last executing test programs: 2m48.868480725s ago: executing program 2 (id=2699): listen(0xffffffffffffffff, 0x39b3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m47.658668858s ago: executing program 2 (id=2703): clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 2m46.26366364s ago: executing program 2 (id=2708): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 2m41.199634523s ago: executing program 2 (id=2721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4080) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) 2m40.203956356s ago: executing program 2 (id=2722): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1001000, 0x3) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, 0x0, 0x0) 2m35.754404737s ago: executing program 2 (id=2733): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$eJzs3U1rG0cfAPD/ynLenycOhND2UAw5NCWNHNt9SaGQ9Fja0EB7T4WtmGA5CpYcYjeQ5NBceimhUEoDpR+g9x5Dv0C/Qi+BNhBKMO0hF5WVV7EiW7Yli9i1fj9YeWZ35dn/7sxoVrtiAxhYo+lLLuLViPgmiTjasiwf2cLRlfWWn96aSqck6vXP/koiyeY110+yv4ezzCsR8etXEadza8utLi7NFsvl0nyWH6vNXR+rLi6duTpXnCnNlK5NTE6ee2dy4v333u1brG9e+uf7Tx9+dO7rk8vf/fz42P0kLsSRbFkzjoPbK+JOa2Y0RrN9MhwX2lYc3145u06y0xtAT4aydj4caR9wNIayVg/sfbcjog4MqET7hwHVHAc0z+1bz+cHwZMPV06A1safX/luJA7sT18PLScvnBml57sjfSg/LeOXPx/cT6do+z6l3e0Xs0N9KB4YYHfuRsTZfH5t/5dk/V/vzja+PN5YexmD9vkDO+lhOv55a73xT645/mm8to9/Dq/TdnuxefvPPW5bJenntYZ0/PfBuuPf513XyFCW+19jzDecXLlaLp2NiP9HxKkY3p/mN7qec275Ub3TstbxXzql5TfHgtl2PM7vf/E908VacTsxt3pyN+K11fFvEmv6/wONsW778U/3x6UtlnGi9OD1Tss2j7/V7a0HtkX1nyLeWPf4r9ayZOPrk2ON+jDWrBVr/X3vxG+dyu8u/v57cnelom8Q/0jSer222n0ZPx54Vuq0rNf6vy/5vJHetzLrWb1Yq82PR+xLPmmdHzfT+ROr723mb2brp/X/1MmN+7/16v/BiPhii/HfO36v46rdHv9tXp9eI41/uqvj333i0cdf/tB7/Onxf7uROpXN2Ur/t9UN3M6+AwAAAAAAgN0mFxFHIskVnqdzuUJh5f6O43EoV65Ua6evVBauTUfjt7IjMZxrXuk+2nI/xHh2P2wzP9GWn4yIYxHx7dDBRr4wVSlP73TwAAAAAAAAAAAAAAAAAAAAsEsc7vD7/9QfnjAFe59HfsPg2rT99+NJT8Cu1KH99/9pW8CuY/wPg0v7h8HVaP8dH9EJ7GU+/2Fw9dD+3RoAe4TPfxhc+biz05sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe8mlixfTqb789NZUmp++sbgwW7lxZrpUnS3MLUwVpirz1wszlcpMuVSYqsxt9v/Klcr18YlYuDlWK1VrY9XFpctzlYVrtctX54ozpcul4ZcSFQAAAAAAAAAAAAAAAAAAAPy3VBeXZovlcmm+q8Tv0cu7VhO5bZX+shPnY1dsRs+JZLP9fD47HD0Vkd/5ACW6Swxlx3vDlXeoQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdfwbAAD//39JMAE=") r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c00028005000100000000003000"], 0x8c}}, 0x0) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0xd9f, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x6, 0x2, 0xffff2d34, 0xfffffe03, 0x6, 0x3, 0xfffffffc, 0x4ed, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x6, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0xfffffffa, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x80400, 0x80, 0x1, 0x5, 0x6, 0x7, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff2, 0x1, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0xb, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x200, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8003, 0x9, 0x8, 0x9, 0x7, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x1, 0x4, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x7, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x400005, 0x9, 0x4, 0x6, 0x3, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbc7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x20000008, 0x2, 0x17f, 0x6, 0x38, 0x800003, 0x3, 0x0, 0x3, 0x4, 0x0, 0x1000, 0xa2, 0x7, 0xc43, 0x5, 0x6, 0xac9, 0x0, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2002, 0x8080a2ed, 0x4, 0x25], [0x8000d, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x410080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0xa, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0xffff8000, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000004c0)={0xfffffff5, 0x3, 0x3cd5b323, 0xe4cf, 0x5, "000026010000ffffff08230100000000c100", 0x8, 0x8}) mkdir(0x0, 0x4e) getpid() sync() 2m19.51057197s ago: executing program 32 (id=2733): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c00028005000100000000003000"], 0x8c}}, 0x0) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0xd9f, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x6, 0x2, 0xffff2d34, 0xfffffe03, 0x6, 0x3, 0xfffffffc, 0x4ed, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x6, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0xfffffffa, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x80400, 0x80, 0x1, 0x5, 0x6, 0x7, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff2, 0x1, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0xb, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x200, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8003, 0x9, 0x8, 0x9, 0x7, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x1, 0x4, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x7, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x400005, 0x9, 0x4, 0x6, 0x3, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbc7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x20000008, 0x2, 0x17f, 0x6, 0x38, 0x800003, 0x3, 0x0, 0x3, 0x4, 0x0, 0x1000, 0xa2, 0x7, 0xc43, 0x5, 0x6, 0xac9, 0x0, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x9, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2002, 0x8080a2ed, 0x4, 0x25], [0x8000d, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x410080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0xa, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0xffff8000, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000004c0)={0xfffffff5, 0x3, 0x3cd5b323, 0xe4cf, 0x5, "000026010000ffffff08230100000000c100", 0x8, 0x8}) mkdir(0x0, 0x4e) getpid() sync() 1m13.825338324s ago: executing program 3 (id=2889): unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 1m13.138657339s ago: executing program 3 (id=2891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x28c2008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4028, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1}}, 0x40) 1m12.230975857s ago: executing program 3 (id=2893): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 1m11.538810762s ago: executing program 3 (id=2896): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) 1m6.771624721s ago: executing program 3 (id=2903): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000440)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000a7d000/0x4000)=nil, 0x2000, 0x3}) write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x0, @time={0x4000000, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}], 0x1c) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 1m5.802697381s ago: executing program 3 (id=2906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 1m5.127986206s ago: executing program 33 (id=2906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 16.15867121s ago: executing program 1 (id=3014): socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x41) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x70, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5d, 0x2, 0x0, 0x8b, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0x3, 0xd, 0xce}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x1, 0xf2, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r4, 0x4, 0x8, 0x9, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x700, 0x1, 0x1}}) sendmmsg(r2, &(0x7f000001abc0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f0000000200)=@ll={0x11, 0x2, r5, 0x1, 0xfb, 0x6, @remote}, 0x80, &(0x7f000001a8c0), 0x0, &(0x7f000001a980)=[{0x28, 0x118, 0x3, "0e292c604f2a284e7ae7068a7135a7503490cba9ec53b1"}, {0x28, 0x84, 0x4, "eb75f20be688c2ed875fb01b5a20d22fb4ba2e37b6"}, {0xa0, 0x0, 0x0, "e3431ed22084c64ed6c3f0996d8636afd16317bcaee6650b9ae31a632ead92203964e5d08218e42c3064ba50a6d9b85b6dfa892d9b83d132222ffccba3e088dc11b2d5d11cecc6e017e4c63e7d76d624b32bfed2a059df51fa2e8b6240d43c0f176a5fed443b9ae0debfd0b81273f9cde7c5fec984d8d5db3edbb5c5573929847769159ca400f50b248075"}, {0x70, 0x1, 0x7fff, "f3bbf15ca62664dc013ae0be20ceb7a603301d17a8c9b5c29f6668f76f6f4f8894236a684833abf28704726d71054690e7aacb3d2bb0218f2b86ef3ed78e512510e478959d79bfda83fafcdbe0dc2016795d19cb0a9f8a41dc95e0a4acb9"}], 0x160}}, {{&(0x7f000001ab00)=@ieee802154={0x24, @short={0x2, 0x0, 0xfffe}}, 0x80, &(0x7f000001ab80)}}], 0x3, 0x0) 12.145921969s ago: executing program 1 (id=3022): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x6e) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 9.902728546s ago: executing program 1 (id=3026): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xff}) r2 = msgget$private(0x0, 0x10) msgrcv(r2, 0x0, 0x0, 0x1, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x1000, 0x600440) 9.181135583s ago: executing program 4 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 6.742271259s ago: executing program 0 (id=3031): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) read(0xffffffffffffffff, 0x0, 0x0) 5.38143684s ago: executing program 5 (id=3032): pipe2$9p(0x0, 0x4000) stat(0x0, &(0x7f00000014c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 5.125173294s ago: executing program 1 (id=3033): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 5.103433645s ago: executing program 0 (id=3034): socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) userfaultfd(0x80001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.991179702s ago: executing program 1 (id=3035): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="33030052f98310000f001500"], 0x14}}, 0x10) 3.84549605s ago: executing program 0 (id=3036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.610640882s ago: executing program 0 (id=3037): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x8caa, 0x1000, 0xfffffff9, 0x2376}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0xf0) 3.441628411s ago: executing program 4 (id=3038): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.023994813s ago: executing program 4 (id=3039): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ppoll(&(0x7f0000000140)=[{r1, 0x4002}], 0x1, 0x0, 0x0, 0x0) 2.69033112s ago: executing program 5 (id=3040): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d6065"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x3c}}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x20048045) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 1.606958336s ago: executing program 4 (id=3041): stat(0x0, &(0x7f00000014c0)) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) 1.580933128s ago: executing program 5 (id=3042): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) read(0xffffffffffffffff, 0x0, 0x0) 1.398192457s ago: executing program 4 (id=3043): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="b2922250bf00f6402b8d2fc2755bbfab3cd2dfff7fb246a09db8403cbe9d0b5b5cd72ce277a08aa093babc5e44680c85434b5e04fe7d88444676c8272e6170cea15b2df1ccd80066e3bb1d186ca58160d9641526273a8c86f628007784fc9c81bfa148fb0698734e0182b119751819513b469394b4945e9c80c6bd4747b32b4971b909e9ddbd78366caa8eee0055ca71bb3c1f49693f3e1c6712cc7839710e494dd89657a03a831b35", 0xa9}, {&(0x7f0000000200)="ae1c41bd9888e0a4b9b5c07be840a633aa8de9382fec404948b17eeb022ba6bdb75e8dfedf46684178f37a9b82f13ad29dad8b928d2af9ecb0ad368ce941e35b3e7fd61cccac5fc898faa71f6d2ab81ef50e43748aec29af5553830b8ab2cdf39753078a0038eddc5941448a115ebedabcd97635507fe73224583cb4d0441e36b1aa131905a4b9f455849367add048735b2a874d7c0225c6541446163839f4812298b70d424fdce196af33c95cc5f7a90eb897371f3fc79ef2206011b2be10e3c195a9c3da4cb4e2b5e3849a3fc83ab7ba42d9ace76fd0f999c4176c", 0xdc}, {&(0x7f0000000300)="a026", 0x2}, {&(0x7f0000000380)="d83c1242cbceda", 0x7}, {&(0x7f00000003c0)="d2ab632b1ddee577b89b4eda7aac0f5ff51ef630cc553c4c827d60b4d12d3774c7f037c53c235caecd9a4fd1ba0fcdd0c9439e6776f488129b31e6f74b0c0c7a811e78351fa3ffe78a62f1005e6f71a20fa31ef835e88d56bf512c5217cff75958f3c6fd4ff94c0a7f46bbb2", 0x6c}, {&(0x7f0000000440)="ba1e0981ceba7dded0fbfa4f507d93a91eaed6525a6d5a825e79601b0669a0", 0x1f}], 0x6) 1.34812731s ago: executing program 0 (id=3044): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 1.311985412s ago: executing program 5 (id=3045): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.277460853s ago: executing program 1 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 1.130348451s ago: executing program 4 (id=3047): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x5, 0x0, [{0xffff2b63, 0x4, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x1006, 0x7f}}, {0x26, 0x3, 0x1, 0x0, @irqchip={0x6}}, {0x2, 0x5, 0x0, 0x0, @adapter={0x7fff, 0xfff, 0x1, 0x6943, 0x5}}, {0x8e, 0x2, 0x0, 0x0, @msi={0xdfe9, 0x1ba, 0x7, 0x9}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@filename='./file0\x00', r4, &(0x7f0000001500)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 254.041317ms ago: executing program 0 (id=3048): pipe2$9p(0x0, 0x4000) stat(0x0, &(0x7f00000014c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 182.66554ms ago: executing program 5 (id=3049): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) 0s ago: executing program 5 (id=3050): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d6065"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x3c}}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x20048045) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) kernel console output (not intermixed with test programs): : usb_control_msg returned -32 [ 1285.418870][ T8] usbtmc 2-1:16.0: can't read capabilities [ 1285.491374][T14493] loop2: detected capacity change from 0 to 4096 [ 1286.187564][T14482] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1286.245869][T10738] usb 2-1: USB disconnect, device number 18 [ 1289.360590][T14502] loop0: detected capacity change from 0 to 4096 [ 1290.981634][T14521] ubi: mtd0 is already attached to ubi16 [ 1292.603086][T14537] xt_nat: multiple ranges no longer supported [ 1293.587964][T14545] loop2: detected capacity change from 0 to 4096 [ 1294.348352][T14550] ubi: mtd0 is already attached to ubi16 [ 1295.984861][T14566] loop3: detected capacity change from 0 to 32768 [ 1296.046729][T14568] loop1: detected capacity change from 0 to 32768 [ 1296.072523][T14566] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1296.108270][T14568] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1296.153389][T14566] XFS (loop3): Ending clean mount [ 1296.165025][T14566] XFS (loop3): Quotacheck needed: Please wait. [ 1296.232881][T14568] XFS (loop1): Ending clean mount [ 1296.246098][T14568] XFS (loop1): Quotacheck needed: Please wait. [ 1296.305645][T14566] XFS (loop3): Quotacheck: Done. [ 1296.617000][T14568] XFS (loop1): Quotacheck: Done. [ 1296.767556][ T27] audit: type=1800 audit(1776772349.893:65): pid=14568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2234" name="file2" dev="loop1" ino=4423 res=0 errno=0 [ 1297.012672][ T27] audit: type=1800 audit(1776772349.973:66): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2233" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1297.285408][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1297.360671][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1298.485785][T14598] ubi: mtd0 is already attached to ubi16 [ 1298.767785][T14604] loop3: detected capacity change from 0 to 4096 [ 1298.883490][T14609] loop0: detected capacity change from 0 to 4096 [ 1300.286624][T14635] loop1: detected capacity change from 0 to 128 [ 1301.064939][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.079646][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.580777][T14654] xt_nat: multiple ranges no longer supported [ 1304.379672][T14658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.943558][T14674] loop3: detected capacity change from 0 to 128 [ 1306.398501][T14679] loop1: detected capacity change from 0 to 4096 [ 1308.170601][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 1308.590040][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1308.809965][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 1308.860593][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1308.877129][T14726] loop1: detected capacity change from 0 to 4096 [ 1308.945631][ T788] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1309.025062][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.075376][ T788] usb 1-1: Product: ⋫贅筄뫪읛骓᮪졸ߑ돍考菉覐 [ 1309.468665][ T788] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1309.608925][ T788] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1309.696507][ T788] usb 1-1: USB disconnect, device number 11 [ 