kB writepending:648kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:20288kB local_pcp:8892kB free_cma:0kB [ 132.669926][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.676304][ T6356] lowmem_reserve[]: 0 0 0 0 0 [ 132.681330][ T6356] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:0kB inactive_file:804kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 132.708268][ T6356] lowmem_reserve[]: 0 0 0 0 0 [ 132.713353][ T6356] Node 1 Normal free:3900976kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17988kB local_pcp:7936kB free_cma:0kB [ 132.746695][ T6356] lowmem_reserve[]: 0 0 0 0 0 [ 132.785574][ T6356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.802128][ T6356] Node 0 DMA32: 813*4kB (UME) 1100*8kB (UME) 641*16kB (UME) 380*32kB (UM) 201*64kB (UME) 36*128kB (UME) 33*256kB (UM) 15*512kB (UM) 8*1024kB (UM) 4*2048kB (ME) 340*4096kB (M) = 1477092kB [ 132.828042][ T6356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.842616][ T6356] Node 1 Normal: 178*4kB (UME) 47*8kB (UME) 37*16kB (UME) 77*32kB (UME) 18*64kB (UME) 9*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900976kB [ 132.885929][ T6356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.897064][ T6356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.914486][ T6356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.935635][ T6356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.953344][ T6356] 53634 total pagecache pages [ 132.965598][ T6356] 0 pages in swap cache [ 132.979664][ T6356] Free swap = 124728kB [ 132.984006][ T6356] Total swap = 124996kB [ 132.988204][ T6356] 2097051 pages RAM [ 133.115363][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128006][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.878628][ T6356] 0 pages HighMem/MovableOnly [ 133.883380][ T6356] 416958 pages reserved [ 133.887573][ T6356] 0 pages cma reserved [ 135.805460][ T6407] batman_adv: batadv0: Adding interface: veth0 [ 135.847569][ T6407] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.008837][ T6407] batman_adv: batadv0: Interface activated: veth0 [ 136.062287][ T6407] batman_adv: batadv0: Interface deactivated: veth0 [ 136.077257][ T6407] batman_adv: batadv0: Removing interface: veth0 [ 136.114198][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.130059][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.145902][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.170557][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.616108][ T6419] fuse: Bad value for 'fd' [ 136.674068][ T6419] syz.1.178: attempt to access beyond end of device [ 136.674068][ T6419] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 136.739544][ T6423] bridge_slave_0: default FDB implementation only supports local addresses [ 140.728800][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.923237][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.954613][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.978721][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.996635][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.022513][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.063336][ T5840] usb 3-1: config 0 descriptor?? [ 142.264377][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.304505][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.330558][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.371011][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.406282][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.469383][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.495537][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.511367][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.544480][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.588883][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.600075][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.610520][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.618124][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.638432][ T5840] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 142.658234][ T5840] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 142.676637][ T6471] capability: warning: `syz.1.194' uses 32-bit capabilities (legacy support in use) [ 142.697194][ T5840] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 142.757951][ T6480] udevd[6480]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 142.785610][ T5840] usb 3-1: USB disconnect, device number 3 [ 144.294718][ T6495] Bluetooth: MGMT ver 1.22 [ 144.516134][ T6486] geneve2: entered allmulticast mode [ 148.315500][ T6519] syz.2.213 (6519) used greatest stack depth: 19448 bytes left [ 149.412112][ T6529] configfs-gadget.g1 gadget.0: HOST MAC 76:65:f4:f3:c9:57 [ 149.525485][ T6529] configfs-gadget.g1 gadget.0: MAC e6:3d:8c:2d:e8:8b [ 149.878833][ T5840] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.098968][ T5840] usb 1-1: Dual-Role OTG device on HNP port [ 150.130394][ T5840] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 150.168677][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.305696][ T5840] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 150.478682][ T5840] rndis_host 1-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 76:65:f4:f3:c9:57 [ 154.184963][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 154.902102][ T5788] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 155.428732][ T6613] random: crng reseeded on system resumption [ 156.448499][ T6613] input: syz0 as /devices/virtual/input/input6 [ 156.578871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.067928][ T6617] input: syz1 as /devices/virtual/input/input7 [ 157.610568][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 160.134186][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 162.022651][ T6664] geneve2: entered allmulticast mode [ 162.400937][ T6691] netlink: 88 bytes leftover after parsing attributes in process `syz.0.266'. [ 162.906227][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 162.924131][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.056327][ T6707] tmpfs: Unknown parameter 'sizÁe' [ 163.249064][ T6704] bridge_slave_1 (unregistering): left allmulticast mode [ 163.256282][ T6704] bridge_slave_1 (unregistering): left promiscuous mode [ 163.263543][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.828661][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.238575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.668581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.068571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.138568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 165.158571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 166.138561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 166.578571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 167.669325][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 167.704245][ T6738] tmpfs: Unknown parameter 'sizÁe' [ 172.596933][ T6773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.619703][ T6773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.629792][ T6773] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.653435][ T6773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.177926][ T5788] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 173.668766][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.677695][ T6787] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.699742][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 173.868582][ C1] hrtimer: interrupt took 63563 ns [ 174.748701][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.971582][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 175.072124][ T5788] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 175.746583][ T6813] geneve2: entered allmulticast mode [ 176.632380][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 176.690985][ T6828] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.721583][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.317'. [ 