last executing test programs: 11m32.575855025s ago: executing program 0 (id=839): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x20, 0x40, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x885) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)='\\-,-,\x00', 0x6, 0x4) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="52797374656d2e2c2f2725d500"], &(0x7f0000000340)=""/170, 0xaa) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000540)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) accept$alg(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x1af940, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x400001, 0x42, 0x7}, 0x18) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r5, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{0x77359400}, {r6, r7/1000+60000}}, 0x100) 11m31.329869577s ago: executing program 0 (id=840): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{}, &(0x7f0000002680), &(0x7f00000026c0)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, &(0x7f0000000080)=0x68) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@can={0x1d, r4}, 0x80, 0x0}, 0x600000d0) gettid() r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42101) accept4(r5, 0x0, 0x0, 0x80000) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f00000005c0)={0xa, 0x4e22, 0x4, @mcast1, 0x8}, 0x1a) 11m29.573653722s ago: executing program 0 (id=843): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 11m27.32754153s ago: executing program 0 (id=845): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 11m23.871909048s ago: executing program 0 (id=849): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/177, 0xb1}], 0x1}, 0x3}], 0x1, 0x40000161, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) close(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000340)=""/135}, 0x20) 11m21.935246838s ago: executing program 0 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r3, 0x28) shutdown(r3, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4500, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040), 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) mprotect(&(0x7f0000692000/0x2000)=nil, 0x2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r6, 0x400, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11m5.995617365s ago: executing program 32 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r3, 0x28) shutdown(r3, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4500, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040), 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) mprotect(&(0x7f0000692000/0x2000)=nil, 0x2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r6, 0x400, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m3.427987299s ago: executing program 3 (id=1243): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) close(r4) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 6m1.728130443s ago: executing program 3 (id=1244): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents64(r2, 0x0, 0x0) 5m51.745106878s ago: executing program 3 (id=1252): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) close(r4) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 5m47.957687085s ago: executing program 3 (id=1254): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000000c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) close(r4) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 5m36.317147752s ago: executing program 3 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 5m32.800121203s ago: executing program 3 (id=1269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000b80), 0x6, 0x105001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/failslab/interval\x00', 0x1, 0x0) write$fault_inject(r3, 0x0, 0x0) 5m17.735982448s ago: executing program 33 (id=1269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000b80), 0x6, 0x105001) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/failslab/interval\x00', 0x1, 0x0) write$fault_inject(r3, 0x0, 0x0) 12.483691066s ago: executing program 1 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0xa, 0x7f) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b08"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}}, 0x24040084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r7, 0xf9, "ea459a6b0fccf94a0481d7951aad58371a7fd99196ab6bd368a38d538728e08e09bf94fdf402dd004ce7b65228aa47b88a06487117ac4bc6fe496fa15d2716302d411d7fa429b61693888b92c06848ec288ab065d0987e67e853283fc87e6c74ef8e1198e234805cc1ced30f26147edfb1fb2c725cfb783047b1157e90a83a2dcb0ee299a014b00b5b6fa5832de9ba1173ec21edc05d79ffc7c2dca357d1eeb4e2c975d0f2973b1c1913b521ed25c055be6b90f4028bd0c6ea2e49a7d1033b502f22723d3224dc79b563c5e839af7147c5a5798eb65e0bf7364155e56246c8fcdc03bb9a27cd0637f3002c93bd869878708b70bb44073c3ef1"}, &(0x7f0000000280)=0x101) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x10) 10.837887618s ago: executing program 2 (id=1973): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x10) 9.609965008s ago: executing program 2 (id=1977): socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x5, 0x40, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.517377411s ago: executing program 1 (id=1978): creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x08\n', 0x5) 8.299814272s ago: executing program 5 (id=1979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 8.174811445s ago: executing program 1 (id=1981): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) close(r3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 5.95313202s ago: executing program 4 (id=1984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.319871856s ago: executing program 2 (id=1985): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000000140), 0x0, 0x10) 5.18071834s ago: executing program 4 (id=1986): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) 5.051828543s ago: executing program 4 (id=1987): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_open_dev$video(0x0, 0x2, 0x101000) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r5}, 0x20) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/177, 0xb1}], 0x1}, 0x3}], 0x1, 0x40000161, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000340)=""/135}, 0x20) 4.960103856s ago: executing program 1 (id=1988): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = accept(r2, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 3.397476564s ago: executing program 4 (id=1989): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x08\n', 0x5) 3.18594843s ago: executing program 2 (id=1990): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0]) 2.428341949s ago: executing program 1 (id=1991): getpriority(0x1, 0xffffffffffffffff) r0 = syz_open_dev$dri(0x0, 0x5795, 0x109000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000026c0)={{r0}, "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"}) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050116a7eb25ff0904a1f70901"], 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027"], 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 2.427332929s ago: executing program 5 (id=1992): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x898, 0xfffffffe, 0xe}, 0x10) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e26, @empty=0x1000000}, 0x10) 2.169176325s ago: executing program 2 (id=1993): socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x5, 0x40, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.00782769s ago: executing program 5 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/file0\x00', 0x0) 1.763930145s ago: executing program 5 (id=1995): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read$proc_mixer(r2, &(0x7f0000001640)=""/205, 0xcd) 1.503455512s ago: executing program 1 (id=1996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) close(r3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) 1.307973197s ago: executing program 2 (id=1997): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000040)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000c00)=""/101, 0x65}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}], 0xa, "68cefe672e30369f4b1e73fca8e11b70f708f12a6c900128cb9a5440b42a9504984d2db98584ec1626642aaca9670a8eb4dd36e48e7a3da997d6e5999b58e1765fcd7cefde9c59801df5f5"}, 0x91) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.003284395s ago: executing program 4 (id=1998): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x1, '\x00', 0x0}}) sendmmsg(0xffffffffffffffff, &(0x7f000000c040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 785.37147ms ago: executing program 5 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 157.744726ms ago: executing program 4 (id=2000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='te', 0x2) close(r1) 0s ago: executing program 5 (id=2001): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) kernel console output (not intermixed with test programs): [ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.344094][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.383437][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.390589][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.417364][ T5780] Bluetooth: hci2: command tx timeout [ 89.417843][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.439251][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.446512][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.476171][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.484657][ T5780] Bluetooth: hci1: command tx timeout [ 89.487535][ T5775] Bluetooth: hci3: command tx timeout [ 89.500236][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.507802][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.534332][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.575201][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.582204][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.608805][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.659461][ T5778] hsr_slave_0: entered promiscuous mode [ 89.666247][ T5778] hsr_slave_1: entered promiscuous mode [ 89.672601][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.681121][ T5778] Cannot create hsr debugfs directory [ 89.756862][ T5776] hsr_slave_0: entered promiscuous mode [ 89.763301][ T5776] hsr_slave_1: entered promiscuous mode [ 89.770016][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.777903][ T5776] Cannot create hsr debugfs directory [ 89.807528][ T5779] hsr_slave_0: entered promiscuous mode [ 89.814654][ T5779] hsr_slave_1: entered promiscuous mode [ 89.821337][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.829197][ T5779] Cannot create hsr debugfs directory [ 90.254463][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.269056][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.279692][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.291944][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.356796][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.375016][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.388358][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.399492][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.519858][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.555832][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.570078][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.580897][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.694155][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.708031][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.718882][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.732409][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.761416][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.801385][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.820838][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.828343][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.880621][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.887846][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.951065][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.009854][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.053506][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.060759][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.071763][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.079137][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.105996][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.221203][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.250168][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.271791][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.279295][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.331454][ T5775] Bluetooth: hci0: command tx timeout [ 91.349869][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.357120][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.383571][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.441845][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.449058][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.484407][ T5775] Bluetooth: hci2: command tx timeout [ 