1309.747858][T13074] udevd[13074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.381401][T14743] loop2: detected capacity change from 0 to 128 [ 1311.505273][T14735] loop3: detected capacity change from 0 to 32768 [ 1311.550035][T14735] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1311.621391][T14735] XFS (loop3): Ending clean mount [ 1311.735682][T14735] XFS (loop3): Quotacheck needed: Please wait. [ 1311.890146][T14735] XFS (loop3): Quotacheck: Done. [ 1312.488614][ T27] audit: type=1800 audit(1776772365.733:67): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2261" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1313.699510][T14765] loop1: detected capacity change from 0 to 4096 [ 1314.051479][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 1314.899720][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1315.693464][T14777] loop1: detected capacity change from 0 to 1024 [ 1315.744359][T14777] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1316.382265][T14787] loop2: detected capacity change from 0 to 128 [ 1318.158476][T14791] loop0: detected capacity change from 0 to 4096 [ 1318.222575][T14794] loop2: detected capacity change from 0 to 2048 [ 1318.278495][T14794] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1319.417416][T14798] syz.1.2277 uses obsolete (PF_INET,SOCK_PACKET) [ 1320.956425][T14805] loop1: detected capacity change from 0 to 4096 [ 1321.981477][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1322.417910][T14823] loop3: detected capacity change from 0 to 128 [ 1326.709975][T14835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1327.819690][T14850] loop2: detected capacity change from 0 to 4096 [ 1328.042946][T14855] syz_tun: entered allmulticast mode [ 1328.329401][T14856] loop3: detected capacity change from 0 to 128 [ 1329.134325][T14853] syz_tun: left allmulticast mode [ 1329.342861][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2296'. [ 1331.092859][T13204] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1331.274729][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1331.334176][T13204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.155817][T13204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.165846][T13204] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1332.185204][T13204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.196471][T13204] usb 4-1: config 0 descriptor?? [ 1332.635517][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.712622][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.740086][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.747013][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.770337][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.788657][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.809670][T13204] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 1332.844473][T13204] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1333.295300][T13204] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 1333.310095][T13204] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 1333.340632][T13204] pyra: probe of 0003:1E7D:2CF6.000A failed with error -71 [ 1333.416843][T13204] usb 4-1: USB disconnect, device number 21 [ 1335.311449][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1336.022110][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 1336.806010][T14933] loop3: detected capacity change from 0 to 4096 [ 1336.907943][T14940] loop1: detected capacity change from 0 to 16 [ 1337.728521][T14933] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1337.770392][T14933] NILFS (loop3): trying rollback from an earlier position [ 1337.919310][T14933] NILFS (loop3): recovery complete [ 1337.951689][T14942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1339.599868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1340.336275][T14955] sg_write: data in/out 32731/14 bytes for SCSI command 0xa-- guessing data in; [ 1340.336275][T14955] program syz.2.2323 not setting count and/or reply_len properly [ 1340.412536][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1341.510937][T14966] loop0: detected capacity change from 0 to 4096 [ 1344.253155][T14989] sg_write: data in/out 32731/14 bytes for SCSI command 0xa-- guessing data in; [ 1344.253155][T14989] program syz.0.2332 not setting count and/or reply_len properly [ 1344.471768][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 1345.503567][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 1348.489065][T15019] random: crng reseeded on system resumption [ 1349.903066][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 1350.470275][T15035] loop2: detected capacity change from 0 to 16 [ 1351.273648][T13074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1351.637278][T15037] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 1351.652286][T15037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1352.135354][T15042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1352.976762][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 1354.213016][T15052] xt_nat: multiple ranges no longer supported [ 1354.309203][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 1354.773697][T15063] loop3: detected capacity change from 0 to 256 [ 1354.851279][T15065] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 1354.893865][ T27] audit: type=1804 audit(1776772408.143:68): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2356" name="/newroot/582/file1/bus" dev="loop3" ino=1048669 res=1 errno=0 [ 1354.920390][T15065] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1356.180461][ T35] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1356.371012][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 1356.493020][ T35] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1356.573775][ T35] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1356.610405][ T35] usb 3-1: Product: syz [ 1356.615610][ T35] usb 3-1: Manufacturer: syz [ 1356.620425][ T35] usb 3-1: SerialNumber: syz [ 1356.753894][ T35] usb 3-1: config 0 descriptor?? [ 1356.959098][T15081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1357.144021][ T35] usb 3-1: USB disconnect, device number 10 [ 1357.584364][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'. [ 1358.549964][ T6163] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1358.770192][ T6163] usb 2-1: Using ep0 maxpacket: 8 [ 1358.816602][ T6163] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1358.825225][ T6163] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1358.865684][ T9290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.877150][ T6163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1358.890919][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1358.892469][ T6163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1358.908981][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1358.918008][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1358.930049][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1358.942281][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1358.950739][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1358.951122][ T6163] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.050545][ T6163] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1359.094525][ T6163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.129368][ T9290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.150522][T15097] loop3: detected capacity change from 0 to 4096 [ 1359.302629][ T9290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.537333][ T6163] usb 2-1: usb_control_msg returned -71 [ 1359.564182][ T6163] usbtmc 2-1:16.0: can't read capabilities [ 1359.613980][ T6163] usb 2-1: USB disconnect, device number 19 [ 1359.628808][ T9290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.690293][T15103] netlink: 'syz.0.2368': attribute type 10 has an invalid length. [ 1359.969185][T15108] syz_tun: entered allmulticast mode [ 1359.990051][T15095] chnl_net:caif_netlink_parms(): no params data found [ 1360.009562][T15106] syz_tun: left allmulticast mode [ 1360.152734][ T9290] tipc: Left network mode [ 1360.702643][T15124] loop1: detected capacity change from 0 to 4096 [ 1361.047010][T15095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.054847][ T5770] Bluetooth: hci1: command tx timeout [ 1361.110670][T15095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.138317][T15095] bridge_slave_0: entered allmulticast mode [ 1361.147081][T15095] bridge_slave_0: entered promiscuous mode [ 1361.244842][T15139] overlayfs: failed to resolve './file0': -2 [ 1361.325893][T15095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.388385][T15095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.518850][T15095] bridge_slave_1: entered allmulticast mode [ 1361.678240][T15095] bridge_slave_1: entered promiscuous mode [ 1361.843894][T15139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2374'. [ 1362.004684][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.013399][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.299377][T15095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.489074][T15095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.535721][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 1362.837516][T15095] team0: Port device team_slave_0 added [ 1362.989330][T15095] team0: Port device team_slave_1 added [ 1363.130134][ T5770] Bluetooth: hci1: command tx timeout [ 1363.189385][T15155] loop1: detected capacity change from 0 to 4096 [ 1363.227102][T15095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.250909][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.310994][T15095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.534223][T15095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.564591][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.591842][T15095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.740913][ T9290] bond0: (slave wlan1): Releasing backup interface [ 1363.908682][T15095] hsr_slave_0: entered promiscuous mode [ 1363.921673][T15095] hsr_slave_1: entered promiscuous mode [ 1363.935313][T15095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.956736][T15095] Cannot create hsr debugfs directory [ 1365.009387][ T9290] hsr_slave_0: left promiscuous mode [ 1365.027284][ T9290] hsr_slave_1: left promiscuous mode [ 1365.118288][ T9290] veth1_macvtap: left promiscuous mode [ 1365.118594][ T9290] veth0_macvtap: left promiscuous mode [ 1365.118783][ T9290] veth1_vlan: left promiscuous mode [ 1365.119075][ T9290] veth0_vlan: left promiscuous mode [ 1365.209966][ T5770] Bluetooth: hci1: command tx timeout [ 1367.289961][ T5770] Bluetooth: hci1: command tx timeout [ 1369.696557][ T9290] bond0 (unregistering): Released all slaves [ 1369.817724][T15198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2383'. [ 1369.919895][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2389'. [ 1372.113331][T15238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.532886][T15252] overlayfs: failed to resolve './file0': -2 [ 1372.601540][T15253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2399'. [ 1373.674949][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 1374.419717][T15095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1374.469285][T15095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1374.543904][T15095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1374.578026][T15095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1374.923703][T15276] xt_nat: multiple ranges no longer supported [ 1375.177617][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.309147][T15095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.349122][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.356419][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.468516][T15095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1375.479435][T15095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1375.562656][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.570617][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.902565][ T35] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1376.916001][T15296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1377.024617][T15095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.051024][ T35] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1377.061148][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.069873][ T35] usb 4-1: Product: syz [ 1377.074098][ T35] usb 4-1: Manufacturer: syz [ 1377.078743][ T35] usb 4-1: SerialNumber: syz [ 1377.204419][T15095] veth0_vlan: entered promiscuous mode [ 1377.373916][T15095] veth1_vlan: entered promiscuous mode [ 1377.989807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1378.590875][ T35] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1379.305591][T15095] veth0_macvtap: entered promiscuous mode [ 1379.345319][T15095] veth1_macvtap: entered promiscuous mode [ 1379.458474][T15095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.504560][T15095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.563998][T15095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.592135][T15095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.617695][T15095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.627536][T15095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.861343][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.869432][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.949951][ T35] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1380.101656][T15332] xt_nat: multiple ranges no longer supported [ 1380.142450][ T35] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.189997][ T35] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.217089][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.248604][ T35] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1380.262020][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.301888][ T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.393901][ T35] usb 2-1: config 0 descriptor?? [ 1380.539316][T12631] usb 4-1: USB disconnect, device number 22 [ 1380.558916][T12631] usblp0: removed [ 1381.178622][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1382.853321][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.010209][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.017717][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.025372][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.034585][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.041620][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.054435][ T35] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 1383.064080][ T35] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1383.081100][ T35] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 1383.088773][ T35] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 1383.101914][ T35] pyra: probe of 0003:1E7D:2CF6.000B failed with error -71 [ 1383.124177][ T35] usb 2-1: USB disconnect, device number 20 [ 1383.507336][T15359] fido_id[15359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1383.756304][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1383.879886][ T5775] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1383.947610][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.114916][T12774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1384.126123][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.137083][T12774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1384.143080][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.154486][ T5775] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1384.165569][T12774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1384.177372][T12774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1384.214707][T12774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1384.223720][T12774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1384.238101][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.247284][ T5775] usb 2-1: Product: syz [ 1384.252456][ T5775] usb 2-1: Manufacturer: syz [ 1384.257353][ T5775] usb 2-1: SerialNumber: syz [ 1384.367234][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.380467][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.569108][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.601907][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.738278][ T5775] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1385.461957][T15405] xt_nat: multiple ranges no longer supported [ 1385.919416][T15382] chnl_net:caif_netlink_parms(): no params data found [ 1386.220456][T15417] loop2: detected capacity change from 0 to 16 [ 1386.871464][T12774] Bluetooth: hci0: command tx timeout [ 1386.937365][T13074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1386.985663][T10738] usb 2-1: USB disconnect, device number 21 [ 1387.063899][T10738] usblp0: removed [ 1388.543493][T15382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.586310][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.610279][T15382] bridge_slave_0: entered allmulticast mode [ 1388.860988][T15382] bridge_slave_0: entered promiscuous mode [ 1388.917217][T12774] Bluetooth: hci0: command tx timeout [ 1389.206920][T15382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.232376][T15382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.258843][T15382] bridge_slave_1: entered allmulticast mode [ 1389.290705][T15382] bridge_slave_1: entered promiscuous mode [ 1389.546746][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.573703][T15448] loop3: detected capacity change from 0 to 4096 [ 1389.725892][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.357706][T15382] team0: Port device team_slave_0 added [ 1390.360039][ T5775] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1390.370676][T15382] team0: Port device team_slave_1 added [ 1390.535535][ T1143] bond0: (slave wlan1): Releasing backup interface [ 1390.596026][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.612283][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.614370][ T5775] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1390.656292][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.678187][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.687217][ T5775] usb 2-1: Product: syz [ 1390.700416][ T5775] usb 2-1: Manufacturer: syz [ 1390.705336][ T5775] usb 2-1: SerialNumber: syz [ 1390.722166][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.729650][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.833246][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.970382][T12774] Bluetooth: hci0: command tx timeout [ 1391.086294][T15382] hsr_slave_0: entered promiscuous mode [ 1391.134214][T15382] hsr_slave_1: entered promiscuous mode [ 1391.152150][ T5775] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1391.164337][T15382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.180541][T15382] Cannot create hsr debugfs directory [ 1391.268237][ T1143] hsr_slave_0: left promiscuous mode [ 1391.316238][ T1143] hsr_slave_1: left promiscuous mode [ 1391.401797][ T1143] veth1_macvtap: left promiscuous mode [ 1391.407660][ T1143] veth0_macvtap: left promiscuous mode [ 1391.423149][ T1143] veth1_vlan: left promiscuous mode [ 1391.436908][ T1143] veth0_vlan: left promiscuous mode [ 1392.987844][T12631] usb 2-1: USB disconnect, device number 22 [ 1393.040830][T12631] usblp0: removed [ 1393.051733][T12774] Bluetooth: hci0: command tx timeout [ 1395.585307][T15505] xt_nat: multiple ranges no longer supported [ 1396.349709][T12631] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1396.566631][T12631] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1396.576300][T12631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.611393][T12631] usb 3-1: Product: syz [ 1396.615664][T12631] usb 3-1: Manufacturer: syz [ 1396.659188][T12631] usb 3-1: SerialNumber: syz [ 1397.111019][T12631] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1397.321371][ T1143] bond0 (unregistering): Released all slaves [ 1399.528346][ T8] usb 3-1: USB disconnect, device number 11 [ 1399.630301][ T8] usblp0: removed [ 1400.474867][T15537] overlayfs: missing 'lowerdir' [ 1401.812790][T15382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1401.842148][T15382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1401.897098][T15382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1401.988641][T15552] ubi: mtd0 is already attached to ubi16 [ 1402.449176][T15382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1403.428560][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.020382][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.114872][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.122265][ T9290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.192104][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.199466][ T9290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.243815][T15564] netlink: 'syz.2.2458': attribute type 10 has an invalid length. [ 1404.300866][T15564] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1404.634267][T15578] overlayfs: missing 'lowerdir' [ 1405.873928][T15587] loop2: detected capacity change from 0 to 16 [ 1408.400581][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.642355][T15382] veth0_vlan: entered promiscuous mode [ 1409.676066][T15382] veth1_vlan: entered promiscuous mode [ 1409.712659][T15382] veth0_macvtap: entered promiscuous mode [ 1409.725466][T15382] veth1_macvtap: entered promiscuous mode [ 1409.747858][T15382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.760451][T15382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.779464][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.795077][T15382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.805699][T15382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.873888][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.972721][T15618] overlayfs: missing 'lowerdir' [ 1410.039367][T15382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.085098][T15382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.111537][T15382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.141343][T15382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.560260][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.592783][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.640488][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.694211][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.333418][T15639] loop1: detected capacity change from 0 to 16 [ 1413.242966][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 1414.844283][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1414.855127][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1414.872774][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1414.904911][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1414.915249][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1414.922796][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1416.261673][T15670] ubi: mtd0 is already attached to ubi16 [ 1416.975747][T12774] Bluetooth: hci2: command tx timeout [ 1417.020569][ T59] tipc: Left network mode [ 1417.301641][T15659] chnl_net:caif_netlink_parms(): no params data found [ 1417.871983][T15659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.889245][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.905129][T15659] bridge_slave_0: entered allmulticast mode [ 1417.921806][T15659] bridge_slave_0: entered promiscuous mode [ 1417.966688][T15659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.974402][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.982093][T15659] bridge_slave_1: entered allmulticast mode [ 1417.990700][T15659] bridge_slave_1: entered promiscuous mode [ 1419.055048][T12774] Bluetooth: hci2: command tx timeout [ 1419.175885][T15659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.952559][T15659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.236827][T15659] team0: Port device team_slave_0 added [ 1420.254409][T15659] team0: Port device team_slave_1 added [ 1420.378640][ T59] bond0: (slave wlan1): Releasing backup interface [ 1420.450378][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1420.523631][T15659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.561485][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.628008][T15659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.817150][T15659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.860443][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.979899][T15659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.139082][T12774] Bluetooth: hci2: command tx timeout [ 1421.174714][ T59] hsr_slave_0: left promiscuous mode [ 1421.201957][ T59] hsr_slave_1: left promiscuous mode [ 1421.344380][T15728] ubi: mtd0 is already attached to ubi16 [ 1422.534833][ T59] bond1 (unregistering): Released all slaves [ 1422.617059][T12631] libceph: connect (1)[c::]:6789 error -101 [ 1422.623378][T12631] libceph: mon0 (1)[c::]:6789 connect error [ 1422.881848][T12631] libceph: connect (1)[c::]:6789 error -101 [ 1422.900049][T12631] libceph: mon0 (1)[c::]:6789 connect error [ 1422.998196][T15739] ceph: No mds server is up or the cluster is laggy [ 1423.216153][T12774] Bluetooth: hci2: command tx timeout [ 1423.375758][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.390101][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.216313][T15758] loop0: detected capacity change from 0 to 16 [ 1426.773734][T15766] ubi: mtd0 is already attached to ubi16 [ 1428.805280][T15772] loop2: detected capacity change from 0 to 32768 [ 1428.868556][T15772] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1428.897865][ T59] bond0 (unregistering): Released all slaves [ 1429.016896][T15772] XFS (loop2): Ending clean mount [ 1429.631873][T15659] hsr_slave_0: entered promiscuous mode [ 1429.655432][T15659] hsr_slave_1: entered promiscuous mode [ 1429.655765][T15782] loop0: detected capacity change from 0 to 2048 [ 1429.668633][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 1430.202526][T15782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1430.285031][T15786] loop3: detected capacity change from 0 to 256 [ 1430.520190][ T27] audit: type=1804 audit(1776772483.753:69): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2498" name="/newroot/625/file1/bus" dev="loop3" ino=1048676 res=1 errno=0 [ 1430.557957][T15095] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1431.696634][T15659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1431.764788][T15659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1431.791213][T15659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1431.970508][T15659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1432.676054][T15813] ubi: mtd0 is already attached to ubi16 [ 1433.242722][T15799] loop2: detected capacity change from 0 to 32768 [ 1433.263525][T15799] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2499 (15799) [ 1433.298384][T15799] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1433.330838][T15799] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1433.355673][T15799] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1433.378797][T15816] syz_tun: entered allmulticast mode [ 1433.390020][T15799] BTRFS info (device loop2): use zstd compression, level 3 [ 1433.397471][T15799] BTRFS info (device loop2): using free space tree [ 1433.428215][T15659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.553298][T15659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.694400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.701856][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.763228][T15799] BTRFS info (device loop2): enabling ssd optimizations [ 1433.775437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.782738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.819269][T15799] BTRFS info (device loop2): auto enabling async discard [ 1434.079866][T15840] loop0: detected capacity change from 0 to 16 [ 1434.878365][T15834] loop3: detected capacity change from 0 to 4096 [ 1434.887609][T15095] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1436.361293][T15659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.604797][T15659] veth0_vlan: entered promiscuous mode [ 1436.676524][T15659] veth1_vlan: entered promiscuous mode [ 1436.803150][T15659] veth0_macvtap: entered promiscuous mode [ 1436.834279][T15659] veth1_macvtap: entered promiscuous mode [ 1436.879145][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.900335][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.913277][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.925230][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.941642][T15659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.965004][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.978654][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.998942][T15659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.013203][T15659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.025712][T15659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.046387][T15659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.057177][T15659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.073787][T15659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.086328][T15659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.286495][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.308862][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.419628][T15878] ubi: mtd0 is already attached to ubi16 [ 1437.754467][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.901058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.035894][T15881] syz_tun: entered allmulticast mode [ 1438.080616][T15880] syz_tun: left allmulticast mode [ 1438.867373][T15893] loop2: detected capacity change from 0 to 4096 [ 1439.057762][T12940] syz_tun (unregistering): left allmulticast mode [ 1439.894004][ T3003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.132264][T15907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1440.172127][T15907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1440.201175][T15907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1440.209656][T15907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1440.218938][T15907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1440.227011][T15907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1440.854810][ T3003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.033704][ T3003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.753512][ T3003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.965631][T15921] loop2: detected capacity change from 0 to 4096 [ 1442.343463][T12774] Bluetooth: hci3: command tx timeout [ 1443.223639][T15935] overlayfs: failed to resolve './file0': -2 [ 1444.079038][T15906] chnl_net:caif_netlink_parms(): no params data found [ 1444.573117][T12774] Bluetooth: hci3: command tx timeout [ 1446.650001][T12774] Bluetooth: hci3: command tx timeout [ 1447.230026][T10738] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1447.412186][T10738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.587980][T10738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.601547][T10738] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1447.603864][T15906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.620186][T10738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.212283][T15906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.329379][T15906] bridge_slave_0: entered allmulticast mode [ 1448.379392][T15906] bridge_slave_0: entered promiscuous mode [ 1448.422200][T10738] usb 3-1: config 0 descriptor?? [ 1448.532167][T15906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.587280][T15906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.625378][T15906] bridge_slave_1: entered allmulticast mode [ 1448.671015][T15906] bridge_slave_1: entered promiscuous mode [ 1448.731562][T12774] Bluetooth: hci3: command tx timeout [ 1449.310086][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.350050][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.392259][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.457027][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.481582][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.510478][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.522467][T10738] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 1449.552585][T15906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.569973][T15985] loop0: detected capacity change from 0 to 4096 [ 1449.593574][T15906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.667339][T10738] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1450.521388][T15906] team0: Port device team_slave_0 added [ 