177.198792][ T5788] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 177.208687][ T5788] Bluetooth: hci2: Injecting HCI hardware error event [ 177.217689][ T5788] Bluetooth: hci2: hardware error 0x00 [ 177.690666][ T5784] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 178.034549][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 179.109111][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.117758][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 179.127607][ T5086] Bluetooth: hci3: hardware error 0x00 [ 179.268997][ T5788] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 181.189523][ T5086] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 183.469273][ T6929] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.516980][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'. [ 185.138547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.442473][ T6974] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.488488][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 189.836682][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 192.039019][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 193.162004][ T7030] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.193068][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'. [ 194.554552][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561449][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.849721][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 197.474080][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 197.903304][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 199.694854][ T7099] syzkaller0: entered promiscuous mode [ 199.719029][ T7099] syzkaller0: entered allmulticast mode [ 199.803722][ T7099] tipc: Started in network mode [ 199.818758][ T7099] tipc: Node identity 5a478befd5b8, cluster identity 4711 [ 199.839551][ T7099] tipc: Enabled bearer , priority 0 [ 199.879645][ T7102] tipc: Resetting bearer [ 200.014792][ T7098] tipc: Resetting bearer [ 200.363377][ T7108] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 200.662472][ T7108] binder: 7104:7108 unknown command 1074553619 [ 200.669269][ T7108] binder: 7104:7108 ioctl c0306201 200000000040 returned -22 [ 201.201755][ T7098] tipc: Disabling bearer [ 201.214938][ T6022] tipc: Node number set to 2415889391 [ 203.672676][ T7142] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 203.805195][ T7142] binder: 7139:7142 unknown command 1074553619 [ 203.811571][ T7142] binder: 7139:7142 ioctl c0306201 200000000040 returned -22 [ 207.358698][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.686984][ T7172] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 207.804534][ T7170] binder: 7166:7170 unknown command 1074553619 [ 207.811504][ T7170] binder: 7166:7170 ioctl c0306201 200000000040 returned -22 [ 210.848847][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.886503][ T7196] syzkaller0: entered promiscuous mode [ 210.907958][ T7196] syzkaller0: entered allmulticast mode [ 210.951372][ T7196] tipc: Enabled bearer , priority 0 [ 210.989197][ T7196] tipc: Resetting bearer [ 211.006735][ T7195] tipc: Resetting bearer [ 211.059041][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 211.099273][ T970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.128891][ T970] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 211.146273][ T970] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 211.147138][ T7195] tipc: Disabling bearer [ 211.165106][ T970] usb 3-1: config 14 has no interface number 0 [ 211.191288][ T970] usb 3-1: config 14 has no interface number 1 [ 211.218083][ T970] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.259025][ T970] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 211.288636][ T970] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 211.308719][ T970] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.343024][ T970] usb 3-1: config 14 interface 57 has no altsetting 0 [ 211.363420][ T970] usb 3-1: config 14 interface 228 has no altsetting 0 [ 211.403391][ T970] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.429526][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.455332][ T970] usb 3-1: Product: syz [ 211.467008][ T970] usb 3-1: Manufacturer: syz [ 211.475621][ T970] usb 3-1: SerialNumber: syz [ 211.793200][ T5086] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 211.939841][ T970] legousbtower 3-1:14.57: interrupt endpoints not found [ 212.189049][ T970] legousbtower 3-1:14.228: interrupt endpoints not found [ 212.241377][ T970] usb 3-1: USB disconnect, device number 4 [ 215.809985][ T5086] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 217.221832][ T7295] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 217.305731][ T7295] binder: 7287:7295 unknown command 1074553619 [ 217.312582][ T7295] binder: 7287:7295 ioctl c0306201 200000000040 returned -22 [ 220.265717][ T5086] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 221.275720][ T7331] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 221.454648][ T7331] binder: 7328:7331 unknown command 1074553619 [ 221.461310][ T7331] binder: 7328:7331 ioctl c0306201 200000000040 returned -22 [ 223.118700][ T5816] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 223.332148][ T5816] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 223.342722][ T5816] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.358129][ T5816] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.371403][ T5816] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.380546][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.406468][ T5816] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 223.427947][ T5816] usb 3-1: invalid MIDI out EP 0 [ 223.541252][ T7350] tmpfs: Unknown parameter 'sizÁe' [ 224.699315][ T5816] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 224.777517][ T6022] usb 3-1: USB disconnect, device number 5 [ 225.264735][ T7362] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 225.336827][ T7362] binder: 7355:7362 unknown command 1074553619 [ 225.343495][ T7362] binder: 7355:7362 ioctl c0306201 200000000040 returned -22 [ 226.712647][ T5086] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 227.107402][ T7377] tmpfs: Unknown parameter 'sizÁe' [ 228.343241][ T5086] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 229.868201][ T7392] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 229.905211][ T7392] binder: 7391:7392 unknown command 1074553619 [ 229.911523][ T7392] binder: 7391:7392 ioctl c0306201 200000000040 returned -22 [ 229.959419][ T5086] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 230.346223][ T7407] tmpfs: Unknown parameter 'sizÁe' [ 231.462117][ T5086] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 231.462199][ T5086] Bluetooth: hci0: Injecting HCI hardware error event [ 231.463949][ T5788] Bluetooth: hci0: hardware error 0x00 [ 232.140169][ T7420] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 232.773248][ T7420] binder: 7412:7420 unknown command 1074553619 [ 232.779832][ T7420] binder: 7412:7420 ioctl c0306201 200000000040 returned -22 [ 233.678922][ T5788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 235.171508][ T7423] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 235.272933][ T7423] binder: 7421:7423 unknown command 1074553619 [ 235.279770][ T7423] binder: 7421:7423 ioctl c0306201 200000000040 returned -22 [ 236.594361][ T7436] tmpfs: Unknown parameter 'sizÁe' [ 237.679972][ T7443] usb 1-1: USB disconnect, device number 3 [ 237.774683][ T7443] rndis_host 1-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 238.078724][ T5816] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 238.256658][ T7463] syzkaller0: entered promiscuous mode [ 238.264341][ T7463] syzkaller0: entered allmulticast mode [ 238.273820][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.296062][ T5816] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 238.306423][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.315788][ T5816] usb 3-1: Product: syz [ 238.321337][ T5816] usb 3-1: Manufacturer: syz [ 238.325980][ T5816] usb 3-1: SerialNumber: syz [ 238.345600][ T5816] pl2303 3-1:1.0: required endpoints missing [ 238.899487][ T7468] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 239.147490][ T7466] binder: 7464:7466 unknown command 1074553619 [ 239.154157][ T7466] binder: 7464:7466 ioctl c0306201 200000000040 returned -22 [ 240.081560][ T5840] usb 3-1: USB disconnect, device number 6 [ 240.278657][ T7472] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 240.308282][ T7472] VFS: file-max limit 0 reached [ 240.551561][ T7477] tmpfs: Unknown parameter 'sizÁe' [ 242.260340][ T7499] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 242.360826][ T7499] binder: 7494:7499 unknown command 1074553619 [ 242.367448][ T7499] binder: 7494:7499 ioctl c0306201 200000000040 returned -22 [ 243.066928][ T7501] tmpfs: Unknown parameter 'sizÁe' [ 244.973663][ T7527] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 245.075892][ T7527] binder: 7523:7527 unknown command 1074553619 [ 245.082670][ T7527] binder: 7523:7527 ioctl c0306201 200000000040 returned -22 [ 246.080544][ T7537] tmpfs: Unknown parameter 'sizÁe' [ 247.331074][ T7548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.589'. [ 247.368400][ T7547] syzkaller0: entered promiscuous mode [ 247.376670][ T7547] syzkaller0: entered allmulticast mode [ 247.823857][ T7564] tmpfs: Unknown parameter 'sizÁe' [ 249.002994][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 249.385385][ T7580] syzkaller0: entered promiscuous mode [ 249.394786][ T7580] syzkaller0: entered allmulticast mode [ 249.863896][ T7590] tmpfs: Unknown parameter 'sizÁe' [ 251.157791][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 251.912339][ T7611] syzkaller0: entered promiscuous mode [ 251.920996][ T7611] syzkaller0: entered allmulticast mode [ 252.481735][ T7619] tmpfs: Unknown parameter 'sizÁe' [ 254.257521][ T7648] tmpfs: Unknown parameter 'sizÁe' [ 255.993842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000596][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475947][ T7677] random: crng reseeded on system resumption [ 260.240804][ T7677] input: syz0 as /devices/virtual/input/input10 [ 264.026046][ T7686] tmpfs: Unknown parameter 'sizÁe' [ 264.044685][ T7684] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 265.637790][ T7715] batman_adv: batadv0: Adding interface: veth0 [ 265.647123][ T7715] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.680167][ T7715] batman_adv: batadv0: Interface activated: veth0 [ 265.745283][ T7715] netlink: 88 bytes leftover after parsing attributes in process `syz.2.654'. [ 265.762774][ T7715] batman_adv: batadv0: Interface deactivated: veth0 [ 265.771219][ T7715] batman_adv: batadv0: Removing interface: veth0 [ 265.781097][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.790760][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.802810][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.811995][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.280162][ T7721] tmpfs: Unknown parameter 'sizÁe' [ 267.160255][ T7723] syzkaller0: entered promiscuous mode [ 267.232000][ T7723] syzkaller0: entered allmulticast mode [ 267.948302][ T7731] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 268.351694][ T7739] random: crng reseeded on system resumption [ 272.978888][ T7751] tmpfs: Unknown parameter 'sizÁe' [ 273.901635][ T7761] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 274.276349][ T7786] random: crng reseeded on system resumption [ 276.172904][ T7800] tmpfs: Unknown parameter 'sizÁe' [ 277.452357][ T7813] syzkaller0: entered promiscuous mode [ 277.458018][ T7813] syzkaller0: entered allmulticast mode [ 277.570047][ T7818] random: crng reseeded on system resumption [ 279.551717][ T7832] tmpfs: Unknown parameter 'sizÁe' [ 281.495394][ T7857] random: crng reseeded on system resumption [ 284.749459][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 287.298350][ T7905] random: crng reseeded on system resumption [ 287.670504][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 290.734197][ T7941] random: crng reseeded on system resumption [ 290.760663][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 292.485834][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 293.378989][ T7992] random: crng reseeded on system resumption [ 294.099438][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 295.805121][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 296.224201][ T8038] random: crng reseeded on system resumption [ 301.056438][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 301.691620][ T8084] random: crng reseeded on system resumption [ 302.447007][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 307.001547][ T8115] Bluetooth: hci0: invalid len left 7, exp >= 113 [ 307.209793][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 307.349584][ T8128] random: crng reseeded on system resumption [ 312.017711][ T8149] Bluetooth: hci0: invalid len left 7, exp >= 113 [ 312.033438][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 312.364587][ T8166] random: crng reseeded on system resumption [ 316.221067][ T8166] input: syz0 as /devices/virtual/input/input11 [ 318.845158][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.860366][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.606132][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 322.090587][ T8188] Bluetooth: hci0: invalid len left 7, exp >= 113 [ 322.432548][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 326.229304][ T8221] Bluetooth: hci0: unsupported parameter 255 [ 326.235657][ T8221] Bluetooth: hci0: unsupported parameter 255 [ 326.523398][ T8233] random: crng reseeded on system resumption [ 326.559997][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 331.354423][ T8252] Bluetooth: hci0: unsupported parameter 255 [ 331.362291][ T8252] Bluetooth: hci0: unsupported parameter 255 [ 332.021816][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 332.287047][ T8274] random: crng reseeded on system resumption [ 332.406443][ T8277] Bluetooth: hci0: unsupported parameter 255 [ 332.421665][ T8277] Bluetooth: hci0: unsupported parameter 255 [ 334.452359][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 334.479941][ T8294] syzkaller0: entered promiscuous mode [ 334.485486][ T8294] syzkaller0: entered allmulticast mode [ 335.818583][ T8318] random: crng reseeded on system resumption [ 343.118201][ T8354] random: crng reseeded on system resumption [ 346.882512][ T8354] input: syz0 as /devices/virtual/input/input13 [ 352.246452][ T8376] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 355.164384][ T8399] socket: no more sockets [ 355.282297][ T8405] random: crng reseeded on system resumption [ 360.552486][ T8418] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 362.000611][ T8424] overlayfs: failed to verify origin (227/file1, ino=1226, err=-116) [ 362.020567][ T8424] overlayfs: failed to verify origin (227/file1, ino=1226, err=-116) [ 365.816393][ T8455] random: crng reseeded on system resumption [ 369.704195][ T8463] fuse: Bad value for 'fd' [ 371.300802][ T8469] loop3: detected capacity change from 0 to 7 [ 371.332617][ T8469] Dev loop3: unable to read RDB block 7 [ 371.355182][ T8469] loop3: unable to read partition table [ 371.369348][ T8469] loop3: partition table beyond EOD, truncated [ 371.376003][ T8469] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.600594][ T8482] random: crng reseeded on system resumption [ 375.370008][ T8491] fuse: Bad value for 'fd' [ 377.174420][ T8482] input: syz0 as /devices/virtual/input/input15 [ 378.956351][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976668][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.276528][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 381.466585][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.501562][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.195894][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.937'. [ 