91.499923][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.507178][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.564479][ T5775] Bluetooth: hci1: command tx timeout [ 91.570037][ T5775] Bluetooth: hci3: command tx timeout [ 91.627895][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.832113][ T5772] veth0_vlan: entered promiscuous mode [ 91.881178][ T5772] veth1_vlan: entered promiscuous mode [ 91.928653][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.007594][ T5772] veth0_macvtap: entered promiscuous mode [ 92.030632][ T5772] veth1_macvtap: entered promiscuous mode [ 92.119137][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.137142][ T56] cfg80211: failed to load regulatory.db [ 92.178606][ T5778] veth0_vlan: entered promiscuous mode [ 92.201336][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.232694][ T5778] veth1_vlan: entered promiscuous mode [ 92.254660][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.263581][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.273192][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282159][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340885][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.371954][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.418119][ T5778] veth0_macvtap: entered promiscuous mode [ 92.496192][ T5778] veth1_macvtap: entered promiscuous mode [ 92.508702][ T2112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.521945][ T2112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.581256][ T2112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.588174][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.600842][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.610974][ T2112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.619314][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.645750][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.657762][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.670216][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.714514][ T5779] veth0_vlan: entered promiscuous mode [ 92.723257][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.735632][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748251][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757635][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.781769][ T5776] veth0_vlan: entered promiscuous mode [ 92.833805][ T5779] veth1_vlan: entered promiscuous mode [ 92.884438][ T5776] veth1_vlan: entered promiscuous mode [ 93.937897][ T5775] Bluetooth: hci0: command tx timeout [ 93.943546][ T5780] Bluetooth: hci2: command tx timeout [ 93.950545][ T5780] Bluetooth: hci1: command tx timeout [ 93.956615][ T5775] Bluetooth: hci3: command tx timeout [ 94.629468][ T5779] veth0_macvtap: entered promiscuous mode [ 94.683676][ T5776] veth0_macvtap: entered promiscuous mode [ 94.708402][ T5779] veth1_macvtap: entered promiscuous mode [ 94.723198][ T5776] veth1_macvtap: entered promiscuous mode [ 94.737708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.758841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.849851][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.859902][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.882037][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.898702][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.910500][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.926947][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.941184][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.955326][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.970284][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.981734][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.992830][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.011697][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.020927][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.036728][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.048556][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.061085][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.072726][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.083688][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.116222][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.169462][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.193804][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.213889][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.252165][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.274370][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.301761][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.324336][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.370540][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380295][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.400114][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422616][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496691][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.517257][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.547749][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.565125][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.694564][ T5780] Bluetooth: hci1: command tx timeout [ 96.700797][ T5785] Bluetooth: hci3: command tx timeout [ 96.706408][ T5775] Bluetooth: hci0: command tx timeout [ 96.706506][ T5084] Bluetooth: hci2: command tx timeout [ 98.935735][ T2112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.955160][ T2112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.175255][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.183412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.269453][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.304920][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.365719][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.386999][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.548066][ T5862] syz.3.4 (5862): attempted to duplicate a private mapping with mremap. This is not supported. [ 102.853764][ C1] sched: RT throttling activated [ 102.943974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.503869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.654014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.623931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.774019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.183902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 115.768564][ T5914] Zero length message leads to an empty skb [ 115.776244][ T5914] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.802774][ T5914] CIFS: Attempting to mount //127.0.0.1/test [ 115.815424][ T5914] CIFS: VFS: Error connecting to socket. Aborting operation. [ 115.823164][ T5914] CIFS: VFS: cifs_mount failed w/return code = -111 [ 117.894064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 118.303839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.574055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.543731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 133.088593][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.426910][ T6002] input: syz0 as /devices/virtual/input/input5 [ 147.938862][ T6029] syz.1.58[6029]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 153.497725][ T6049] CIFS: Attempting to mount //127.0.0.1/test [ 153.511932][ T6049] CIFS: VFS: Error connecting to socket. Aborting operation. [ 153.519744][ T6049] CIFS: VFS: cifs_mount failed w/return code = -111 [ 154.907600][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 156.260577][ T6056] input: syz0 as /devices/virtual/input/input6 [ 162.915238][ T6087] input: syz0 as /devices/virtual/input/input7 [ 170.001188][ T6119] input: syz0 as /devices/virtual/input/input8 [ 195.841839][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.849313][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.152657][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 213.152667][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 213.152731][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 213.164830][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 213.378648][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 214.092036][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 214.106603][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.121409][ T8] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 214.140755][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.152749][ T8] usb 1-1: Product: syz [ 214.167414][ T8] usb 1-1: Manufacturer: syz [ 214.181602][ T8] usb 1-1: SerialNumber: syz [ 214.290924][ T8] usb 1-1: config 0 descriptor?? [ 214.371965][ T8] cdc_ether 1-1:0.0: skipping garbage [ 214.378485][ T8] cdc_ether 1-1:0.0: invalid descriptor buffer length [ 214.385553][ T8] usb 1-1: bad CDC descriptors [ 214.391759][ T8] usb 1-1: unsupported MDLM descriptors [ 214.553487][ T5818] usb 1-1: USB disconnect, device number 2 [ 214.788328][ T6290] CIFS: Attempting to mount //127.0.0.1/test [ 214.802835][ T6290] CIFS: VFS: Error connecting to socket. Aborting operation. [ 214.810611][ T6290] CIFS: VFS: cifs_mount failed w/return code = -111 [ 226.595893][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 227.605162][ T6349] binder: 6348:6349 ioctl 40046210 0 returned -14 [ 242.832471][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 253.673778][ T5762] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 253.883076][ T5762] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 254.220465][ T5762] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.327115][ T5762] usb 3-1: config 1 interface 0 has no altsetting 0 [ 254.386136][ T5762] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40 [ 254.426851][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.593962][ T5762] usb 3-1: Product: syz [ 254.599295][ T5762] usb 3-1: Manufacturer: syz [ 254.628248][ T5762] usb 3-1: SerialNumber: syz [ 254.908630][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.940326][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.001770][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 255.185281][ T5762] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 255.304965][ T5762] usb 3-1: USB disconnect, device number 2 [ 255.310905][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 255.372014][ T5762] appletouch 3-1:1.0: input: appletouch disconnected [ 256.975650][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.982025][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.620476][ T6543] CIFS: Attempting to mount //127.0.0.1/test [ 269.697188][ T6543] CIFS: VFS: Error connecting to socket. Aborting operation. [ 269.751877][ T6543] CIFS: VFS: cifs_mount failed w/return code = -111 [ 278.639347][ T6607] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.629047][ T6616] CIFS: Attempting to mount //127.0.0.1/test [ 279.636463][ T6616] CIFS: VFS: Error connecting to socket. Aborting operation. [ 279.643991][ T6616] CIFS: VFS: cifs_mount failed w/return code = -111 [ 280.523966][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 286.713167][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 295.305058][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 301.567332][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 308.665475][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 316.020618][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 317.409400][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416009][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.616408][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 331.381005][ T6865] CIFS: Attempting to mount //127.0.0.1/test [ 331.392617][ T6865] CIFS: VFS: Error connecting to socket. Aborting operation. [ 331.401232][ T6865] CIFS: VFS: cifs_mount failed w/return code = -111 [ 333.028901][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 341.212600][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 342.087982][ T6917] CIFS: Attempting to mount //127.0.0.1/test [ 342.095474][ T6917] CIFS: VFS: Error connecting to socket. Aborting operation. [ 342.102955][ T6917] CIFS: VFS: cifs_mount failed w/return code = -111 [ 352.393828][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 352.959728][ T6952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 353.104155][ T6952] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 360.595983][ T6969] capability: warning: `syz.3.341' uses 32-bit capabilities (legacy support in use) [ 363.339339][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 373.072373][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 373.318235][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 373.413536][ T7016] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 373.735561][ T7023] ubi31: attaching mtd0 [ 373.746744][ T7023] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 377.995642][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 378.850572][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857080][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.204317][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 383.024174][ T7086] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 384.783123][ T7086] team0: Port device dummy0 added [ 384.883801][ T7090] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 385.073038][ T7090] team0: Port device dummy0 removed [ 386.664253][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 391.514622][ T7128] CIFS: Attempting to mount //127.0.0.1/test [ 391.522160][ T7128] CIFS: VFS: Error connecting to socket. Aborting operation. [ 391.529796][ T7128] CIFS: VFS: cifs_mount failed w/return code = -111 [ 393.254261][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 397.824100][ T7156] ubi31: attaching mtd0 [ 397.831920][ T7156] ubi31: scanning is finished [ 397.894901][ T7156] ubi31: empty MTD device detected [ 398.063750][ T7156] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 398.071416][ T7156] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 398.113707][ T7156] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 398.120846][ T7156] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 398.194165][ T7156] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 398.201121][ T7156] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 398.273844][ T7156] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1803130058 [ 398.303991][ T7156] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 398.362456][ T7157] ubi31: background thread "ubi_bgt31d" started, PID 7157 [ 400.734724][ T7167] CIFS: Attempting to mount //127.0.0.1/test [ 400.741671][ T7167] CIFS: VFS: Error connecting to socket. Aborting operation. [ 400.749228][ T7167] CIFS: VFS: cifs_mount failed w/return code = -111 [ 400.872152][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 408.377837][ T7219] CIFS: Attempting to mount //127.0.0.1/test [ 408.385283][ T7219] CIFS: VFS: Error connecting to socket. Aborting operation. [ 408.392773][ T7219] CIFS: VFS: cifs_mount failed w/return code = -111 [ 413.489004][ T7236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.053862][ T173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 421.253639][ T173] usb 4-1: Using ep0 maxpacket: 8 [ 421.271269][ T173] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.281574][ T173] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 421.321349][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.364554][ T173] usb 4-1: config 0 descriptor?? [ 421.586134][ T7281] CIFS: Attempting to mount //127.0.0.1/test [ 421.593506][ T7281] CIFS: VFS: Error connecting to socket. Aborting operation. [ 421.601087][ T7281] CIFS: VFS: cifs_mount failed w/return code = -111 [ 421.778809][ T7274] device-mapper: ioctl: Invalid ioctl structure: name @, dev 8105090028220103 [ 421.817622][ T173] usbhid 4-1:0.0: can't add hid device: -71 [ 421.836843][ T173] usbhid: probe of 4-1:0.0 failed with error -71 [ 421.857494][ T173] usb 4-1: USB disconnect, device number 2 [ 422.409407][ T7284] CIFS: Attempting to mount //127.0.0.1/share [ 422.643963][ T7285] se_device not configured yet, cannot port link [ 424.464529][ T7284] CIFS: VFS: cifs_mount failed w/return code = -112 [ 428.755951][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 428.848564][ T7315] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 440.494433][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.501941][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.411992][ T7375] CIFS: Attempting to mount //127.0.0.1/test [ 443.419623][ T7375] CIFS: VFS: Error connecting to socket. Aborting operation. [ 443.427668][ T7375] CIFS: VFS: cifs_mount failed w/return code = -111 [ 459.702981][ T7442] CIFS: Attempting to mount //127.0.0.1/test [ 459.712252][ T7442] CIFS: VFS: Error connecting to socket. Aborting operation. [ 459.719876][ T7442] CIFS: VFS: cifs_mount failed w/return code = -111 [ 469.516596][ T7481] CIFS: Attempting to mount //127.0.0.1/test [ 469.524736][ T7481] CIFS: VFS: Error connecting to socket. Aborting operation. [ 469.532309][ T7481] CIFS: VFS: cifs_mount failed w/return code = -111 [ 470.167723][ T7486] warning: `syz.0.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 473.998537][ T7514] CIFS: Attempting to mount //127.0.0.1/test [ 474.007272][ T7514] CIFS: VFS: Error connecting to socket. Aborting operation. [ 474.014876][ T7514] CIFS: VFS: cifs_mount failed w/return code = -111 [ 478.410096][ T7541] netlink: 'syz.2.533': attribute type 8 has an invalid length. [ 485.757989][ T7585] CIFS: Attempting to mount //127.0.0.1/test [ 485.770191][ T7585] CIFS: VFS: Error connecting to socket. Aborting operation. [ 485.778029][ T7585] CIFS: VFS: cifs_mount failed w/return code = -111 [ 502.252404][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.264648][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.356709][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 503.894264][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 504.947717][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 504.986100][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.023770][ T5818] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 505.032893][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.080124][ T5818] usb 4-1: config 0 descriptor?? [ 505.341226][ T5818] usbhid 4-1:0.0: can't add hid device: -71 [ 505.358747][ T5818] usbhid: probe of 4-1:0.0 failed with error -71 [ 505.404867][ T5818] usb 4-1: USB disconnect, device number 3 [ 515.029381][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 515.714655][ T7723] netlink: 256 bytes leftover after parsing attributes in process `syz.0.590'. [ 515.764244][ T7723] unsupported nlmsg_type 40 [ 515.953694][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 516.166914][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 518.052590][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 518.113675][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 518.122801][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.265123][ T8] usb 3-1: config 0 descriptor?? [ 518.695495][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 518.727865][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 518.783662][ T8] usb 3-1: USB disconnect, device number 3 [ 524.806135][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 528.725462][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 541.644121][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 541.673957][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 541.758428][ T7821] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 541.867696][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 541.890997][ T23] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 541.913628][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.932442][ T23] usb 2-1: Product: syz [ 541.953433][ T23] usb 2-1: Manufacturer: syz [ 541.973675][ T23] usb 2-1: SerialNumber: syz [ 541.985092][ T23] usb 2-1: config 0 descriptor?? [ 542.002613][ T23] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 542.224709][ T5818] usb 2-1: USB disconnect, device number 2 [ 547.104023][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 547.333595][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 547.389664][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 547.409900][ T5816] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 547.463837][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.518832][ T5816] usb 3-1: config 0 descriptor?? [ 549.735086][ T5816] usbhid 3-1:0.0: can't add hid device: -71 [ 549.741180][ T5816] usbhid: probe of 3-1:0.0 failed with error -71 [ 549.780153][ T5816] usb 3-1: USB disconnect, device number 4 [ 554.093783][ T7863] CIFS: Attempting to mount //127.0.0.1/test [ 554.105782][ T7863] CIFS: VFS: Error connecting to socket. Aborting operation. [ 554.113829][ T7863] CIFS: VFS: cifs_mount failed w/return code = -111 [ 558.463841][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 563.546061][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.552396][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.621120][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 568.436787][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 570.618091][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 570.650805][ T23] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 570.664246][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.683896][ T23] usb 2-1: config 0 descriptor?? [ 570.746730][ T23] usb 2-1: can't set config #0, error -71 [ 570.787860][ T23] usb 2-1: USB disconnect, device number 3 [ 572.468489][ T7937] Bluetooth: MGMT ver 1.22 [ 572.871109][ T7940] CIFS: Attempting to mount //127.0.0.1/test [ 572.878147][ T7940] CIFS: VFS: Error connecting to socket. Aborting operation. [ 572.920925][ T7940] CIFS: VFS: cifs_mount failed w/return code = -111 [ 580.455056][ T7979] CIFS: Attempting to mount //127.0.0.1/test [ 580.467221][ T7979] CIFS: VFS: Error connecting to socket. Aborting operation. [ 580.475241][ T7979] CIFS: VFS: cifs_mount failed w/return code = -111 [ 585.096934][ T8008] loop5: detected capacity change from 0 to 7 [ 585.134913][ T8008] Dev loop5: unable to read RDB block 7 [ 585.140846][ T8008] loop5: AHDI p1 p4 [ 585.173881][ T8008] loop5: partition table partially beyond EOD, truncated [ 585.203742][ T8008] loop5: p1 start 1732098522 is beyond EOD, truncated [ 586.105982][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 592.844937][ T8051] CIFS: Attempting to mount //127.0.0.1/test [ 592.856047][ T8051] CIFS: VFS: Error connecting to socket. Aborting operation. [ 592.863966][ T8051] CIFS: VFS: cifs_mount failed w/return code = -111 [ 593.894675][ T8054] capability: warning: `syz.1.680' uses deprecated v2 capabilities in a way that may be insecure [ 597.449305][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 599.124083][ T8080] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 599.144782][ T8079] dccp_v6_rcv: dropped packet with invalid checksum [ 599.348153][ T8082] kAFS: No cell specified [ 604.524852][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 604.682649][ T8124] CIFS: Attempting to mount //127.0.0.1/test [ 604.693928][ T8124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 604.701653][ T8124] CIFS: VFS: cifs_mount failed w/return code = -111 [ 611.548664][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 611.705535][ T8157] CIFS: Attempting to mount //127.0.0.1/test [ 611.712901][ T8157] CIFS: VFS: Error connecting to socket. Aborting operation. [ 611.720449][ T8157] CIFS: VFS: cifs_mount failed w/return code = -111 [ 614.554960][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 624.635166][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.641652][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.419856][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 625.701371][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 632.940268][ T8256] CIFS: Attempting to mount //127.0.0.1/test [ 632.951557][ T8256] CIFS: VFS: Error connecting to socket. Aborting operation. [ 632.959427][ T8256] CIFS: VFS: cifs_mount failed w/return code = -111 [ 637.526566][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 648.689498][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 662.674083][ T5816] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 663.603849][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 663.772973][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.837332][ T5816] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 664.058847][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.214648][ T5816] usb 3-1: config 0 descriptor?? [ 665.280407][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 666.076081][ T8380] CIFS: Attempting to mount //127.0.0.1/test [ 666.083520][ T8380] CIFS: VFS: Error connecting to socket. Aborting operation. [ 666.090999][ T8380] CIFS: VFS: cifs_mount failed w/return code = -111 [ 667.893706][ T5816] usb 3-1: can't set config #0, error -71 [ 667.915979][ T5816] usb 3-1: USB disconnect, device number 5 [ 670.836053][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 670.898538][ T8405] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 671.611340][ T8407] CIFS: Attempting to mount //127.0.0.1/test [ 671.618833][ T8407] CIFS: VFS: Error connecting to socket. Aborting operation. [ 671.626416][ T8407] CIFS: VFS: cifs_mount failed w/return code = -111 [ 678.125468][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 681.125140][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 683.334546][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 683.415034][ T23] usb 3-1: device descriptor read/all, error -71 [ 686.046982][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.053359][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.536236][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 698.060881][ T8515] CIFS: Attempting to mount //127.0.0.1/test [ 698.068352][ T8515] CIFS: VFS: Error connecting to socket. Aborting operation. [ 698.075932][ T8515] CIFS: VFS: cifs_mount failed w/return code = -111 [ 698.173717][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 698.385251][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 698.395985][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 698.403162][ T5816] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 698.464401][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.477592][ T5816] usb 3-1: config 0 descriptor?? [ 698.700803][ T5816] usbhid 3-1:0.0: can't add hid device: -71 [ 698.711741][ T5816] usbhid: probe of 3-1:0.0 failed with error -71 [ 698.727375][ T5816] usb 3-1: USB disconnect, device number 8 [ 699.316974][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 708.446100][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 708.633551][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 710.683882][ T5816] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 710.692012][ T5816] usb 4-1: can't read configurations, error -71 [ 720.633658][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 720.843715][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 720.864392][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 720.879617][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 720.901537][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.154647][ T23] usb 3-1: config 0 descriptor?? [ 721.460213][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 721.466721][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 721.516207][ T23] usb 3-1: USB disconnect, device number 9 [ 721.814813][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 722.963914][ T8631] CIFS: Attempting to mount //127.0.0.1/test [ 722.975163][ T8631] CIFS: VFS: Error connecting to socket. Aborting operation. [ 722.982841][ T8631] CIFS: VFS: cifs_mount failed w/return code = -111 [ 732.797932][ T8662] bond0: (slave bond_slave_1): Releasing backup interface [ 739.740236][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 746.791793][ T8718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 746.801807][ T8718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 746.811209][ T8718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 746.820249][ T8718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 746.829534][ T8718] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 746.837848][ T8718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.294738][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 747.495460][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502010][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.107004][ T8718] Bluetooth: hci4: command tx timeout [ 750.707531][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 752.634928][ T8718] Bluetooth: hci4: command tx timeout [ 752.656584][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.708160][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.815448][ T8717] bridge_slave_0: entered allmulticast mode [ 752.836307][ T8717] bridge_slave_0: entered promiscuous mode [ 753.044380][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.142839][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.308193][ T8717] bridge_slave_1: entered allmulticast mode [ 753.338117][ T8717] bridge_slave_1: entered promiscuous mode [ 753.517577][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.567018][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.715120][ T8717] team0: Port device team_slave_0 added [ 753.757336][ T8717] team0: Port device team_slave_1 added [ 753.882686][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.933651][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.023544][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.086968][ T8757] trusted_key: encrypted_key: keylen parameter is missing [ 754.216903][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.243720][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.823333][ T8718] Bluetooth: hci4: command tx timeout [ 755.963909][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.390064][ T8717] hsr_slave_0: entered promiscuous mode [ 756.420899][ T8717] hsr_slave_1: entered promiscuous mode [ 756.467505][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.510581][ T8717] Cannot create hsr debugfs directory [ 756.728130][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.536197][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 757.580003][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.885384][ T8718] Bluetooth: hci4: command tx timeout [ 758.436938][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.592040][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.3.890'. [ 758.618188][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.046145][ T8717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.871544][ T8717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 764.304891][ T8717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 764.332431][ T8717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 764.646107][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.898'. [ 767.530552][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.167992][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.550315][ T8858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.903'. [ 768.633706][ T8858] netlink: 56 bytes leftover after parsing attributes in process `syz.2.903'. [ 768.844106][ T60] IPVS: stopping backup sync thread 7315 ... [ 769.065929][ T8717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 769.203569][ T8717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.176466][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.183771][ T8902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.226286][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.233608][ T8902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.920960][ T60] hsr_slave_0: left promiscuous mode [ 770.933370][ T60] hsr_slave_1: left promiscuous mode [ 770.946980][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.961005][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.547720][ T8936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'. [ 772.585437][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.592929][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.614758][ T60] bridge_slave_1: left allmulticast mode [ 772.620502][ T60] bridge_slave_1: left promiscuous mode [ 772.655179][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.696747][ T60] bridge_slave_0: left allmulticast mode [ 772.702495][ T60] bridge_slave_0: left promiscuous mode [ 772.719212][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.850363][ T60] veth1_macvtap: left promiscuous mode [ 772.857142][ T60] veth0_macvtap: left promiscuous mode [ 772.873970][ T60] veth1_vlan: left promiscuous mode [ 772.879750][ T60] veth0_vlan: left promiscuous mode [ 775.163542][ T28] audit: type=1326 audit(1787351749.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e799e0d9 code=0x7ffc0000 [ 775.237379][ T28] audit: type=1326 audit(1787351749.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e799e0d9 code=0x7ffc0000 [ 775.323539][ T28] audit: type=1326 audit(1787351749.488:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07e795e90e code=0x7ffc0000 [ 775.379842][ T28] audit: type=1326 audit(1787351749.488:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.426981][ T28] audit: type=1326 audit(1787351749.488:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.451550][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 775.497279][ T28] audit: type=1326 audit(1787351749.488:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.551545][ T28] audit: type=1326 audit(1787351749.518:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.618731][ T28] audit: type=1326 audit(1787351749.788:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.692751][ T28] audit: type=1326 audit(1787351749.798:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.729430][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.763548][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 775.783504][ T28] audit: type=1326 audit(1787351750.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e799dd6b code=0x7ffc0000 [ 775.839416][ T8] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 775.849252][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.873997][ T8] usb 2-1: Product: syz [ 775.878326][ T8] usb 2-1: Manufacturer: syz [ 775.882960][ T8] usb 2-1: SerialNumber: syz [ 775.909793][ T8] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 776.218999][ T8] usb 2-1: USB disconnect, device number 4 [ 776.988836][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.917'. [ 777.344921][ T60] team0 (unregistering): Port device team_slave_1 removed [ 777.425408][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 777.506280][ T60] team0 (unregistering): Port device team_slave_0 removed [ 777.706775][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.879833][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.457017][ T60] bond0 (unregistering): Released all slaves [ 779.538245][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.927'. [ 779.860730][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.828789][ T8717] veth0_vlan: entered promiscuous mode [ 782.884444][ T8717] veth1_vlan: entered promiscuous mode [ 783.016917][ T8717] veth0_macvtap: entered promiscuous mode [ 783.049130][ T8717] veth1_macvtap: entered promiscuous mode [ 783.134290][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.171171][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.224375][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.280711][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.305087][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.331543][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.374123][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.409700][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.309262][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 784.497879][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.510179][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.536481][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.557814][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.585469][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.625238][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.795597][ T8717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.813516][ T8717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.837005][ T8717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.863501][ T8717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.094348][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.102253][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.297868][ T8893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.322912][ T8893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.550258][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 793.653664][ T9108] process 'syz.4.952' launched '/dev/fd/3' with NULL argv: empty string added [ 797.059380][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 798.314405][ T9141] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 805.927815][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 805.956048][ T9196] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 806.039392][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.133532][ T9196] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 806.141358][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 806.684306][ T6985] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 806.877504][ T6985] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 806.899181][ T6985] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 806.919483][ T6985] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 806.938943][ T6985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.728197][ T6985] pegasus: probe of 3-1:1.0 failed with error -32 [ 808.929951][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.940129][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.825691][ T6985] usb 3-1: USB disconnect, device number 10 [ 817.321888][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 823.046286][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 830.608888][ T9363] loop8: detected capacity change from 0 to 8 [ 831.615419][ T9363] Dev loop8: unable to read RDB block 8 [ 831.621556][ T9363] loop8: unable to read partition table [ 831.627516][ T9363] loop8: partition table beyond EOD, truncated [ 831.634117][ T9363] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 837.105598][ T9409] input: syz0 as /devices/virtual/input/input10 [ 837.730508][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 837.814024][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 844.299766][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 849.499113][ T9505] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 853.237103][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 856.438725][ T9542] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 856.451343][ T9542] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(1) [ 859.627990][ T9565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 859.711583][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 859.721733][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 870.380043][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.387962][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.750625][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 876.164216][ T9647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1046'. [ 876.195659][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1046'. [ 882.212771][ T9679] genirq: Flags mismatch irq 1. 