1450.704623][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1450.962157][T10738] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 1450.969708][T10738] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 1450.995238][T10738] pyra: probe of 0003:1E7D:2CF6.000C failed with error -71 [ 1451.020078][T10738] usb 3-1: USB disconnect, device number 12 [ 1451.021782][T15906] team0: Port device team_slave_1 added [ 1452.324984][T15906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.338533][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.404580][T15906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.419809][T15906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.427274][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.470943][T15906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.890670][ T3003] hsr_slave_0: left promiscuous mode [ 1453.900883][ T3003] hsr_slave_1: left promiscuous mode [ 1453.958923][ T3003] veth1_macvtap: left promiscuous mode [ 1454.164610][ T3003] veth0_macvtap: left promiscuous mode [ 1455.510000][ T3003] veth1_vlan: left promiscuous mode [ 1455.521751][ T3003] veth0_vlan: left promiscuous mode [ 1455.581371][T16035] loop2: detected capacity change from 0 to 4096 [ 1456.886048][ T788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1457.121474][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.133939][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.144426][ T788] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1457.157077][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.169440][ T788] usb 3-1: config 0 descriptor?? [ 1457.622898][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.649480][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.651849][ T3003] bond0 (unregistering): Released all slaves [ 1457.657762][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.671186][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.678065][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.685951][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.693684][ T788] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0 [ 1457.726629][ T788] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1457.868325][T15906] hsr_slave_0: entered promiscuous mode [ 1457.875841][T15906] hsr_slave_1: entered promiscuous mode [ 1457.883130][T15906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.891994][T15906] Cannot create hsr debugfs directory [ 1457.901611][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1458.146774][T16051] syz_tun: entered allmulticast mode [ 1458.466719][ T788] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 1458.489251][ T788] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 1458.522168][ T788] pyra: probe of 0003:1E7D:2CF6.000D failed with error -71 [ 1458.581267][ T788] usb 3-1: USB disconnect, device number 13 [ 1458.686503][T16063] loop0: detected capacity change from 0 to 256 [ 1460.023678][T15906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1460.095357][T16079] random: crng reseeded on system resumption [ 1460.252492][T15906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1460.317982][T15906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1460.368721][T15906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1462.276068][T15906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.383524][T16099] ubi: mtd0 is already attached to ubi16 [ 1462.828897][T15906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.868276][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.875612][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.960942][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.969152][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.588766][T16113] overlayfs: missing 'lowerdir' [ 1464.677951][T15906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.843206][T15906] veth0_vlan: entered promiscuous mode [ 1464.867340][T15906] veth1_vlan: entered promiscuous mode [ 1464.947955][T15906] veth0_macvtap: entered promiscuous mode [ 1465.004131][T15906] veth1_macvtap: entered promiscuous mode [ 1465.116577][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.901609][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.932548][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1465.953866][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.991540][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.019808][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.062107][T15906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.098625][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.148105][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.148177][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.148218][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.148278][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.148315][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.446354][T15906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.468624][T15906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.533446][T15906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.556435][T15906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.571573][T15906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.051520][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.059470][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.758525][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.788557][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.073488][T16153] loop3: detected capacity change from 0 to 2048 [ 1469.149996][ T788] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1469.176860][T16153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1469.381768][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.419831][ T788] usb 2-1: config 0 has no interfaces? [ 1469.425454][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1469.473379][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.510767][ T788] usb 2-1: config 0 descriptor?? [ 1471.108277][T16164] loop3: detected capacity change from 0 to 1024 [ 1472.720155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1473.451472][T16162] usb 2-1: USB disconnect, device number 23 [ 1475.280112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1476.400332][T16200] loop2: detected capacity change from 0 to 16 [ 1479.535533][T16216] loop3: detected capacity change from 0 to 256 [ 1479.833689][ T788] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1479.863682][T16225] overlayfs: missing 'lowerdir' [ 1481.769888][T15907] Bluetooth: hci1: command 0x0406 tx timeout [ 1481.819974][T16232] ubi: mtd0 is already attached to ubi16 [ 1482.142793][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.166591][ T788] usb 2-1: config 0 has no interfaces? [ 1482.201676][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1482.269805][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.379836][ T788] usb 2-1: config 0 descriptor?? [ 1483.180314][ T788] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1483.349949][ T788] usb 3-1: device descriptor read/64, error -71 [ 1483.490129][T16162] usb 2-1: USB disconnect, device number 24 [ 1483.629988][ T788] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1483.982541][ T788] usb 3-1: device descriptor read/64, error -71 [ 1484.110339][ T788] usb usb3-port1: attempt power cycle [ 1484.547747][ T788] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1484.655125][ T788] usb 3-1: device descriptor read/8, error -71 [ 1484.688654][T16255] loop3: detected capacity change from 0 to 256 [ 1484.728890][T16257] loop0: detected capacity change from 0 to 256 [ 1484.763332][ T27] audit: type=1804 audit(1776772538.003:70): pid=16255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2595" name="/newroot/9/file1/bus" dev="loop3" ino=1048684 res=1 errno=0 [ 1484.818344][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.825181][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.939884][ T788] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1484.972111][ T788] usb 3-1: device descriptor read/8, error -71 [ 1485.120390][ T788] usb usb3-port1: unable to enumerate USB device [ 1486.932343][T16162] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1487.409142][T16162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.459939][T16162] usb 3-1: config 0 has no interfaces? [ 1487.466549][T16162] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1487.475904][T16162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.533808][T16162] usb 3-1: config 0 descriptor?? [ 1490.349001][T10738] usb 3-1: USB disconnect, device number 18 [ 1490.643368][T16300] loop2: detected capacity change from 0 to 32768 [ 1490.743596][T16300] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1490.930215][T10738] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1491.160155][T10738] usb 1-1: device descriptor read/64, error -71 [ 1491.290492][T16300] XFS (loop2): Ending clean mount [ 1491.374023][T16300] XFS (loop2): Quotacheck needed: Please wait. [ 1491.446837][T16300] XFS (loop2): Quotacheck: Done. [ 1491.480004][T10738] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1491.969025][T10738] usb 1-1: device descriptor read/64, error -71 [ 1491.977550][ T27] audit: type=1800 audit(1776772545.223:71): pid=16318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2611" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1492.226835][T10738] usb usb1-port1: attempt power cycle [ 1492.744679][T15095] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1493.051125][T10738] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1493.123002][T10738] usb 1-1: device descriptor read/8, error -71 [ 1493.431741][T10738] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1494.024696][T10738] usb 1-1: device descriptor read/8, error -71 [ 1494.238323][T10738] usb usb1-port1: unable to enumerate USB device [ 1495.451791][T16338] ubi: mtd0 is already attached to ubi16 [ 1496.006337][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1496.335664][T16339] vlan2: entered allmulticast mode [ 1496.425345][T16339] veth0_virt_wifi: entered allmulticast mode [ 1497.246390][T16352] loop2: detected capacity change from 0 to 256 [ 1497.343695][ T27] audit: type=1804 audit(1776772550.593:72): pid=16352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2621" name="/newroot/63/file1/bus" dev="loop2" ino=1048685 res=1 errno=0 [ 1498.379980][ T788] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1498.618672][ T788] usb 2-1: device descriptor read/64, error -71 [ 1498.900340][ T788] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1499.070015][ T788] usb 2-1: device descriptor read/64, error -71 [ 1499.191304][ T788] usb usb2-port1: attempt power cycle [ 1499.612090][ T788] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1499.671570][ T788] usb 2-1: device descriptor read/8, error -71 [ 1499.946660][ T788] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1500.021893][ T788] usb 2-1: device descriptor read/8, error -71 [ 1500.141311][T16377] ubi: mtd0 is already attached to ubi16 [ 1500.211110][ T788] usb usb2-port1: unable to enumerate USB device [ 1501.539865][T16385] loop0: detected capacity change from 0 to 2048 [ 1501.606393][T16385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1505.656511][T16417] ubi: mtd0 is already attached to ubi16 [ 1506.033149][T16420] loop0: detected capacity change from 0 to 32768 [ 1506.227351][T16420] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1506.420916][T16420] XFS (loop0): Ending clean mount [ 1507.433614][T15382] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1507.454654][T15907] Bluetooth: hci0: command 0x0406 tx timeout [ 1507.615341][T16440] loop3: detected capacity change from 0 to 2048 [ 1507.716578][T16440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1508.080080][ T6163] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1508.390317][ T6163] usb 2-1: Using ep0 maxpacket: 8 [ 1508.436821][ T6163] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1508.505722][ T6163] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.611239][ T6163] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1508.716031][ T6163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1508.796888][ T6163] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1508.877707][ T6163] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1508.929063][ T6163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.972822][ T6163] usbtmc 2-1:16.0: bulk endpoints not found [ 1509.232848][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 1509.353502][T16446] loop0: detected capacity change from 0 to 32768 [ 1510.955416][ T5830] usb 2-1: USB disconnect, device number 29 [ 1511.051146][T16462] loop3: detected capacity change from 0 to 256 [ 1511.138804][T16462] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d) [ 1513.076127][T16493] loop1: detected capacity change from 0 to 16 [ 1515.040072][T10738] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1515.239972][T10738] usb 3-1: Using ep0 maxpacket: 8 [ 1515.253919][T10738] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1515.266698][T10738] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1515.285543][T10738] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1515.296644][T10738] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1515.307770][T10738] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1515.323699][T10738] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1515.332961][T10738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.353872][T10738] usbtmc 3-1:16.0: bulk endpoints not found [ 1515.521629][T16512] loop3: detected capacity change from 0 to 2048 [ 1515.553448][T16512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1515.688374][ T6163] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1516.222249][ T6163] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.266833][ T6163] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1516.320565][ T6163] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1516.337504][T16517] loop0: detected capacity change from 0 to 1024 [ 1516.350095][ T6163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.380977][T16517] EXT4-fs: inline encryption not supported [ 1516.392805][T16517] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1516.403613][T16507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1516.435326][ T6163] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1516.445370][T16517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.746426][T10738] usb 2-1: USB disconnect, device number 30 [ 1517.497214][T15382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.695015][ T6163] usb 3-1: USB disconnect, device number 19 [ 1518.730011][T16543] loop2: detected capacity change from 0 to 16 [ 1519.652831][T13865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1519.844704][T16548] loop3: detected capacity change from 0 to 1024 [ 1519.852658][T16548] EXT4-fs: inline encryption not supported [ 1519.920032][T16548] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1519.997000][T16548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.117783][T15906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.279898][ T5775] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1521.520114][ T5775] usb 1-1: Using ep0 maxpacket: 8 [ 1521.550855][ T5775] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1521.568597][ T5775] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1521.639081][ T5775] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1521.659250][ T5775] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1521.681648][ T5775] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.560527][ T5775] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.569841][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.595020][ T5775] usbtmc 1-1:16.0: bulk endpoints not found [ 1523.699132][T16598] loop2: detected capacity change from 0 to 16 [ 1524.632362][T16600] loop1: detected capacity change from 0 to 1024 [ 1524.660456][T16600] EXT4-fs: inline encryption not supported [ 1524.683071][T16600] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1524.732447][T16600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.766683][ T5775] usb 1-1: USB disconnect, device number 16 [ 1526.725487][T15659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.109890][ T6163] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1528.522743][T16649] loop0: detected capacity change from 0 to 1024 [ 1528.532201][T16649] EXT4-fs: inline encryption not supported [ 1528.539145][T16649] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1528.540067][ T6163] usb 4-1: Using ep0 maxpacket: 8 [ 1528.566477][T16649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.567087][ T6163] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1528.644603][ T6163] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.676996][ T6163] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.708751][ T6163] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1528.754718][ T6163] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1528.804979][ T6163] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1529.657932][ T6163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.683544][ T6163] usbtmc 4-1:16.0: bulk endpoints not found [ 1529.684143][T16657] loop1: detected capacity change from 0 to 512 [ 1529.698598][T15382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.732587][T16657] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2711: inode has both inline data and extents flags [ 1529.782418][T16657] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2711: couldn't read orphan inode 15 (err -117) [ 1529.867538][T16657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1531.289575][T16664] overlayfs: failed to resolve './bus': -2 [ 1532.097571][T12631] usb 4-1: USB disconnect, device number 23 [ 1532.228038][T15659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.996417][T16689] loop3: detected capacity change from 0 to 1024 [ 1534.220796][T16689] EXT4-fs: inline encryption not supported [ 1534.308660][T16689] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1534.391775][T16689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.664104][T12631] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1535.344308][T16708] binder: 16701:16708 ioctl 81e8943c 200000000c00 returned -22 [ 1535.402856][T12631] usb 3-1: Using ep0 maxpacket: 8 [ 1535.422500][T16707] nbd0: detected capacity change from 0 to 128 [ 1535.452389][T15906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.462201][ T6163] IPVS: starting estimator thread 0... [ 1535.532467][T12631] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1535.611562][T12631] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1535.661496][T16709] IPVS: using max 17 ests per chain, 40800 per kthread [ 1535.674533][T12631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1535.758155][T12631] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1535.829832][T12631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1535.864007][T12631] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1535.865030][T12774] block nbd0: Receive control failed (result -104) [ 1535.901138][T12631] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1535.954088][T12631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.000679][T12631] usbtmc: probe of 3-1:16.0 failed with error -22 [ 1538.103728][T12774] Bluetooth: hci2: command 0x0406 tx timeout [ 1538.274011][T16738] loop3: detected capacity change from 0 to 2048 [ 1538.293916][T16738] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1538.480992][T16142] usb 3-1: USB disconnect, device number 20 [ 1538.973335][T16743] loop2: detected capacity change from 0 to 1024 [ 1539.011643][T16743] EXT4-fs: inline encryption not supported [ 1539.101576][T16743] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1539.215080][T16743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.530306][T16765] random: crng reseeded on system resumption [ 1543.219151][T16777] loop1: detected capacity change from 0 to 32768 [ 1543.281012][T16777] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1543.339590][T16777] XFS (loop1): Ending clean mount [ 1543.358106][T16777] XFS (loop1): Quotacheck needed: Please wait. [ 1543.478691][T16777] XFS (loop1): Quotacheck: Done. [ 1543.758199][ T27] audit: type=1800 audit(1776772597.003:73): pid=16792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2741" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1543.969995][T15659] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1546.255252][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.269762][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.099951][T16816] random: crng reseeded on system resumption [ 1548.633347][T16822] loop1: detected capacity change from 0 to 32768 [ 1548.666493][T16822] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1548.760629][T16822] XFS (loop1): Ending clean mount [ 1548.798484][T16822] XFS (loop1): User initiated shutdown received. [ 1548.832030][T16822] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 1548.902062][T16822] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1549.009012][T15659] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1551.069945][T16859] random: crng reseeded on system resumption [ 1554.660909][T16867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1556.144705][T16894] random: crng reseeded on system resumption [ 1557.134745][T12774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1557.147120][T12774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1557.164512][T12774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1557.175017][T12774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1557.182936][T12774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1557.190775][T12774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1557.646962][T12631] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1558.086120][T16911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.592105][T12631] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.632145][T12631] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1558.679119][T12631] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1558.714551][T16898] chnl_net:caif_netlink_parms(): no params data found [ 1558.742998][T12631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.782377][T12631] usb 1-1: config 0 descriptor?? [ 1558.806443][T12631] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1559.001174][T16898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.008776][T16898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.040441][T16898] bridge_slave_0: entered allmulticast mode [ 1559.070120][T16898] bridge_slave_0: entered promiscuous mode [ 1559.085305][T16898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.092777][T16898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.121063][T16898] bridge_slave_1: entered allmulticast mode [ 1559.140745][T16898] bridge_slave_1: entered promiscuous mode [ 1559.213540][T16898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.227209][T16898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.274655][T16898] team0: Port device team_slave_0 added [ 1559.287166][T16898] team0: Port device team_slave_1 added [ 1559.296615][T15907] Bluetooth: hci4: command tx timeout [ 1559.338091][T16898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.345541][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.374541][T16898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.387887][T16898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.395567][T16898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.428780][T16898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.497248][T16898] hsr_slave_0: entered promiscuous mode [ 1559.505645][T16898] hsr_slave_1: entered promiscuous mode [ 1559.519240][T16898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1559.528757][T16898] Cannot create hsr debugfs directory [ 1560.460873][T16898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1560.480963][T16898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1560.516636][T16898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1560.537530][T16898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1560.554381][ T6163] usb 1-1: USB disconnect, device number 17 [ 1561.212562][T16898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.327045][T16898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.379989][T15907] Bluetooth: hci4: command tx timeout [ 1561.511932][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.519609][T11563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1561.783626][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.790988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.022480][T16941] random: crng reseeded on system resumption [ 1563.490010][T15907] Bluetooth: hci4: command tx timeout [ 1563.813799][T16898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.622157][T15907] Bluetooth: hci4: command tx timeout [ 1566.096854][T16741] block nbd0: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 30 seconds [ 1566.768327][T16898] veth0_vlan: entered promiscuous mode [ 1566.853433][T16898] veth1_vlan: entered promiscuous mode [ 1567.291048][T16898] veth0_macvtap: entered promiscuous mode [ 1567.447404][T16898] veth1_macvtap: entered promiscuous mode [ 1567.852338][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1567.882213][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.918713][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1567.977787][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.005378][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.150903][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.242432][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.327113][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.449011][T16898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.731374][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.751388][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.769089][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.781434][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.794647][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.807779][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.828120][T16898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.838690][T16898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.881733][T16898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.807384][T16992] random: crng reseeded on system resumption [ 1570.276022][T16898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.340766][T16898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.349549][T16898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.479033][T16898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.094278][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.158304][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.947696][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.957090][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.737560][T17029] random: crng reseeded on system resumption [ 1577.880470][T17041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1579.821861][T17054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2810'. [ 1580.035739][ T6163] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1580.804771][ T6163] usb 1-1: Using ep0 maxpacket: 16 [ 1580.840051][ T6163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.863730][ T6163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.908466][ T6163] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1581.170616][ T6163] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1581.350022][ T6163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.483732][ T6163] usb 1-1: config 0 descriptor?? [ 1581.674066][ T6163] usb 1-1: can't set config #0, error -71 [ 1581.700195][ T6163] usb 1-1: USB disconnect, device number 18 [ 1583.045515][T17068] random: crng reseeded on system resumption [ 1583.891161][T17074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1584.930534][T17086] loop3: detected capacity change from 0 to 2048 [ 1585.693393][T17086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1587.379991][ T35] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1587.605843][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1587.618725][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1587.628824][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1587.654859][ T35] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1587.664485][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.674931][ T35] usb 1-1: Product: syz [ 1587.679382][ T35] usb 1-1: Manufacturer: syz [ 1587.726141][ T35] usb 1-1: SerialNumber: syz [ 1587.773449][ T35] usb 1-1: config 0 descriptor?? [ 1588.040204][ T35] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1588.715296][ T35] usb 1-1: USB disconnect, device number 19 [ 1589.272823][T17113] random: crng reseeded on system resumption [ 1592.707553][T17129] overlayfs: missing 'lowerdir' [ 1594.910913][T15907] Bluetooth: hci3: command 0x0406 tx timeout [ 1595.717990][T17152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2838'. [ 1596.031318][T17155] random: crng reseeded on system resumption [ 1596.900033][T11834] block nbd0: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 60 seconds [ 1598.372901][T17170] overlayfs: failed to resolve './file1': -2 [ 1598.421281][T17171] overlayfs: missing 'lowerdir' [ 1600.146838][T17186] loop3: detected capacity change from 0 to 128 [ 1600.386418][T17186] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1600.758525][T17186] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.263413][T17186] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1601.395799][T15906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1601.696033][T17203] ubi: mtd0 is already attached to ubi16 [ 1602.575306][T17212] random: crng reseeded on system resumption [ 1603.540459][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2857'. [ 1604.650533][T17228] binder: 17225:17228 ioctl 81e8943c 200000000c00 returned -22 [ 1605.840188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1605.918192][T17227] nbd1: detected capacity change from 0 to 128 [ 1606.249724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 1606.492435][T12774] block nbd1: Receive control failed (result -32) [ 1606.504847][ T24] block nbd1: Dead connection, failed to find a fallback [ 1606.512307][ T24] block nbd1: shutting down sockets [ 1606.517650][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.528268][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.542077][ T5602] IPVS: starting estimator thread 0... [ 1606.548016][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.558925][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.567618][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.577824][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.585927][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.595146][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.603257][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.616370][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.624742][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.633950][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.642094][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.651154][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.659988][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.669051][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.676885][T13865] ldm_validate_partition_table(): Disk read failed. [ 1606.687545][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.696819][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.760732][T17229] IPVS: using max 19 ests per chain, 45600 per kthread [ 1606.814611][T16741] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1606.824406][T16741] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1606.841503][T13865] Dev nbd1: unable to read RDB block 0 [ 1606.930341][T13865] nbd1: unable to read partition table [ 1607.835145][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.871860][T13865] ldm_validate_partition_table(): Disk read failed. [ 1607.881441][T13865] Dev nbd1: unable to read RDB block 0 [ 1608.049942][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.190321][T13865] nbd1: unable to read partition table [ 1608.241850][T13865] ldm_validate_partition_table(): Disk read failed. [ 1608.270573][T13865] Dev nbd1: unable to read RDB block 0 [ 1608.295701][T13865] nbd1: unable to read partition table [ 1609.821792][T17252] xt_nat: multiple ranges no