387.405429][ T8541] random: crng reseeded on system resumption [ 391.045123][ T8541] input: syz0 as /devices/virtual/input/input16 [ 392.035058][ T8561] loop3: detected capacity change from 0 to 7 [ 392.066337][ T8561] Dev loop3: unable to read RDB block 7 [ 392.078567][ T8561] loop3: unable to read partition table [ 392.084578][ T8561] loop3: partition table beyond EOD, truncated [ 392.110100][ T8561] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.152945][ T5141] Dev loop3: unable to read RDB block 7 [ 392.171420][ T5141] loop3: unable to read partition table [ 392.197857][ T5141] loop3: partition table beyond EOD, truncated [ 392.824835][ T28] libceph: connect (1)[c::]:6789 error -101 [ 393.007152][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 393.587336][ T28] libceph: connect (1)[c::]:6789 error -101 [ 393.672279][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 394.343459][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 394.422562][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 395.027123][ T8565] ceph: No mds server is up or the cluster is laggy [ 396.150937][ T28] libceph: connect (1)[c::]:6789 error -101 [ 396.156962][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 396.752553][ T28] libceph: connect (1)[c::]:6789 error -101 [ 396.759123][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 399.855301][ T8600] loop3: detected capacity change from 0 to 7 [ 399.872411][ T8600] Dev loop3: unable to read RDB block 7 [ 399.904277][ T8600] loop3: unable to read partition table [ 399.926880][ T8600] loop3: partition table beyond EOD, truncated [ 399.951811][ T8600] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.648914][ T9] libceph: connect (1)[c::]:6789 error -101 [ 403.778960][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 404.291209][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 404.363027][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 405.370576][ T9] libceph: connect (1)[c::]:6789 error -101 [ 405.421238][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 405.878286][ T8620] ceph: No mds server is up or the cluster is laggy [ 406.356689][ T8632] loop3: detected capacity change from 0 to 7 [ 406.410888][ T8632] Dev loop3: unable to read RDB block 7 [ 406.444452][ T8632] loop3: unable to read partition table [ 406.466761][ T8632] loop3: partition table beyond EOD, truncated [ 406.507881][ T8632] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.241361][ T28] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 411.451286][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.474454][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 411.497971][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.525369][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.553293][ T8653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 411.578075][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 417.273394][ T5840] usb 3-1: USB disconnect, device number 7 [ 417.779268][ T8692] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 424.736241][ T8736] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 429.501765][ T8778] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 433.405184][ T8816] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 433.433438][ T5816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 433.857062][ T5816] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.947142][ T5816] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 434.058560][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.145932][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.523958][ T8808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.869466][ T5816] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 435.392963][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1023'. [ 440.005741][ T5839] usb 2-1: USB disconnect, device number 6 [ 440.368904][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375284][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.105455][ T8845] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 444.695471][ T8867] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 449.659650][ T8893] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 451.736533][ T8921] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 455.422340][ T8946] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 458.503024][ T8972] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 460.679519][ T9002] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 463.604495][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.661718][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.928371][ T9033] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 468.274219][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.309140][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.462547][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1120'. [ 472.826953][ T9067] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 475.738142][ T9088] loop3: detected capacity change from 0 to 7 [ 475.747268][ T9088] Dev loop3: unable to read RDB block 7 [ 475.753868][ T9088] loop3: unable to read partition table [ 475.765184][ T9088] loop3: partition table beyond EOD, truncated [ 475.773412][ T9088] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.808778][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 476.184718][ T9097] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 477.504133][ T9101] binder: BINDER_SET_CONTEXT_MGR already set [ 477.511612][ T9101] binder: 9100:9101 ioctl 4018620d 2000000002c0 returned -16 [ 479.469710][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 479.958681][ T6022] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 480.969422][ T6022] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.190658][ T6022] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 481.271659][ T6022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 481.331134][ T6022] usb 4-1: Product: syz [ 481.384173][ T6022] usb 4-1: Manufacturer: syz [ 481.425669][ T9133] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 481.452385][ T6022] usb 4-1: SerialNumber: syz [ 482.979209][ T6022] usb 4-1: can't set config #1, error -71 [ 483.031491][ T6022] usb 4-1: USB disconnect, device number 2 [ 483.346551][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 490.329894][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.341872][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.187889][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.197910][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 493.209218][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.612146][ T9187] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 499.910829][ T9197] random: crng reseeded on system resumption [ 501.752389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.761779][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.310357][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 502.420759][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 502.439526][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 502.473069][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 502.854587][ T9214] 9pnet_virtio: no channels available for device syz [ 504.265015][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 504.559139][ T9229] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 505.497768][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'. [ 505.585559][ T9232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.371839][ T9243] tmpfs: Bad value for 'nr_inodes' [ 507.433631][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 509.929104][ T9254] random: crng reseeded on system resumption [ 511.321622][ T9261] loop3: detected capacity change from 0 to 7 [ 511.340654][ T9261] Dev loop3: unable to read RDB block 7 [ 511.346368][ T9261] loop3: unable to read partition table [ 511.354214][ T9261] loop3: partition table beyond EOD, truncated [ 511.360875][ T9261] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.641165][ T9271] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 514.462081][ T9280] 9pnet_virtio: no channels available for device syz [ 515.871182][ T9287] mmap: syz.1.1200 (9287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 516.332129][ T9295] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 516.567367][ T9303] random: crng reseeded on system resumption [ 522.461759][ T9332] ceph: No mds server is up or the cluster is laggy [ 522.536886][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 522.553004][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 522.676997][ T9337] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 522.775872][ T9341] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 522.830997][ T9343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 533.551108][ T9374] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 535.342581][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 535.441960][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 535.892344][ T9390] ceph: No mds server is up or the cluster is laggy [ 536.103001][ T9396] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 536.226883][ T9396] netlink: 'syz.0.1233': attribute type 2 has an invalid length. [ 537.829253][ T9400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.688840][ T9414] warning: `syz.1.1239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 552.463248][ T9448] fuse: Unknown parameter '0xffffffffffffffff' [ 563.198680][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.205822][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.299243][ T9508] overlay: Unknown parameter '/' [ 568.896067][ T9510] input: syz0 as /devices/virtual/input/input17 [ 573.088216][ T6022] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 573.276121][ T6022] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 573.298521][ T6022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.321205][ T6022] usb 2-1: config 0 has no interface number 0 [ 573.327384][ T6022] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 573.358511][ T6022] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.382905][ T6022] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 573.392476][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.415150][ T6022] usb 2-1: config 0 descriptor?? [ 573.455086][ T6022] ldusb 2-1:0.55: Interrupt in endpoint not found [ 575.338634][ T9513] syz.1.1270[9513]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 575.385056][ T9004] usb 2-1: USB disconnect, device number 7 [ 576.077576][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.086449][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.162989][ T9531] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.174845][ T9531] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.184663][ T9531] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.196625][ T9531] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.290140][ T9531] geneve2: left allmulticast mode [ 584.632652][ T9574] overlay: Unknown parameter '/' [ 585.310787][ T9574] input: syz0 as /devices/virtual/input/input18 [ 590.752255][ T9589] tmpfs: Bad value for 'nr_inodes' [ 590.801915][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 592.186733][ T9598] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 592.816366][ T9611] 9pnet_virtio: no channels available for device syz [ 593.779135][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 595.330452][ T175] libceph: connect (1)[c::]:6789 error -101 [ 595.336755][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 595.517552][ T9619] overlay: Unknown parameter '/' [ 596.764290][ T9614] ceph: No mds server is up or the cluster is laggy [ 599.050227][ T9632] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 599.318747][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 599.502846][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 599.518770][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 599.526387][ T28] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 599.538842][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 599.548533][ T28] usb 4-1: config 189 has no interface number 0 [ 599.561257][ T28] usb 4-1: config 189 interface 127 has no altsetting 0 [ 599.576948][ T28] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 599.591440][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.603970][ T28] usb 4-1: Product: syz [ 599.609041][ T28] usb 4-1: Manufacturer: syz [ 599.613887][ T28] usb 4-1: SerialNumber: syz [ 599.830575][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 600.382635][ T9643] ceph: No mds server is up or the cluster is laggy [ 600.574752][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 602.066008][ T9664] tmpfs: Bad value for 'nr_inodes' [ 602.142384][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 603.719809][ T28] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 603.897805][ T28] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 604.029979][ T28] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 604.076724][ T28] safe_serial 4-1:189.127: safe_serial converter detected [ 604.101355][ T28] safe_serial: probe of 4-1:189.127 failed with error -22 [ 604.141222][ T28] usb 4-1: USB disconnect, device number 3 [ 604.408485][ T9542] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 604.453066][ T175] libceph: connect (1)[c::]:6789 error -101 [ 604.470105][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 604.854546][ T175] libceph: connect (1)[c::]:6789 error -101 [ 605.429834][ T9687] ceph: No mds server is up or the cluster is laggy [ 605.632483][ T9542] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 605.716290][ T9542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.186085][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 606.406705][ T9542] usb 3-1: can't set config #1, error -71 [ 606.418033][ T9542] usb 3-1: USB disconnect, device number 8 [ 606.600787][ T9706] tmpfs: Bad value for 'nr_inodes' [ 606.658092][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 608.167088][ T9722] fuse: Bad value for 'fd' [ 610.206360][ T9724] overlayfs: failed to verify origin (351/file1, ino=1929, err=-116) [ 610.237624][ T9724] overlayfs: failed to verify origin (351/file1, ino=1929, err=-116) [ 610.494661][ T9736] tmpfs: Bad value for 'nr_inodes' [ 610.537885][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 620.310720][ T9806] syzkaller1: entered promiscuous mode [ 620.316623][ T9806] syzkaller1: entered allmulticast mode [ 621.068215][ T9821] tmpfs: Bad value for 'nr_inodes' [ 621.105107][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 623.858325][ C1] sched: RT throttling activated [ 624.879110][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.885486][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.870655][ T9849] overlayfs: failed to verify origin (357/file1, ino=1982, err=-116) [ 627.879095][ T9849] overlayfs: failed to verify origin (357/file1, ino=1982, err=-116) [ 628.070892][ T9856] input: syz0 as /devices/virtual/input/input20 [ 628.231723][ T9861] tmpfs: Bad value for 'nr_inodes' [ 629.207834][ T9860] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 631.826872][ T9881] overlayfs: failed to verify origin (325/file1, ino=1781, err=-116) [ 631.844468][ T9881] overlayfs: failed to verify origin (325/file1, ino=1781, err=-116) [ 636.453016][ T175] libceph: connect (1)[c::]:6789 error -101 [ 636.469853][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 636.748868][ T175] libceph: connect (1)[c::]:6789 error -101 [ 637.762856][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 638.554437][ T9898] ceph: No mds server is up or the cluster is laggy [ 638.781245][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 639.571373][ T175] libceph: connect (1)[c::]:6789 error -101 [ 