00000000 (pc212e) vs. 00000080 (i8042) [ 882.224041][ T9679] comedi comedi1: warning! irq 1 unavailable! [ 886.533581][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 901.398490][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 902.993111][ T9733] autofs4:pid:9733:autofs_fill_super: called with bogus options [ 903.010458][ T9744] loop8: detected capacity change from 0 to 8 [ 905.623537][ T5846] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 905.813778][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 905.831761][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 905.845025][ T5846] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 905.864580][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.885832][ T5846] usb 4-1: config 0 descriptor?? [ 906.109704][ T9762] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 906.149650][ T5846] usbhid 4-1:0.0: can't add hid device: -71 [ 906.163902][ T5846] usbhid: probe of 4-1:0.0 failed with error -71 [ 906.205032][ T5846] usb 4-1: USB disconnect, device number 6 [ 907.316159][ T9774] syz.2.1080: attempt to access beyond end of device [ 907.316159][ T9774] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 910.812906][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 916.723608][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 918.947310][ T9816] loop8: detected capacity change from 0 to 8 [ 920.089843][ T9816] Dev loop8: unable to read RDB block 8 [ 920.095821][ T9816] loop8: unable to read partition table [ 920.101667][ T9816] loop8: partition table beyond EOD, truncated [ 920.108113][ T9816] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 920.283505][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 920.296986][ T8] usb 3-1: device descriptor read/all, error -71 [ 925.110566][ T9839] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1106'. [ 925.231000][ T9842] autofs4:pid:9842:autofs_fill_super: called with bogus options [ 926.559650][ T9858] cgroup: Name too long [ 931.807693][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.814259][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.709052][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 944.374137][ T9924] loop8: detected capacity change from 0 to 8 [ 944.406327][ T9924] Dev loop8: unable to read RDB block 8 [ 944.411987][ T9924] loop8: unable to read partition table [ 944.438632][ T9924] loop8: partition table beyond EOD, truncated [ 944.458877][ T9924] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 958.785065][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 964.310815][ T9989] loop8: detected capacity change from 0 to 8 [ 964.325123][ T9989] Dev loop8: unable to read RDB block 8 [ 964.330771][ T9989] loop8: unable to read partition table [ 964.348982][ T9989] loop8: partition table beyond EOD, truncated [ 964.370953][ T9989] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 966.764829][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 973.191343][T10027] loop8: detected capacity change from 0 to 8 [ 973.204744][T10027] Dev loop8: unable to read RDB block 8 [ 973.210385][T10027] loop8: unable to read partition table [ 973.221280][T10027] loop8: partition table beyond EOD, truncated [ 973.227956][T10027] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 989.863746][T10091] Illegal XDP return value 4294967274 on prog (id 96) dev N/A, expect packet loss! [ 993.853917][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.860283][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.787240][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 1005.403522][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 1010.188887][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 1015.934427][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 1018.655272][T10203] Config c1/1 of g1 needs at least one function. [ 1018.683951][T10203] udc dummy_udc.0: failed to start g1: -22 [ 1018.689843][T10203] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1018.738912][T10203] UDC core: g1: couldn't find an available UDC or it's busy [ 1023.918441][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 1025.162127][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 1027.923597][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1028.135744][ T27] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1028.163492][ T27] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.210468][ T27] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1028.243608][ T27] usb 5-1: config 150 has no interface number 0 [ 1028.276690][ T27] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1028.307161][ T27] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1028.341392][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.371775][ T27] usb 5-1: Product: syz [ 1028.383521][ T27] usb 5-1: Manufacturer: syz [ 1028.388210][ T27] usb 5-1: SerialNumber: syz [ 1031.940101][ T27] usb 5-1: USB disconnect, device number 2 [ 1054.693879][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.700267][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.784402][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 1057.690071][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 1064.026660][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 1076.276629][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 1096.283474][T10475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1096.304925][T10475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1096.312912][T10475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1096.334525][T10475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1096.342444][T10475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1096.388910][T10475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1096.465562][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 1097.078035][ T8900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.485698][ T8900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.523738][T10475] Bluetooth: hci0: command tx timeout [ 1100.288652][ T8900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.496490][ T8900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.603451][T10475] Bluetooth: hci0: command tx timeout [ 1100.892985][T10473] chnl_net:caif_netlink_parms(): no params data found [ 1102.934007][T10475] Bluetooth: hci0: command tx timeout [ 1104.801012][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.834095][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.841401][T10473] bridge_slave_0: entered allmulticast mode [ 1104.884940][T10473] bridge_slave_0: entered promiscuous mode [ 1105.005568][T10475] Bluetooth: hci0: command tx timeout [ 1105.113958][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.121183][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.152904][T10473] bridge_slave_1: entered allmulticast mode [ 1105.185902][T10473] bridge_slave_1: entered promiscuous mode [ 1106.975722][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.074670][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.310853][T10473] team0: Port device team_slave_0 added [ 1107.345667][T10473] team0: Port device team_slave_1 added [ 1108.730555][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.759666][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.848751][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.880374][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.898875][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.997271][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.893896][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 1110.989170][T10473] hsr_slave_0: entered promiscuous mode [ 1111.007811][T10473] hsr_slave_1: entered promiscuous mode [ 1111.360839][ T8900] IPVS: stopping backup sync thread 7821 ... [ 1115.484212][T10108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1115.583438][ T8900] hsr_slave_0: left promiscuous mode [ 1115.597354][ T8900] hsr_slave_1: left promiscuous mode [ 1115.620166][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.627962][ T8900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.651262][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.668189][ T8900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.700477][ T8900] bridge_slave_1: left allmulticast mode [ 1115.706554][ T8900] bridge_slave_1: left promiscuous mode [ 1115.712347][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.723692][T10108] usb 2-1: Using ep0 maxpacket: 32 [ 1115.742444][T10108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.776294][T10108] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1115.787923][ T8900] bridge_slave_0: left allmulticast mode [ 1115.803323][ T8900] bridge_slave_0: left promiscuous mode [ 1115.809196][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.818098][T10108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.833411][T10108] usb 2-1: Product: syz [ 1115.837634][T10108] usb 2-1: Manufacturer: syz [ 1115.853504][T10108] usb 2-1: SerialNumber: syz [ 1115.865817][T10108] usb 2-1: config 0 descriptor?? [ 1115.895189][T10108] usb 2-1: bad CDC descriptors [ 1115.901566][T10108] usb 2-1: unsupported MDLM descriptors [ 1116.044924][ T8900] veth1_macvtap: left promiscuous mode [ 1116.050587][ T8900] veth0_macvtap: left promiscuous mode [ 1116.083880][ T8900] veth1_vlan: left promiscuous mode [ 1116.097014][T10108] usb 2-1: USB disconnect, device number 5 [ 1116.103162][ T8900] veth0_vlan: left promiscuous mode [ 1116.127601][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.142099][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.820923][ T8900] bond1 (unregistering): Released all slaves [ 1122.294342][ T8900] team0 (unregistering): Port device team_slave_1 removed [ 1122.360502][ T8900] team0 (unregistering): Port device team_slave_0 removed [ 1122.432972][ T8900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.505664][ T8900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.682933][ T8900] bond0 (unregistering): Released all slaves [ 1126.678855][T10473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1126.767400][T10473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1126.829192][T10473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1126.853970][T10610] binder: BINDER_SET_CONTEXT_MGR already set [ 1126.861630][T10610] binder: 10609:10610 ioctl 4018620d 200000001000 returned -16 [ 1126.898818][T10473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1128.866600][T10473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.927825][T10473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.974500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.981709][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.037943][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.045195][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.878911][T10473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.728042][T10672] binder: BINDER_SET_CONTEXT_MGR already set [ 1135.743769][T10672] binder: 10671:10672 ioctl 4018620d 200000001000 returned -16 [ 1135.866774][T10473] veth0_vlan: entered promiscuous mode [ 1135.918658][T10473] veth1_vlan: entered promiscuous mode [ 1136.007741][T10473] veth0_macvtap: entered promiscuous mode [ 1136.031660][T10473] veth1_macvtap: entered promiscuous mode [ 1136.088922][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.113381][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.143443][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.161508][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.181799][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.202839][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.235111][T10473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.265925][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.286963][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.307464][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.333303][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.353312][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.386731][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.411176][T10473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.512798][T10473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.535603][T10473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.551559][T10473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.570649][T10473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.421465][ T8881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.431103][ T8881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.562775][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.599433][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.870475][T10706] input: syz0 as /devices/virtual/input/input11 [ 1144.763599][T10719] binder: BINDER_SET_CONTEXT_MGR already set [ 1144.769666][T10719] binder: 10718:10719 ioctl 4018620d 200000001000 returned -16 [ 1150.460673][T10767] input: syz0 as /devices/virtual/input/input12 [ 1154.638009][T10792] Bluetooth: MGMT ver 1.22 [ 1158.093771][T10807] loop8: detected capacity change from 0 to 8 [ 1158.182392][T10807] Dev loop8: unable to read RDB block 8 [ 1158.188119][T10807] loop8: unable to read partition table [ 1158.193961][T10807] loop8: partition table beyond EOD, truncated [ 1158.200136][T10807] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1177.229834][T10937] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1368'. [ 1177.569888][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.642627][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.511359][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 1197.127613][T11088] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.0) [ 1211.194146][T11173] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1430: No space for directory leaf checksum. Please run e2fsck -D. [ 1211.210476][T11173] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.2.1430: checksumming directory block 0 [ 1211.225096][T11173] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1211.237340][T11173] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1430: No space for directory leaf checksum. Please run e2fsck -D. [ 1211.252934][T11173] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.2.1430: checksumming directory block 0 [ 1211.265864][T11173] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1211.277494][T11173] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1430: No space for directory leaf checksum. Please run e2fsck -D. [ 1211.293178][T11173] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.2.1430: checksumming directory block 0 [ 1211.306185][T11173] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1211.317837][T11173] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.2.1430: No space for directory leaf checksum. Please run e2fsck -D. [ 1211.334339][T11173] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.2.1430: checksumming directory block 0 [ 1211.347653][T11173] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 1211.357248][T11173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 1211.367107][T11173] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1218.208805][ T5816] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1218.445828][ T5816] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 153, changing to 11 [ 1218.479496][ T5816] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 33922, setting to 1024 [ 1218.511727][ T5816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1218.538756][ T5816] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1218.549775][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1218.561779][ T5816] usb 3-1: Product: syz [ 1218.566272][ T5816] usb 3-1: Manufacturer: syz [ 1218.572106][ T5816] usb 3-1: SerialNumber: syz [ 1219.705020][ T5816] usb 3-1: config 0 descriptor?? [ 1219.714441][T11212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1219.749828][ T5816] usb 3-1: selecting invalid altsetting 0 [ 1221.403588][ T8718] Bluetooth: hci0: command 0x0406 tx timeout [ 1221.461978][ T5816] usb 3-1: USB disconnect, device number 13 [ 1224.082427][T11248] udevd[11248]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.771149][T11262] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1230.285971][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 1231.073973][T11292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1231.099952][T11292] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1231.199214][T11292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1231.243576][T11292] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1231.306608][T11292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1231.331350][T11292] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1231.419367][T11292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1231.425823][T11292] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1233.073346][T10475] Bluetooth: hci2: command 0x0406 tx timeout [ 1233.245488][T10475] Bluetooth: hci3: command 0x0406 tx timeout [ 1233.323907][T10475] Bluetooth: hci4: command 0x0406 tx timeout [ 1235.035302][T10475] Bluetooth: hci0: command 0x0406 tx timeout [ 1235.083467][T10475] Bluetooth: hci2: command 0x0406 tx timeout [ 1235.333364][T10475] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.403361][T10475] Bluetooth: hci4: command 0x0406 tx timeout [ 1237.216446][T10475] Bluetooth: hci0: command 0x0406 tx timeout [ 1237.273717][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 1237.361580][T11322] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1239.253875][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.260288][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.683728][T11330] syz.2.1466 uses obsolete (PF_INET,SOCK_PACKET) [ 1240.384743][T11341] 9pnet_virtio: no channels available for device syz [ 1241.154379][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 1243.886385][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3be000: rx timeout, send abort [ 1244.387225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3bd800: rx timeout, send abort [ 1244.403937][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3be000: abort rx timeout. Force session deactivation [ 1244.895537][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3bd800: abort rx timeout. Force session deactivation [ 1248.148921][T11401] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1250.496468][T11421] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1251.813466][ T5841] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 1252.027667][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.076271][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1252.136162][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1252.193498][ T5841] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1252.211488][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.873809][T11429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1253.883030][ T5841] hub 5-1:1.0: bad descriptor, ignoring hub [ 1253.896060][ T5841] hub: probe of 5-1:1.0 failed with error -5 [ 1253.902754][ T5841] cdc_wdm 5-1:1.0: skipping garbage [ 1253.926604][ T5841] cdc_wdm 5-1:1.0: skipping garbage [ 1253.971510][ T5841] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1253.988343][ T5841] cdc_wdm 5-1:1.0: Unknown control protocol [ 1254.887231][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1511'. [ 1261.040940][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 1264.887557][T11429] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1264.893580][ T8747] usb 5-1: USB disconnect, device number 3 [ 1266.612930][T11517] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1266.687946][ T8718] Bluetooth: hci4: unexpected subevent 0x0c length: 30 > 5 [ 1272.610708][T11606] tipc: Started in network mode [ 1272.653461][T11606] tipc: Node identity ac14140f, cluster identity 4711 [ 1272.711159][T11606] tipc: New replicast peer: 172.30.0.5 [ 1272.753737][T11606] tipc: Enabled bearer , priority 10 [ 1272.791705][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1272.895616][T11609] tipc: Disabling bearer [ 1273.773833][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1273.782593][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1273.794234][T11611] ceph: No mds server is up or the cluster is laggy [ 1273.801887][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1273.808230][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1275.985200][T11643] virtio-fs: tag not found [ 1279.393731][T11675] program syz.2.1567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1279.693430][ T5816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1279.943344][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 1279.980558][ T5816] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.057423][ T5816] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.097021][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1280.126940][ T5816] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1280.168240][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.201222][ T5816] usb 2-1: config 0 descriptor?? [ 1280.684743][ T5816] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1280.719369][ T5816] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1280.748492][ T5816] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1280.879160][ T5816] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1282.437361][ T5816] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 1282.466610][ T5816] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1282.727456][ T5816] usb 2-1: USB disconnect, device number 6 [ 1283.458574][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1003 jiffies old. [ 1286.769960][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'. [ 1286.787553][T11729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'. [ 1287.706542][T11742] loop8: detected capacity change from 0 to 8 [ 1288.698487][T11742] Dev loop8: unable to read RDB block 8 [ 1288.704198][T11742] loop8: unable to read partition table [ 1288.710020][T11742] loop8: partition table beyond EOD, truncated [ 1288.716278][T11742] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1290.281688][T11766] loop8: detected capacity change from 0 to 8 [ 1291.286638][T11766] Dev loop8: unable to read RDB block 8 [ 1291.292254][T11766] loop8: unable to read partition table [ 1291.298529][T11766] loop8: partition table beyond EOD, truncated [ 1291.304743][T11766] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1301.141519][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.148198][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.205790][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1301.217802][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1301.229605][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x796b instead [ 1301.240500][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8032 instead [ 1301.253493][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1301.322323][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1301.375348][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1301.403428][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1301.433850][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1301.460372][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1301.493519][T11874] jffs2: Further such events for this erase block will not be printed [ 1301.514162][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1301.533842][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1301.553346][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x796b instead [ 1301.564368][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8032 instead [ 1301.575281][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1301.589728][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1301.617839][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1301.640054][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1301.651397][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1301.666671][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1301.679328][T11874] jffs2: Further such events for this erase block will not be printed [ 1301.692131][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1301.712210][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1301.725759][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x796b instead [ 1301.736788][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8032 instead [ 1301.751977][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1301.766948][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1301.780013][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x796b instead [ 1301.794812][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8032 instead [ 1301.809230][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1301.824511][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1301.836810][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x796b instead [ 1301.851047][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8032 instead [ 1301.864612][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1301.878963][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1301.891213][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x796b instead [ 1301.905762][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8032 instead [ 1301.919180][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1301.933123][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1301.954689][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x796b instead [ 1301.969367][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8032 instead [ 1301.982003][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1301.996159][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1302.008451][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x796b instead [ 