longer supported [ 1610.098708][T17261] random: crng reseeded on system resumption [ 1611.794062][T17270] nbd2: detected capacity change from 0 to 128 [ 1611.805830][T17271] binder: 17267:17271 ioctl 81e8943c 200000000c00 returned -22 [ 1612.528059][T12774] block nbd2: Receive control failed (result -32) [ 1612.539514][T16741] block nbd2: Dead connection, failed to find a fallback [ 1612.546915][T16741] block nbd2: shutting down sockets [ 1612.553095][T16741] blk_print_req_error: 48 callbacks suppressed [ 1612.553153][T16741] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.568855][T16741] buffer_io_error: 48 callbacks suppressed [ 1612.568910][T16741] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1612.640879][T16741] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.644014][T17274] overlayfs: missing 'lowerdir' [ 1613.491711][T16741] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.500610][T16741] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.510252][T16741] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.547534][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.557724][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.578622][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.591070][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.602563][T16741] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.612241][T16741] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.620975][T16741] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.630748][T16741] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.647834][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.659840][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.668440][T13865] ldm_validate_partition_table(): Disk read failed. [ 1613.720763][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.732284][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.746946][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1613.756506][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1613.765054][T13865] Dev nbd2: unable to read RDB block 0 [ 1613.771693][T13865] nbd2: unable to read partition table [ 1613.781497][T13865] ldm_validate_partition_table(): Disk read failed. [ 1613.788822][T13865] Dev nbd2: unable to read RDB block 0 [ 1613.795410][T13865] nbd2: unable to read partition table [ 1613.813764][T13865] ldm_validate_partition_table(): Disk read failed. [ 1613.821996][T13865] Dev nbd2: unable to read RDB block 0 [ 1613.829559][T13865] nbd2: unable to read partition table [ 1613.842589][T13865] ldm_validate_partition_table(): Disk read failed. [ 1613.850726][T13865] Dev nbd2: unable to read RDB block 0 [ 1613.853102][T17276] loop1: detected capacity change from 0 to 1024 [ 1613.856824][T13865] nbd2: unable to read partition table [ 1613.894426][T17276] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 1614.206625][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1616.102965][T17291] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1616.334054][T17302] random: crng reseeded on system resumption [ 1617.989845][ T5602] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1618.194937][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.194991][ T5602] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1618.195017][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.201862][ T5602] usb 5-1: config 0 descriptor?? [ 1618.214315][ T5602] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1619.768861][T17340] overlayfs: failed to resolve './file0': -2 [ 1621.290372][T10738] usb 5-1: USB disconnect, device number 2 [ 1625.336983][T17383] binder: 17374:17383 ioctl 81e8943c 200000000c00 returned -22 [ 1625.732560][T17382] nbd3: detected capacity change from 0 to 128 [ 1626.320146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1626.729799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1627.393450][T12774] block nbd3: Receive control failed (result -104) [ 1627.709845][T16741] block nbd0: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 90 seconds [ 1629.026491][T17397] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1629.406698][T17402] loop4: detected capacity change from 0 to 2048 [ 1629.436966][T17402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1630.373736][T17413] binder: 17409:17413 ioctl 81e8943c 200000000c00 returned -22 [ 1631.107880][T17412] nbd4: detected capacity change from 0 to 128 [ 1631.162648][T12774] block nbd4: Receive control failed (result -32) [ 1631.212032][T11834] block nbd4: Dead connection, failed to find a fallback [ 1631.219157][T11834] block nbd4: shutting down sockets [ 1631.224696][T11834] blk_print_req_error: 64 callbacks suppressed [ 1631.224712][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.268579][T11834] buffer_io_error: 64 callbacks suppressed [ 1631.268600][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.285266][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.294531][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.302489][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.311739][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.319716][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.328787][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.559582][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.568895][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.577806][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.593337][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.705332][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.715389][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.842716][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.856770][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.938044][T14265] ldm_validate_partition_table(): Disk read failed. [ 1631.946891][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.963226][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1631.971780][T11834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1631.989799][T11834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1632.321106][T14265] Dev nbd4: unable to read RDB block 0 [ 1632.471033][T14265] nbd4: unable to read partition table [ 1632.545063][T14265] ldm_validate_partition_table(): Disk read failed. [ 1632.557070][T14265] Dev nbd4: unable to read RDB block 0 [ 1632.574350][T14265] nbd4: unable to read partition table [ 1632.592194][T13868] ldm_validate_partition_table(): Disk read failed. [ 1632.615467][T13868] Dev nbd4: unable to read RDB block 0 [ 1632.625896][T13868] nbd4: unable to read partition table [ 1632.705469][T17421] random: crng reseeded on system resumption [ 1633.483525][T13868] ldm_validate_partition_table(): Disk read failed. [ 1633.492393][T13868] Dev nbd4: unable to read RDB block 0 [ 1633.500077][T13868] nbd4: unable to read partition table [ 1635.654820][T15907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1635.669949][T15907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1635.678929][T15907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1635.688611][T15907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1635.698120][T15907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1635.723606][T15907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1635.815017][T17441] loop4: detected capacity change from 0 to 2048 [ 1635.914120][T17441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1638.236592][T15907] Bluetooth: hci3: command tx timeout [ 1638.313258][T17459] nbd5: detected capacity change from 0 to 128 [ 1638.328321][T17459] binder: 17455:17459 ioctl 81e8943c 200000000c00 returned -22 [ 1638.480306][T15907] block nbd5: Receive control failed (result -32) [ 1638.530457][T11834] block nbd5: Dead connection, failed to find a fallback [ 1638.537810][T11834] block nbd5: shutting down sockets [ 1638.543554][T11834] blk_print_req_error: 64 callbacks suppressed [ 1638.543569][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.559811][T11834] buffer_io_error: 64 callbacks suppressed [ 1638.559825][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.574171][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.583635][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.592131][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.601600][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.610656][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.619910][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.628305][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.637925][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.646624][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.656193][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.664761][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.674522][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.682858][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.692326][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.700484][T13868] ldm_validate_partition_table(): Disk read failed. [ 1638.707567][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.717586][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.726053][T11834] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1638.735606][T11834] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1638.744070][T13868] Dev nbd5: unable to read RDB block 0 [ 1638.750391][T13868] nbd5: unable to read partition table [ 1639.604636][T17469] random: crng reseeded on system resumption [ 1640.370852][T13868] ldm_validate_partition_table(): Disk read failed. [ 1640.378336][T13868] Dev nbd5: unable to read RDB block 0 [ 1640.385142][T13868] nbd5: unable to read partition table [ 1640.403342][T15907] Bluetooth: hci3: command tx timeout [ 1640.445370][T17433] chnl_net:caif_netlink_parms(): no params data found [ 1640.470865][T13868] ldm_validate_partition_table(): Disk read failed. [ 1640.510282][T13868] Dev nbd5: unable to read RDB block 0 [ 1640.520551][T13868] nbd5: unable to read partition table [ 1640.588118][T13868] ldm_validate_partition_table(): Disk read failed. [ 1641.680279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1642.111509][T13868] Dev nbd5: unable to read RDB block 0 [ 1642.117851][T13868] nbd5: unable to read partition table [ 1642.182163][T17476] loop4: detected capacity change from 0 to 2048 [ 1642.268248][T17476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1642.433177][T15907] Bluetooth: hci3: command tx timeout [ 1643.103528][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.138298][T17433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.164786][T17433] bridge_slave_0: entered allmulticast mode [ 1643.191299][T17433] bridge_slave_0: entered promiscuous mode [ 1643.212233][T17433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.240903][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.248235][T17433] bridge_slave_1: entered allmulticast mode [ 1643.287917][T17433] bridge_slave_1: entered promiscuous mode [ 1643.457340][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.493197][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.538283][T17433] team0: Port device team_slave_0 added [ 1643.840402][T17433] team0: Port device team_slave_1 added [ 1644.209013][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.380070][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.418132][T17497] binder: 17494:17497 ioctl 81e8943c 200000000c00 returned -22 [ 1644.489787][T15907] Bluetooth: hci3: command tx timeout [ 1644.514027][T17496] nbd6: detected capacity change from 0 to 128 [ 1644.573793][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.750773][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.812729][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.700947][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.713572][T15907] block nbd6: Receive control failed (result -104) [ 1645.751678][T17500] random: crng reseeded on system resumption [ 1646.863505][T17433] hsr_slave_0: entered promiscuous mode [ 1646.910950][T17433] hsr_slave_1: entered promiscuous mode [ 1646.958505][T17433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1647.013379][T17433] Cannot create hsr debugfs directory [ 1647.891799][T17512] loop4: detected capacity change from 0 to 7 [ 1648.378418][ C0] blk_print_req_error: 64 callbacks suppressed [ 1648.378436][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1648.395106][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1648.404388][ C0] buffer_io_error: 64 callbacks suppressed [ 1648.404403][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1648.419257][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1648.428484][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1648.437844][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1648.447325][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1648.459131][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1648.468528][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1648.479692][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1648.488956][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1649.273186][T17518] loop1: detected capacity change from 0 to 2048 [ 1649.333998][T17518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1649.505649][T17433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1649.576647][T17433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1649.653420][T17433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1649.693553][T17433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1649.838092][T17528] random: crng reseeded on system resumption [ 1649.924566][T17529] binder: 17523:17529 ioctl 81e8943c 200000000c00 returned -22 [ 1649.945260][T17527] nbd7: detected capacity change from 0 to 128 [ 1650.582718][T15907] block nbd7: Receive control failed (result -32) [ 1650.812799][T11834] block nbd7: Dead connection, failed to find a fallback [ 1650.820946][T11834] block nbd7: shutting down sockets [ 1650.826556][T11834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1650.836341][T11834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1650.844758][T11834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1650.855019][T11834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1650.867035][T11834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1650.876509][T11834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1650.885005][T11834] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1650.899829][T11834] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1650.914987][ T24] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1650.923662][T14265] ldm_validate_partition_table(): Disk read failed. [ 1650.953555][T17433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.970387][T14265] Dev nbd7: unable to read RDB block 0 [ 1650.974919][T17433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.016869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.017436][T14265] nbd7: unable to read partition table [ 1651.024093][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.048585][T14265] ldm_validate_partition_table(): Disk read failed. [ 1651.254993][T14265] Dev nbd7: unable to read RDB block 0 [ 1651.425466][T14265] nbd7: unable to read partition table [ 1652.434635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.441996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.454661][T14265] ldm_validate_partition_table(): Disk read failed. [ 1652.464795][T14265] Dev nbd7: unable to read RDB block 0 [ 1652.471781][T14265] nbd7: unable to read partition table [ 1652.487069][T14265] ldm_validate_partition_table(): Disk read failed. [ 1652.502588][T14265] Dev nbd7: unable to read RDB block 0 [ 1652.508953][T14265] nbd7: unable to read partition table [ 1652.561943][T17433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1652.801925][T17552] loop4: detected capacity change from 0 to 2048 [ 1652.902665][T17552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1653.126392][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.219153][T17560] tipc: Started in network mode [ 1653.224784][T17560] tipc: Node identity ac1414aa, cluster identity 4711 [ 1653.235928][T17560] tipc: Enabled bearer , priority 10 [ 1653.246549][T17560] tipc: Enabled bearer , priority 0 [ 1653.338638][T17565] random: crng reseeded on system resumption [ 1654.253706][ T788] tipc: Node number set to 2886997162 [ 