639.577633][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 641.835307][ T175] libceph: connect (1)[c::]:6789 error -101 [ 641.841855][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 642.103746][ T9942] input: syz0 as /devices/virtual/input/input21 [ 642.155647][ T9943] overlayfs: failed to verify origin (346/file1, ino=1892, err=-116) [ 642.164622][ T9943] overlayfs: failed to verify origin (346/file1, ino=1892, err=-116) [ 653.460302][ T9967] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 653.890009][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 654.160345][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 654.534005][ T175] libceph: connect (1)[c::]:6789 error -101 [ 654.612812][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 654.858782][ T9978] ceph: No mds server is up or the cluster is laggy [ 655.276604][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 655.318490][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 657.325618][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 657.466028][ T9999] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/. failed with error -5 [ 657.485006][ T9999] netdevsim netdevsim1: loading /lib/firmware/updates/. failed with error -5 [ 657.499199][ T9999] netdevsim netdevsim1: loading /lib/firmware/syzkaller/. failed with error -5 [ 657.513867][ T9999] netdevsim netdevsim1: loading /lib/firmware/. failed with error -5 [ 657.523626][ T9999] netdevsim netdevsim1: Direct firmware load for . failed with error -5 [ 657.532404][ T9999] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 664.788564][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 664.897702][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 665.248438][ T175] libceph: connect (1)[c::]:6789 error -101 [ 665.299330][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 665.727990][T10025] ceph: No mds server is up or the cluster is laggy [ 665.916214][T10031] tipc: Started in network mode [ 665.941492][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 665.997988][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 666.007774][T10031] tipc: Node identity , cluster identity 4711 [ 666.094872][T10031] tipc: Failed to obtain node identity [ 666.161318][T10031] tipc: Enabling of bearer rejected, failed to enable media [ 667.866547][ T8] libceph: connect (1)[c::]:6789 error -101 [ 667.873006][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 668.100093][T10036] overlayfs: failed to verify origin (369/file1, ino=2057, err=-116) [ 668.120855][T10036] overlayfs: failed to verify origin (369/file1, ino=2057, err=-116) [ 668.231610][T10031] loop5: detected capacity change from 0 to 7 [ 668.285538][T10031] Dev loop5: unable to read RDB block 7 [ 668.291338][T10031] loop5: AHDI p1 p2 p3 [ 668.300726][T10031] loop5: partition table partially beyond EOD, truncated [ 668.328546][T10031] loop5: p1 start 1601398130 is beyond EOD, truncated [ 668.335790][T10031] loop5: p2 start 1702059890 is beyond EOD, truncated [ 670.590720][T10061] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 673.271456][ T8] libceph: connect (1)[c::]:6789 error -101 [ 673.337212][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 673.579314][T10070] ceph: No mds server is up or the cluster is laggy [ 673.711810][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 673.717943][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 673.929265][T10079] tmpfs: Bad value for 'nr_inodes' [ 673.962726][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 675.573582][T10084] overlayfs: failed to verify origin (355/file1, ino=1953, err=-116) [ 675.588824][T10084] overlayfs: failed to verify origin (355/file1, ino=1953, err=-116) [ 675.608867][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.644445][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.709983][ T27] audit: type=1326 audit(1786419715.268:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 675.733900][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.071411][ T27] audit: type=1326 audit(1786419715.358:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 676.095555][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.489590][ T27] audit: type=1326 audit(1786419715.378:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 676.513817][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.801948][ T27] audit: type=1326 audit(1786419715.428:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 677.076193][ T27] audit: type=1326 audit(1786419715.428:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 677.100430][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.440487][ T27] audit: type=1326 audit(1786419715.518:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 677.464561][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.698321][ T27] audit: type=1326 audit(1786419715.578:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 677.927084][ T27] audit: type=1326 audit(1786419715.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 677.951205][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.254086][ T27] audit: type=1326 audit(1786419715.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 678.278307][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.565219][ T27] audit: type=1326 audit(1786419715.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 681.230629][ T27] kauditd_printk_skb: 70 callbacks suppressed [ 681.230744][ T27] audit: type=1326 audit(1786419720.008:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.0.1426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbcffd9e0d9 code=0x7ffc0000 [ 685.323924][T10109] syzkaller0: entered promiscuous mode [ 685.341774][T10109] syzkaller0: entered allmulticast mode [ 685.381382][ T175] libceph: connect (1)[c::]:6789 error -101 [ 685.387497][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 685.483212][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 685.649124][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 685.659899][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 685.927242][T10125] tmpfs: Bad value for 'nr_inodes' [ 685.965553][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 686.071782][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.078097][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.208879][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 686.215011][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 687.049773][T10116] ceph: No mds server is up or the cluster is laggy [ 687.798528][ T5816] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 689.489861][ T5816] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 689.501296][ T5816] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 689.512220][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.523201][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.556374][T10138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 689.567766][ T5816] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 690.067563][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 691.652915][ T8] usb 2-1: USB disconnect, device number 8 [ 691.928670][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 691.947438][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 692.053089][T10167] tmpfs: Bad value for 'nr_inodes' [ 692.104660][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 692.228868][ T8] libceph: connect (1)[c::]:6789 error -101 [ 692.235114][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 693.115760][T10159] ceph: No mds server is up or the cluster is laggy [ 693.297684][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 696.002028][ T6022] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 696.290461][T10193] tmpfs: Bad value for 'nr_inodes' [ 696.476487][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 697.068656][ T6022] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 697.160569][ T6022] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 697.161143][ T6022] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 697.161290][ T6022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.095918][T10184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.281713][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 698.321579][ T6022] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 699.583337][T10205] ceph: No mds server is up or the cluster is laggy [ 699.665129][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 699.671349][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 699.789153][ T6022] usb 3-1: USB disconnect, device number 9 [ 702.001633][T10232] tmpfs: Bad value for 'nr_inodes' [ 702.068652][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 703.688460][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 703.728837][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 703.735024][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 703.880861][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.905657][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 703.941121][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.981744][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 703.991098][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.019118][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 704.029962][T10240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 704.042444][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 704.070154][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 704.340046][T10247] ceph: No mds server is up or the cluster is laggy [ 704.430417][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1472'. [ 704.527756][ T8] usb 4-1: USB disconnect, device number 4 [ 704.802891][T10269] overlay: Unknown parameter '/' [ 706.339130][T10297] overlay: Unknown parameter '/' [ 707.174647][T10294] ceph: No mds server is up or the cluster is laggy [ 707.195164][ T8] libceph: connect (1)[c::]:6789 error -101 [ 707.221564][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 710.389964][ T6022] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 710.622292][ T6022] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.736299][T10335] overlay: Unknown parameter '/' [ 710.759078][ T6022] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 710.875157][ T6022] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.988200][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.490109][T10318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 711.680393][ T6022] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 711.753423][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 711.770956][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 711.942965][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1497'. [ 712.048820][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 712.054943][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 712.465883][T10343] ceph: No mds server is up or the cluster is laggy [ 712.574020][T10346] syzkaller0: entered promiscuous mode [ 712.580545][ T6022] libceph: connect (1)[c::]:6789 error -101 [ 712.586822][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 712.590813][ T8] usb 2-1: USB disconnect, device number 9 [ 712.592965][T10346] syzkaller0: entered allmulticast mode [ 715.248194][T10371] overlay: Unknown parameter '/' [ 716.662841][ T175] libceph: connect (1)[c::]:6789 error -101 [ 716.752320][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 717.204968][ T175] libceph: connect (1)[c::]:6789 error -101 [ 717.283083][ T175] libceph: mon0 (1)[c::]:6789 connect error [ 717.593196][T10378] ceph: No mds server is up or the cluster is laggy [ 718.433934][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1524'. [ 720.631924][T10423] input: syz0 as /devices/virtual/input/input22 [ 721.058101][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'. [ 721.136596][T10443] tmpfs: Bad value for 'nr_inodes' [ 721.202897][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 721.351049][T10402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.723657][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 725.126111][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 725.144663][T10482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'. [ 728.004134][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'. [ 728.029642][T10479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.681578][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 730.013973][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 733.185674][T10540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.473445][T10564] overlayfs: failed to verify origin (402/file1, ino=2255, err=-116) [ 734.481808][T10564] overlayfs: failed to verify origin (402/file1, ino=2255, err=-116) [ 734.916606][T10580] tmpfs: Bad value for 'nr_inodes' [ 734.970390][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 741.549040][T10622] tmpfs: Bad value for 'nr_inodes' [ 741.595355][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 742.206207][T10626] random: crng reseeded on system resumption [ 747.539140][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.545623][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.807220][T10664] tmpfs: Bad value for 'nr_inodes' [ 747.895515][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 749.286030][T10672] random: crng reseeded on system resumption [ 750.584172][T10677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 754.372981][T10702] tmpfs: Bad value for 'nr_inodes' [ 754.461971][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 755.330015][T10711] overlay: Unknown parameter '/' [ 755.459368][T10715] random: crng reseeded on system resumption [ 756.792670][T10713] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 762.577430][T10745] overlay: Unknown parameter '/' [ 762.830860][T10753] input: syz0 as /devices/virtual/input/input23 [ 773.931520][T10765] random: crng reseeded on system resumption [ 774.575240][T10781] tmpfs: Bad value for 'nr_inodes' [ 774.620460][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 776.734222][T10763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.367206][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 781.552878][T10808] random: crng reseeded on system resumption [ 785.588852][T10824] tmpfs: Bad value for 'nr_inodes' [ 785.627724][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 786.843947][T10818] random: crng reseeded on system resumption [ 792.668126][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 793.069108][T10854] random: crng reseeded on system resumption [ 797.278602][T10866] random: crng reseeded on system resumption [ 801.231395][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 801.354760][T10910] random: crng reseeded on system resumption [ 802.662703][T10919] tmpfs: Bad value for 'nr_inodes' [ 802.712545][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 808.953671][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.960133][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.587377][T10934] random: crng reseeded on system resumption [ 810.246699][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 810.904030][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 810.913815][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 811.281882][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 811.287944][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 811.967650][T10965] ceph: No mds server is up or the cluster is laggy [ 813.121365][T10981] random: crng reseeded on system resumption [ 813.242913][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 813.637603][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 813.665835][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 813.681565][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 813.696739][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 813.756471][T10996] 9pnet_virtio: no channels available for device syz [ 