1302.022786][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8032 instead [ 1302.043350][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1302.071063][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1302.084133][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x796b instead [ 1302.098421][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8032 instead [ 1302.110455][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1302.124625][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1302.137778][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x796b instead [ 1302.154513][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8032 instead [ 1302.174042][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1302.184832][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1302.195479][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x796b instead [ 1302.219067][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8032 instead [ 1302.230153][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1302.245433][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1302.261715][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x796b instead [ 1302.272439][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8032 instead [ 1302.290527][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1302.322631][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1302.334009][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x796b instead [ 1302.349148][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8032 instead [ 1302.417367][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1302.433918][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1302.453978][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x796b instead [ 1302.481493][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8032 instead [ 1302.508803][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1302.526930][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1302.539052][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x796b instead [ 1302.563126][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8032 instead [ 1302.583430][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1302.605473][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1302.620861][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x796b instead [ 1302.683358][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8032 instead [ 1302.699878][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1302.722912][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1302.777234][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x796b instead [ 1302.815077][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8032 instead [ 1302.826072][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1302.841870][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1644'. [ 1302.851217][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1302.879722][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x796b instead [ 1302.891318][T11890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1644'. [ 1302.906871][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8032 instead [ 1302.936424][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1302.965557][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1304.310065][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x796b instead [ 1304.370964][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8032 instead [ 1304.423363][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1304.445020][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1304.460509][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x796b instead [ 1304.471438][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8032 instead [ 1304.490598][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 1304.500019][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1304.531369][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1304.556598][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x796b instead [ 1304.614480][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8032 instead [ 1304.674584][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1304.705229][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1304.717591][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x796b instead [ 1304.728429][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8032 instead [ 1304.750361][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1304.782616][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1304.814162][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x796b instead [ 1304.843677][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8032 instead [ 1304.858531][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1304.875507][T11907] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1304.893547][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1304.904499][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x796b instead [ 1304.922020][T11907] kvm: kvm [11906]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1304.932216][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8032 instead [ 1304.943567][T11907] kvm: kvm [11906]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1304.953624][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1304.973501][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1304.993284][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x796b instead [ 1305.007483][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8032 instead [ 1305.029307][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1305.053323][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1305.071370][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x796b instead [ 1305.102183][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8032 instead [ 1305.121319][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1305.132460][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1305.167921][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x796b instead [ 1305.189965][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8032 instead [ 1305.244388][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1305.267464][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1305.279648][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x796b instead [ 1305.296705][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8032 instead [ 1305.308752][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1305.343041][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1305.360469][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x796b instead [ 1305.379305][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8032 instead [ 1305.403856][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1305.423994][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1305.437431][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x796b instead [ 1305.473459][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8032 instead [ 1305.503715][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1305.522488][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1305.535064][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x796b instead [ 1305.552371][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8032 instead [ 1305.565341][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1305.577559][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1305.588492][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x796b instead [ 1305.599686][T11874] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8032 instead [ 1305.610617][T11874] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1305.620395][T11874] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1311.251965][T11945] i2c i2c-0: delete_device: Can't find device in list [ 1312.509615][T11963] loop8: detected capacity change from 0 to 8 [ 1313.344292][T11963] Dev loop8: unable to read RDB block 8 [ 1313.349960][T11963] loop8: unable to read partition table [ 1313.355935][T11963] loop8: partition table beyond EOD, truncated [ 1313.362163][T11963] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1315.347327][T11975] ======================================================= [ 1315.347327][T11975] WARNING: The mand mount option has been deprecated and [ 1315.347327][T11975] and is ignored by this kernel. Remove the mand [ 1315.347327][T11975] option from the mount to silence this warning. [ 1315.347327][T11975] ======================================================= [ 1316.853459][T12008] netlink: 'syz.2.1691': attribute type 10 has an invalid length. [ 1318.149389][T12051] Cannot find del_set index 2 as target [ 1318.569850][ T8718] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 1323.084125][T10475] Bluetooth: hci0: command 0x0406 tx timeout [ 1323.094055][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1728'. [ 1326.122818][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1740'. [ 1328.675224][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1328.721188][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1328.767991][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 1328.778475][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x796b instead [ 1328.788909][T12173] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 1328.803393][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8032 instead [ 1328.823564][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1328.836135][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1328.857065][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1328.883656][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1328.911771][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1328.941724][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1328.986915][T12165] jffs2: Further such events for this erase block will not be printed [ 1329.014341][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1329.038376][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1329.056041][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x796b instead [ 1329.068572][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8032 instead [ 1329.283332][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1329.589519][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1329.838696][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1329.937805][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1329.948687][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1329.981249][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1330.002823][T12165] jffs2: Further such events for this erase block will not be printed [ 1330.024540][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1330.081648][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1330.092673][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x796b instead [ 1331.659921][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x8032 instead [ 1332.092342][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1332.124418][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1332.138265][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x796b instead [ 1332.152751][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x8032 instead [ 1332.173887][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1332.203372][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1332.229610][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x796b instead [ 1332.260400][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x8032 instead [ 1332.294885][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1332.323277][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1332.343737][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x796b instead [ 1332.355750][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x8032 instead [ 1332.368608][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1332.379421][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1332.390798][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1332.408736][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x796b instead [ 1332.454423][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x8032 instead [ 1332.484445][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1332.534087][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1332.550622][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x796b instead [ 1332.565261][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x8032 instead [ 1332.579269][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1332.593298][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1332.595953][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1332.611253][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x796b instead [ 1332.622047][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x8032 instead [ 1332.642850][T12188] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 1332.652551][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1332.670152][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1332.672075][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1332.680823][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x796b