1654.396032][T17571] binder: 17567:17571 ioctl 81e8943c 200000000c00 returned -22 [ 1654.474424][T17570] nbd8: detected capacity change from 0 to 128 [ 1655.133264][T15907] block nbd8: Receive control failed (result -104) [ 1656.455931][ T24] block nbd3: Possible stuck request ffff8880223c0000: control (read@0,4096B). Runtime 30 seconds [ 1657.398246][T17433] veth0_vlan: entered promiscuous mode [ 1657.493317][T17433] veth1_vlan: entered promiscuous mode [ 1658.290416][T11834] block nbd0: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 120 seconds [ 1658.475180][T17433] veth0_macvtap: entered promiscuous mode [ 1658.570939][T17433] veth1_macvtap: entered promiscuous mode [ 1658.628619][T17591] loop4: detected capacity change from 0 to 128 [ 1658.633853][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.694657][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.713630][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.719285][T17591] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1658.737644][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.755792][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.759067][T17591] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1658.776603][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.810772][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.839025][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.857059][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1658.919855][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.971800][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.000516][T17599] nbd9: detected capacity change from 0 to 128 [ 1659.021485][T17593] binder: 17592:17593 ioctl 81e8943c 200000000c00 returned -22 [ 1659.089197][T12631] IPVS: starting estimator thread 0... [ 1659.236317][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.265961][T17603] IPVS: using max 15 ests per chain, 36000 per kthread [ 1659.323209][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.411165][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.518793][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.567310][T15907] block nbd9: Receive control failed (result -104) [ 1659.631425][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.684318][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.759542][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.841139][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.917725][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.990895][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.063550][T16898] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1660.071941][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.143787][T17433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.222320][T17433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.255735][T17433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.295708][T17433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.391605][T17613] ubi: mtd0 is already attached to ubi16 [ 1660.682966][T17618] loop1: detected capacity change from 0 to 2048 [ 1660.722792][T17618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1660.730425][ T9290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.749093][ T9290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.916316][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.927832][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.297064][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1662.469779][T17630] overlayfs: failed to resolve './file0': -2 [ 1663.668389][T17643] binder: 17640:17643 ioctl 81e8943c 200000000c00 returned -22 [ 1665.531037][T17642] nbd10: detected capacity change from 0 to 128 [ 1665.531489][T15907] block nbd10: Receive control failed (result -32) [ 1665.549272][T11834] block nbd10: Dead connection, failed to find a fallback [ 1665.556594][T11834] block nbd10: shutting down sockets [ 1665.562032][T11834] blk_print_req_error: 70 callbacks suppressed [ 1665.562042][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.577779][T11834] buffer_io_error: 69 callbacks suppressed [ 1665.577791][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.592044][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.602008][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.610263][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.619477][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.627523][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.636921][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.645531][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.654991][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.663191][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.672855][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.680910][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.690429][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.698396][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.707829][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.715802][T13075] ldm_validate_partition_table(): Disk read failed. [ 1665.723104][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.732290][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.740317][T11834] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1665.750061][T11834] Buffer I/O error on dev nbd10, logical block 0, async page read [ 1665.810517][T13075] Dev nbd10: unable to read RDB block 0 [ 1665.829300][T13075] nbd10: unable to read partition table [ 1665.864329][T13075] ldm_validate_partition_table(): Disk read failed. [ 1665.876587][T13075] Dev nbd10: unable to read RDB block 0 [ 1665.885868][T13075] nbd10: unable to read partition table [ 1665.912602][T13075] ldm_validate_partition_table(): Disk read failed. [ 1665.929011][T13075] Dev nbd10: unable to read RDB block 0 [ 1665.937779][T13075] nbd10: unable to read partition table [ 1665.947730][T13075] ldm_validate_partition_table(): Disk read failed. [ 1665.959789][T13075] Dev nbd10: unable to read RDB block 0 [ 1665.967619][T13075] nbd10: unable to read partition table [ 1666.281073][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1666.555659][T17656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2980'. [ 1666.751615][T17661] overlayfs: failed to resolve './file0': -2 [ 1668.052881][T17667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1669.160635][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.184562][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.593806][T17686] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2988'. [ 1669.606028][T17686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1669.879928][T10738] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1670.094793][T10738] usb 5-1: config 0 has no interfaces? [ 1670.132603][T10738] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1670.153110][T10738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.328508][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2990'. [ 1670.486169][T10738] usb 5-1: config 0 descriptor?? [ 1670.859308][T17698] No such timeout policy "syz1" [ 1671.209734][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1671.911244][T10738] usb 5-1: string descriptor 0 read error: -71 [ 1671.933312][T10738] usb 5-1: USB disconnect, device number 3 [ 1672.018170][T17709] loop1: detected capacity change from 0 to 2048 [ 1672.076163][T17709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1673.238702][T17719] loop5: detected capacity change from 0 to 128 [ 1673.262306][T17717] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1673.323203][T17719] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1673.347361][T17719] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1673.407032][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3000'. [ 1673.514719][T17433] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1673.590079][ T788] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1674.603202][T17733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1674.761524][ T788] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1674.779943][ T788] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1674.789455][ T788] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1674.797866][ T788] usb 2-1: Manufacturer: syz [ 1674.802887][ T788] usb 2-1: SerialNumber: syz [ 1674.925263][ T24] block nbd6: Possible stuck request ffff8880224f0000: control (read@0,4096B). Runtime 30 seconds [ 1675.213272][ T788] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1675.463243][ T788] usb 2-1: USB disconnect, device number 31 [ 1676.280077][ T788] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1676.503385][ T788] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1676.528309][ T788] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1676.538979][ T788] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1676.551528][ T788] usb 2-1: Manufacturer: syz [ 1676.556553][ T788] usb 2-1: SerialNumber: syz [ 1676.913236][ T788] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1677.294976][T17756] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1678.210543][ T1188] usb 2-1: USB disconnect, device number 32 [ 1679.344116][T17783] loop5: detected capacity change from 0 to 2048 [ 1679.619254][T17783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1680.039174][ T1188] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1680.242486][ T1188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1680.261526][ T1188] usb 2-1: not running at top speed; connect to a high speed hub [ 1680.294937][ T1188] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1680.330998][ T1188] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 1680.361954][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.378006][ T1188] usb 2-1: Product: syz [ 1680.389740][ T1188] usb 2-1: Manufacturer: syz [ 1680.402468][ T1188] usb 2-1: SerialNumber: syz [ 1680.725443][ T1188] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 1680.760667][ T1188] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1680.820095][ T1188] usb 2-1: failed to enable PITCH for EP 0x1 [ 1680.835514][ T1188] usb 2-1: unit 2 not found! [ 1680.849742][ T1188] usb 2-1: unit 0 not found! [ 1680.963983][ T1188] usb 2-1: USB disconnect, device number 33 [ 1681.187171][T17616] udevd[17616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1681.466599][T15907] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.444912][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 1683.146337][T17812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1684.357985][T17817] nbd11: detected capacity change from 0 to 128 [ 1684.371617][T17817] binder: 17815:17817 ioctl 81e8943c 200000000c00 returned -22 [ 1684.400827][ T35] IPVS: starting estimator thread 0... [ 1684.570964][T17819] IPVS: using max 15 ests per chain, 36000 per kthread [ 1685.030151][T12774] block nbd11: Receive control failed (result -32) [ 1685.139717][ T24] block nbd11: Dead connection, failed to find a fallback [ 1685.147223][ T24] block nbd11: shutting down sockets [ 1685.153439][ T24] blk_print_req_error: 64 callbacks suppressed [ 1685.153453][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.169601][ T24] buffer_io_error: 64 callbacks suppressed [ 1685.175589][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.190223][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.200850][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.209118][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.218863][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.227628][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.236988][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.245359][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.258281][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.266566][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.275934][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.290092][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.299289][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.309063][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.318376][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.327548][T17746] ldm_validate_partition_table(): Disk read failed. [ 1685.334766][ T24] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.344675][ T24] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.352701][T17425] block nbd8: Possible stuck request ffff8880225c0000: control (read@0,4096B). Runtime 30 seconds [ 1685.399781][T11834] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1685.410167][T11834] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1685.418409][T17746] Dev nbd11: unable to read RDB block 0 [ 1685.474300][T17746] nbd11: unable to read partition table [ 1685.689542][T17746] ldm_validate_partition_table(): Disk read failed. [ 1685.710732][T17746] Dev nbd11: unable to read RDB block 0 [ 1685.742951][T17746] nbd11: unable to read partition table [ 1685.839764][ T5830] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1686.019981][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 1686.043454][ T5830] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.087949][ T5830] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1686.114160][T17828] loop5: detected capacity change from 0 to 128 [ 1686.148241][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1686.170845][ T5830] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1686.170949][T17828] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1686.203544][T17828] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1686.215045][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.265677][ T5830] usb 2-1: config 0 descriptor?? [ 1686.472681][T17433] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1686.576458][T17832] vlan2: entered promiscuous mode [ 1686.610031][T17832] bridge0: entered promiscuous mode [ 1686.820800][T17836] binder: 17833:17836 ioctl 81e8943c 200000000c00 returned -22 [ 1688.886844][T17425] block nbd3: Possible stuck request ffff8880223c0000: control (read@0,4096B). Runtime 60 seconds [ 1688.900273][T16741] block nbd0: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 150 seconds [ 1688.913150][T12774] block nbd12: Receive control failed (result -32) [ 1688.925292][T17835] nbd12: detected capacity change from 0 to 128 [ 1688.955148][T17425] block nbd12: Dead connection, failed to find a fallback [ 1688.964701][T17425] block nbd12: shutting down sockets [ 1688.985257][T17746] ldm_validate_partition_table(): Disk read failed. [ 1689.045457][T17746] Dev nbd12: unable to read RDB block 0 [ 1689.054295][T17840] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1689.071293][T17746] nbd12: unable to read partition table [ 1689.137438][T17746] ldm_validate_partition_table(): Disk read failed. [ 1689.150816][T17746] Dev nbd12: unable to read RDB block 0 [ 1689.190606][T17746] nbd12: unable to read partition table [ 1689.259869][T17746] ldm_validate_partition_table(): Disk read failed. [ 1689.279092][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 1689.327886][ T5830] usbhid: probe of 2-1:0.0 failed with error -71 [ 1689.327919][T17746] Dev nbd12: unable to read RDB block 0 [ 1689.340693][ T5830] usb 2-1: USB disconnect, device number 34 [ 1689.413007][T17746] nbd12: unable to read partition table [ 1689.455294][T17746] ldm_validate_partition_table(): Disk read failed. [ 1689.484366][T17746] Dev nbd12: unable to read RDB block 0 [ 1689.512824][T17746] nbd12: unable to read partition table [ 1689.699776][T16741] block nbd9: Possible stuck request ffff888022608000: control (read@0,4096B). Runtime 30 seconds [ 1691.152284][T17864] loop4: detected capacity change from 0 to 128 [ 1691.189950][T10738] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1691.208958][T17864] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1691.224071][T17864] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.399920][T10738] usb 1-1: Using ep0 maxpacket: 8 [ 1691.407924][T10738] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1691.430038][T10738] usb 1-1: config 0 has no interface number 0 [ 1691.442568][T10738] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1691.462399][T16898] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1691.481119][T10738] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1691.539490][T10738] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1691.556289][T10738] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1691.570023][T10738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.621078][T10738] usb 