815.000529][T10983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 815.480031][ T28] libceph: connect (1)[c::]:6789 error -101 [ 815.506619][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 816.605401][T11012] ceph: No mds server is up or the cluster is laggy [ 817.076759][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 817.168643][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 818.124612][ T9542] libceph: connect (1)[c::]:6789 error -101 [ 818.190672][ T9542] libceph: mon0 (1)[c::]:6789 connect error [ 819.351798][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 819.388574][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 822.239492][T11031] random: crng reseeded on system resumption [ 822.290753][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 822.347582][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 822.366606][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 822.461982][T11032] 9pnet_virtio: no channels available for device syz [ 822.521790][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 823.104270][T11038] tmpfs: Bad value for 'nr_inodes' [ 823.143101][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 825.970975][T11037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.946681][ T8] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 833.057846][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 833.092070][T11076] random: crng reseeded on system resumption [ 833.108485][ T8] usb 2-1: device not accepting address 10, error -71 [ 833.119815][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 833.137940][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 833.154734][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 833.218956][T11080] 9pnet_virtio: no channels available for device syz [ 836.932362][T11076] input: syz0 as /devices/virtual/input/input24 [ 842.902019][T11090] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 843.160028][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 843.188069][T11100] wg2 speed is unknown, defaulting to 1000 [ 846.085284][T11106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.298631][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 849.405815][ T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 849.439317][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 849.462902][ T28] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 849.477866][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.509406][ T28] usb 4-1: config 0 descriptor?? [ 849.515355][T11127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 849.531547][ T28] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 853.452169][ T970] usb 4-1: USB disconnect, device number 5 [ 853.822415][T11149] Invalid ELF header magic: != ELF [ 862.545542][T11195] random: crng reseeded on system resumption [ 870.826095][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.840907][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.347768][T11261] random: crng reseeded on system resumption SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 897.417358][ T3506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.521074][ T3506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.602821][ T3506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.689408][ T3506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.122659][ T3477] infiniband syz2: set down [ 898.138322][ T5816] wg2 speed is unknown, defaulting to 1000 [ 898.145966][ T5816] wg2 speed is unknown, defaulting to 1000 [ 899.045431][ T3506] hsr_slave_0: left promiscuous mode [ 899.053348][ T3506] hsr_slave_1: left promiscuous mode [ 899.061175][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.069782][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.077868][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.085919][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.095466][ T3506] bridge_slave_1: left allmulticast mode [ 899.101232][ T3506] bridge_slave_1: left promiscuous mode [ 899.108759][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.121388][ T3506] bridge_slave_0: left allmulticast mode [ 899.127086][ T3506] bridge_slave_0: left promiscuous mode [ 899.133172][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.162200][ T3506] veth1_macvtap: left promiscuous mode [ 899.169221][ T3506] veth0_macvtap: left promiscuous mode [ 899.175298][ T3506] veth1_vlan: left promiscuous mode [ 899.182106][ T3506] veth0_vlan: left promiscuous mode [ 899.255904][ T3506] infiniband syz2: set down [ 899.769837][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 899.817078][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 899.863342][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.913108][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.039721][ T8325] smc: removing ib device syz2 [ 900.475260][ T3506] bond0 (unregistering): Released all slaves [ 900.691037][ T9004] wg2 speed is unknown, defaulting to 1000 [ 901.203840][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.286287][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.364949][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.452866][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.911321][ T3506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.979774][ T3506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.052970][ T3506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.120481][ T3506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.366107][ T3506] tipc: Left network mode [ 903.721295][ T3506] hsr_slave_0: left promiscuous mode [ 903.728836][ T3506] hsr_slave_1: left promiscuous mode [ 903.734982][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.742611][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.750858][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.760057][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.767654][ T3506] bridge_slave_1: left allmulticast mode [ 903.773411][ T3506] bridge_slave_1: left promiscuous mode [ 903.779356][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.789084][ T3506] bridge_slave_0: left allmulticast mode [ 903.794756][ T3506] bridge_slave_0: left promiscuous mode [ 903.800982][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.814829][ T3506] hsr_slave_0: left promiscuous mode [ 903.820961][ T3506] hsr_slave_1: left promiscuous mode [ 903.827525][ T3506] bridge_slave_1: left allmulticast mode [ 903.833557][ T3506] bridge_slave_1: left promiscuous mode [ 903.840236][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.849777][ T3506] bridge_slave_0: left allmulticast mode [ 903.855435][ T3506] bridge_slave_0: left promiscuous mode [ 903.861296][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.875337][ T3506] hsr_slave_0: left promiscuous mode [ 903.881345][ T3506] hsr_slave_1: left promiscuous mode [ 903.887602][ T3506] bridge_slave_0: left allmulticast mode [ 903.893405][ T3506] bridge_slave_0: left promiscuous mode [ 903.899232][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.935133][ T3506] veth1_macvtap: left promiscuous mode [ 903.942246][ T3506] veth0_macvtap: left promiscuous mode [ 903.947863][ T3506] veth1_vlan: left promiscuous mode [ 903.953304][ T3506] veth0_vlan: left promiscuous mode [ 903.964334][ T3506] veth1_macvtap: left promiscuous mode [ 903.970025][ T3506] veth0_macvtap: left promiscuous mode [ 903.975629][ T3506] veth1_vlan: left promiscuous mode [ 903.981142][ T3506] veth0_vlan: left promiscuous mode [ 904.645768][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 904.696706][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 904.740950][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.791407][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.115239][ T3506] bond0 (unregistering): Released all slaves [ 905.314890][ T3506] bond1 (unregistering): Released all slaves [ 905.791698][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 905.836357][ T3506] team0 (unregistering): Port device team_slave_0 removed