1-1: config 0 descriptor?? [ 1691.642677][T10738] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1692.000932][T17873] nbd13: detected capacity change from 0 to 128 [ 1692.507697][T10738] usb 1-1: USB disconnect, device number 20 [ 1692.714054][T12774] block nbd13: Receive control failed (result -104) [ 1693.027473][T17877] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1694.779981][T10738] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1695.379811][ T28] INFO: task syz.2.2733:16752 blocked for more than 143 seconds. [ 1695.444504][ T28] Not tainted syzkaller #0 [ 1695.449995][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1695.458970][ T28] task:syz.2.2733 state:D stack:24808 pid:16752 ppid:15095 flags:0x00004004 [ 1695.468447][ T28] Call Trace: [ 1695.472120][ T28] [ 1695.475132][ T28] __schedule+0x1553/0x45a0 [ 1695.479908][ T28] ? asan.module_dtor+0x20/0x20 [ 1695.484944][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1695.489798][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1695.495924][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1695.502339][ T28] schedule+0xbd/0x170 [ 1695.506676][ T28] schedule_preempt_disabled+0x13/0x20 [ 1695.512346][ T28] __mutex_lock+0x6a9/0xcc0 [ 1695.517226][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1695.522122][ T28] ? sync_bdevs+0x1af/0x330 [ 1695.526868][ T28] ? mutex_lock_nested+0x20/0x20 [ 1696.637456][ T28] ? _atomic_dec_and_lock+0x93/0x120 [ 1696.683170][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 1696.704409][ T28] sync_bdevs+0x1af/0x330 [ 1696.737086][ T28] ksys_sync+0xc6/0x170 [ 1696.765370][ T28] ? sync_filesystem+0x220/0x220 [ 1696.816022][ T28] ? syscall_enter_from_user_mode+0x25/0x80 [ 1696.856712][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1696.898397][ T28] __ia32_sys_sync+0xe/0x20 [ 1696.925074][ T28] do_syscall_64+0x55/0xa0 [ 1696.947888][ T28] ? clear_bhb_loop+0x40/0x90 [ 1696.970405][ T28] ? clear_bhb_loop+0x40/0x90 [ 1697.002686][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1697.024339][ T28] RIP: 0033:0x7f558559c819 [ 1697.047896][ T28] RSP: 002b:00007f55864b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1697.079814][ T28] RAX: ffffffffffffffda RBX: 00007f5585816180 RCX: 00007f558559c819 [ 1697.126747][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1697.160840][ T28] RBP: 00007f5585816180 R08: 0000000000000000 R09: 0000000000000000 [ 1697.195165][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.244083][ T28] R13: 00007f5585816218 R14: 00007f5585816180 R15: 00007ffff9f25ae8 [ 1697.309746][ T28] [ 1697.324235][ T28] [ 1697.324235][ T28] Showing all locks held in the system: [ 1697.370053][ T28] 1 lock held by kworker/u4:1/12: [ 1697.405761][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 1697.421529][T17910] nbd14: detected capacity change from 0 to 128 [ 1697.432823][T12774] block nbd14: Receive control failed (result -32) [ 1697.434838][T16741] block nbd14: Send control failed (result -32) [ 1697.447063][T16741] block nbd14: Request send failed, requeueing [ 1697.464658][T16741] block nbd14: Dead connection, failed to find a fallback [ 1697.474037][T16741] block nbd14: shutting down sockets [ 1697.481311][T16741] blk_print_req_error: 101 callbacks suppressed [ 1697.481327][T16741] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.519928][T16741] buffer_io_error: 101 callbacks suppressed [ 1697.519947][T16741] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.537108][T11834] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.546520][T11834] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.554961][T11834] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.564385][T11834] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.572512][T11834] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.581868][T11834] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.590980][ T28] 1 lock held by rcu_preempt/17: [ 1697.595971][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 1697.606438][ T28] 1 lock held by khungtaskd/28: [ 1697.611489][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1697.616005][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.621777][ T28] 3 locks held by kworker/u4:6/1005: [ 1697.636531][ T28] 2 locks held by getty/5530: [ 1697.640066][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.641386][ T28] #0: ffff88814cbbb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1697.659401][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1697.659872][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.688663][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.696937][ T28] 5 locks held by kworker/1:0/10738: [ 1697.696963][ T28] #0: ffff88814267b538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1697.697041][ T28] #1: ffffc90018817d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1697.697103][ T28] #2: ffff88814370e190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 1697.697222][ T28] #3: ffff888025529508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21d0/0x49f0 [ 1697.697278][ T28] #4: ffff88802555a368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21f8/0x49f0 [ 1697.697336][ T28] 1 lock held by udevd/13074: [ 1697.697350][ T28] #0: ffff8880222a14c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697409][ T28] 1 lock held by udevd/13095: [ 1697.697423][ T28] #0: ffff8880225924c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697486][ T28] 1 lock held by udevd/13865: [ 1697.697507][ T28] #0: ffff8880222c34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697570][ T28] 1 lock held by udevd/13868: [ 1697.697582][ T28] #0: ffff88802221f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697644][ T28] 1 lock held by udevd/14265: [ 1697.697657][ T28] #0: ffff888141b084c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697727][ T28] 1 lock held by syz.2.2733/16752: [ 1697.697740][ T28] #0: ffff8880222a14c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 1697.697804][ T28] 7 locks held by kworker/1:2H/17425: [ 1697.697820][ T28] 1 lock held by udevd/17741: [ 1697.697832][ T28] #0: ffff88802278a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.697954][ T28] 1 lock held by udevd/17746: [ 1697.697968][ T28] #0: ffff8880226bd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1697.698040][ T28] 1 lock held by syz.1.3046/17898: [ 1697.698072][ T28] [ 1697.698079][ T28] ============================================= [ 1697.698079][ T28] [ 1697.698089][ T28] NMI backtrace for cpu 0 [ 1697.698098][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1697.698118][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1697.698130][ T28] Call Trace: [ 1697.698139][ T28] [ 1697.698149][ T28] dump_stack_lvl+0x18c/0x250 [ 1697.698193][ T28] ? preempt_count_add+0x91/0x1a0 [ 1697.698224][ T28] ? show_regs_print_info+0x20/0x20 [ 1697.698253][ T28] ? load_image+0x420/0x420 [ 1697.698292][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1697.698319][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1697.698340][ T28] ? _printk+0xde/0x130 [ 1697.698365][ T28] ? load_image+0x420/0x420 [ 1697.698395][ T28] ? load_image+0x420/0x420 [ 1697.698424][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1697.698464][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1697.698495][ T28] watchdog+0xf3d/0xf80 [ 1697.710036][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.715351][ T28] ? watchdog+0x1e1/0xf80 [ 1697.715392][ T28] kthread+0x2fa/0x390 [ 1697.727660][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.736303][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1697.736333][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1697.736353][ T28] ret_from_fork+0x48/0x80 [ 1697.736375][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1697.736392][ T28] ret_from_fork_asm+0x11/0x20 [ 1697.746846][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1697.756144][ T28] [ 1697.756850][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1697.761170][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1697.771423][ C1] NMI backtrace for cpu 1 [ 1697.771434][ C1] CPU: 1 PID: 17425 Comm: kworker/1:2H Not tainted syzkaller #0 [ 1697.771450][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1697.771458][ C1] Workqueue: kblockd blk_mq_run_work_fn [ 1697.771511][ C1] RIP: 0010:__lock_acquire+0xcc/0x7d40 [ 1697.771533][ C1] Code: 10 48 89 8c 24 d0 00 00 00 42 c7 44 01 18 f3 f3 f3 f3 65 48 8b 1d 74 85 9b 7e 48 c7 c0 ac 4a 8b 8e 48 c1 e8 03 42 0f b6 04 00 <84> c0 48 89 bc 24 88 00 00 00 0f 85 88 67 00 00 83 3d 39 1a 23 0d [ 1697.771545][ C1] RSP: 0018:ffffc900001f0620 EFLAGS: 00000807 [ 1697.771558][ C1] RAX: 0000000000000000 RBX: ffff88802dc05a00 RCX: 1ffff9200003e0e8 [ 1697.771568][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff97545838 [ 1697.771578][ C1] RBP: ffffc900001f0868 R08: dffffc0000000000 R09: 0000000000000001 [ 1697.771588][ C1] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000001 [ 1697.771598][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1697.771608][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1697.771621][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1697.771632][ C1] CR2: 0000200000188030 CR3: 000000004b70e000 CR4: 00000000003506e0 [ 1697.771648][ C1] Call Trace: [ 1697.771654][ C1] [ 1697.771663][ C1] ? verify_lock_unused+0x140/0x140 [ 1697.771680][ C1] ? mark_lock+0x94/0x320 [ 1697.771696][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1697.771712][ C1] ? iptunnel_xmit+0x528/0x920 [ 1697.771766][ C1] ? look_up_lock_class+0x75/0x140 [ 1697.771784][ C1] ? register_lock_class+0xc4/0x8a0 [ 1697.771800][ C1] ? verify_lock_unused+0x140/0x140 [ 1697.771816][ C1] ? mark_lock+0x94/0x320 [ 1697.771837][ C1] ? debug_objects_fill_pool+0x8b/0x730 [ 1697.771864][ C1] lock_acquire+0x19e/0x420 [ 1697.771879][ C1] ? debug_object_assert_init+0x9c/0x2f0 [ 1697.771902][ C1] ? debug_objects_fill_pool+0xcc/0x730 [ 1697.771921][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1697.771938][ C1] ? debug_object_activate+0x4f0/0x4f0 [ 1697.771960][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1697.772022][ C1] ? debug_object_assert_init+0x9c/0x2f0 [ 1697.772041][ C1] ? _raw_spin_lock+0x40/0x40 [ 1697.772056][ C1] ? tipc_bearer_xmit_skb+0x347/0x3f0 [ 1697.772130][ C1] debug_object_assert_init+0x9c/0x2f0 [ 1697.772154][ C1] __mod_timer+0x55/0xdb0 [ 1697.772175][ C1] ? __rwlock_init+0x150/0x150 [ 1697.772193][ C1] ? mrp_pdu_queue+0xa9/0x700 [ 1697.772257][ C1] mrp_periodic_timer+0x1c9/0x210 [ 1697.772275][ C1] call_timer_fn+0x189/0x540 [ 1697.772290][ C1] ? mrp_join_timer+0x170/0x170 [ 1697.772304][ C1] ? call_timer_fn+0xd2/0x540 [ 1697.772318][ C1] ? __run_timers+0x800/0x800 [ 1697.772336][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1697.772352][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1697.772368][ C1] ? mrp_join_timer+0x170/0x170 [ 1697.772383][ C1] __run_timers+0x542/0x800 [ 1697.772402][ C1] ? detach_timer+0x2b0/0x2b0 [ 1697.772422][ C1] run_timer_softirq+0x67/0xf0 [ 1697.772436][ C1] handle_softirqs+0x280/0x820 [ 1697.772453][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1697.772469][ C1] ? do_softirq+0x1a0/0x1a0 [ 1697.772486][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1697.772506][ C1] __irq_exit_rcu+0xd3/0x190 [ 1697.772520][ C1] ? irq_exit_rcu+0x20/0x20 [ 1697.772537][ C1] irq_exit_rcu+0x9/0x20 [ 1697.772551][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1697.772568][ C1] [ 1697.772572][ C1] [ 1697.772577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1697.772596][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 1697.772614][ C1] Code: 85 3f 01 00 00 e8 c1 a9 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 b0 a9 1b 00 eb 06 e8 a9 a9 1b 00 fb 48 c7 c7 00 64 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b1 [ 1697.772626][ C1] RSP: 0018:ffffc90003437460 EFLAGS: 00000293 [ 1697.772639][ C1] RAX: ffffffff816b7857 RBX: ffffffff816b76fb RCX: ffff88802dc05a00 [ 1697.772649][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126400 [ 1697.772659][ C1] RBP: ffffc90003437550 R08: ffffffff911c555f R09: 1ffffffff2238aab [ 1697.772669][ C1] R10: dffffc0000000000 R11: fffffbfff2238aac R12: dffffc0000000000 [ 1697.772680][ C1] R13: 1ffff92000686e90 R14: 000000000000003f R15: 000000000000003f [ 1697.772692][ C1] ? vprintk_emit+0x30b/0x610 [ 1697.772709][ C1] ? vprintk_emit+0x467/0x610 [ 1697.772728][ C1] ? vprintk_emit+0x30b/0x610 [ 1697.772745][ C1] ? printk_sprint+0x460/0x460 [ 1697.772761][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1697.772779][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1697.772794][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1697.772815][ C1] _printk+0xde/0x130 [ 1697.772835][ C1] ? load_image+0x420/0x420 [ 1697.772854][ C1] ? load_image+0x420/0x420 [ 1697.772874][ C1] end_buffer_async_read+0x45d/0x660 [ 1697.772897][ C1] ? end_buffer_async_read_io+0x2dc/0x3e0 [ 1697.772913][ C1] ? zero_user_segments+0x330/0x330 [ 1697.772927][ C1] end_bio_bh_io_sync+0xb7/0x110 [ 1697.772942][ C1] blk_update_request+0x597/0xe40 [ 1697.772962][ C1] blk_mq_dispatch_rq_list+0xf10/0x1ea0 [ 1697.772978][ C1] ? _find_next_zero_bit+0x8e/0x130 [ 1697.773002][ C1] ? __blk_mq_get_driver_tag+0x880/0x880 [ 1697.773022][ C1] __blk_mq_sched_dispatch_requests+0xec8/0x16e0 [ 1697.773051][ C1] ? blk_mq_sched_dispatch_requests+0x1b0/0x1b0 [ 1697.773073][ C1] ? __might_sleep+0xe0/0xe0 [ 1697.773091][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1697.773106][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1697.773123][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1697.773140][ C1] blk_mq_sched_dispatch_requests+0xfb/0x1b0 [ 1697.773161][ C1] ? blk_mq_run_work_fn+0x141/0x2f0 [ 1697.773177][ C1] blk_mq_run_work_fn+0x169/0x2f0 [ 1697.773195][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1697.773213][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1697.773321][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1697.773341][ C1] ? assign_work+0x3d2/0x5d0 [ 1697.773360][ C1] worker_thread+0xa55/0xfc0 [ 1697.773377][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1697.773394][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1697.773417][ C1] kthread+0x2fa/0x390 [ 1697.773431][ C1] ? pr_cont_work+0x560/0x560 [ 1697.773448][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1697.773461][ C1] ret_from_fork+0x48/0x80 [ 1697.773478][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1697.773493][ C1] ret_from_fork_asm+0x11/0x20 [ 1697.773516][ C1] [ 1698.719513][T17741] ldm_validate_partition_table(): Disk read failed. [ 1698.727932][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1698.738124][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1698.766505][T17425] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1698.775798][T17425] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1698.785131][T17741] Dev nbd14: unable to read RDB block 0 [ 1698.800009][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1698.806923][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1698.814163][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1698.824347][ T28] Call Trace: [ 1698.827666][ T28] [ 1698.830628][ T28] dump_stack_lvl+0x18c/0x250 [ 1698.835358][ T28] ? show_regs_print_info+0x20/0x20 [ 1698.840594][ T28] ? load_image+0x420/0x420 [ 1698.845131][ T28] panic+0x2dc/0x730 [ 1698.849062][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1698.854831][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1698.859443][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 1698.865047][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1698.871225][ T28] watchdog+0xf7c/0xf80 [ 1698.875402][ T28] ? watchdog+0x1e1/0xf80 [ 1698.879756][ T28] kthread+0x2fa/0x390 [ 1698.883849][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1698.888917][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1698.893694][ T28] ret_from_fork+0x48/0x80 [ 1698.898140][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1698.902750][ T28] ret_from_fork_asm+0x11/0x20 [ 1698.907575][ T28] [ 1698.911106][ T28] Kernel Offset: disabled [ 1698.915457][ T28] Rebooting in 86400 seconds..