instead [ 1332.711152][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x8032 instead [ 1332.734635][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1332.755232][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1332.769371][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1332.781870][ T27] usb 3-1: can't read configurations, error -71 [ 1332.794273][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x796b instead [ 1332.818557][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x8032 instead [ 1332.841694][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1332.864885][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1332.882888][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x796b instead [ 1332.896535][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x8032 instead [ 1332.907362][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1332.932674][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1332.957409][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x796b instead [ 1332.970914][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x8032 instead [ 1332.994559][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1333.015705][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1333.039544][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x796b instead [ 1333.059529][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x8032 instead [ 1333.072687][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1333.084620][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1333.096453][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x796b instead [ 1333.114004][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x8032 instead [ 1333.124910][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1333.143904][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1333.171837][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x796b instead [ 1333.184129][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x8032 instead [ 1333.195259][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1333.206502][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1333.217768][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x796b instead [ 1333.236175][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x8032 instead [ 1333.254689][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1333.273696][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1333.294474][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x796b instead [ 1333.314356][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x8032 instead [ 1333.337688][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1333.374263][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1333.418783][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x796b instead [ 1333.439860][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x8032 instead [ 1333.458154][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1333.475604][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1333.493376][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x796b instead [ 1333.519227][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x8032 instead [ 1333.540113][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1333.568089][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 1333.570885][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1333.595591][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x796b instead [ 1333.616250][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x8032 instead [ 1333.652730][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1333.669760][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1333.689009][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x796b instead [ 1333.721307][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x8032 instead [ 1333.752577][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1333.775730][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1333.809724][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x796b instead [ 1333.827494][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x8032 instead [ 1333.849883][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1333.875690][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1333.898293][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x796b instead [ 1333.914739][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x8032 instead [ 1333.932143][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1333.949452][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1333.967946][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x796b instead [ 1333.989895][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x8032 instead [ 1334.003277][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1334.029597][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1334.061996][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x796b instead [ 1334.074158][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x8032 instead [ 1334.090539][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1334.107899][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1334.118732][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x796b instead [ 1334.129494][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x8032 instead [ 1334.140830][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1334.155653][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1334.207040][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x796b instead [ 1334.250095][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x8032 instead [ 1334.283603][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1334.310077][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1334.363145][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x796b instead [ 1334.389856][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x8032 instead [ 1334.408441][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1334.429803][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1334.455586][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x796b instead [ 1334.480579][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x8032 instead [ 1334.517161][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1334.545803][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1334.558927][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x796b instead [ 1334.583591][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x8032 instead [ 1334.606717][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1334.788835][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1334.799537][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x796b instead [ 1334.813263][T12165] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x8032 instead [ 1334.843664][T12165] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1334.889720][T12165] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1335.417462][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1771'. [ 1335.533498][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 1336.439945][T12238] loop8: detected capacity change from 0 to 8 [ 1337.421403][T12238] Dev loop8: unable to read RDB block 8 [ 1337.427078][T12238] loop8: unable to read partition table [ 1337.432892][T12238] loop8: partition table beyond EOD, truncated [ 1337.439142][T12238] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1339.444081][T10475] Bluetooth: hci0: unexpected event for opcode 0x200c [ 1339.806430][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 1341.206980][T12270] loop8: detected capacity change from 0 to 8 [ 1342.196306][T12270] Dev loop8: unable to read RDB block 8 [ 1342.201920][T12270] loop8: unable to read partition table [ 1342.207868][T12270] loop8: partition table beyond EOD, truncated [ 1342.214104][T12270] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1342.993726][T12274] IPVS: starting estimator thread 0... [ 1343.035047][T12279] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1343.042233][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1343.103466][T12282] IPVS: using max 18 ests per chain, 43200 per kthread [ 1343.297602][T12284] program syz.5.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1343.973771][T12295] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1344.064810][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'. [ 1344.714155][T12304] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1345.414752][T12319] use of bytesused == 0 is deprecated and will be removed in the future, [ 1345.443856][T12319] use the actual size instead. [ 1345.584312][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 1345.755242][T12321] program syz.5.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1348.028565][T12345] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1348.287584][T12348] dummy_hcd dummy_hcd.0: remove, state 4 [ 1348.354138][T12348] usb usb1: USB disconnect, device number 1 [ 1348.430019][T12348] dummy_hcd dummy_hcd.0: stopped [ 1348.463458][T12348] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1350.690096][T12373] program syz.1.1822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.745243][T12375] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1351.162633][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 1352.416985][ T5816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1352.703424][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 1352.716474][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1352.737394][ T5816] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1352.773295][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.781373][ T5816] usb 6-1: Product: syz [ 1352.794603][ T5816] usb 6-1: Manufacturer: syz [ 1352.799278][ T5816] usb 6-1: SerialNumber: syz [ 1352.809900][ T5816] usb 6-1: config 0 descriptor?? [ 1352.821730][ T5816] hub 6-1:0.0: bad descriptor, ignoring hub [ 1352.837269][ T5816] hub: probe of 6-1:0.0 failed with error -5 [ 1352.851717][ T5816] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1353.114570][ T5816] usb 6-1: USB disconnect, device number 2 [ 1353.321445][T12393] binder: 12392:12393 ioctl c0306201 0 returned -14 [ 1353.605350][T12402] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1353.751934][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 1355.161281][ T8718] Bluetooth: hci2: Malformed Event: 0x13 [ 1355.466437][T12423] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 1355.483446][ T8718] Bluetooth: hci0: command 0x0406 tx timeout [ 1355.899060][T12429] program syz.5.1836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1355.941665][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1357.279764][T12441] binder: 12439:12441 ioctl c0306201 0 returned -14 [ 1357.990359][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 1359.376970][T12466] kvm: pic: non byte write [ 1360.034830][T12484] binder: 12483:12484 ioctl c0306201 0 returned -14 [ 1360.044946][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1361.887931][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.904757][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.374805][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 1364.928848][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 1365.104570][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880295ec800: rx timeout, send abort [ 1365.604762][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880295ecc00: rx timeout, send abort [ 1365.613328][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880295ec800: abort rx timeout. Force session deactivation [ 1366.113234][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880295ecc00: abort rx timeout. Force session deactivation [ 1367.192711][T12545] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 1368.145612][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d4d0c00: rx timeout, send abort [ 1368.645836][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d4d1000: rx timeout, send abort [ 1368.663273][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d4d0c00: abort rx timeout. Force session deactivation [ 1369.154169][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d4d1000: abort rx timeout. Force session deactivation [ 1370.654222][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d25a400: rx timeout, send abort [ 1371.154384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf98000: rx timeout, send abort [ 1371.163218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d25a400: abort rx timeout. Force session deactivation [ 1371.662656][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf98000: abort rx timeout. Force session deactivation [ 1374.271240][T12641] loop8: detected capacity change from 0 to 8 [ 1374.423504][T12641] Dev loop8: unable to read RDB block 8 [ 1374.544832][T12641] loop8: unable to read partition table [ 1374.593628][T12641] loop8: partition table beyond EOD, truncated [ 1374.687004][T12641] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1374.953846][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025664000: rx timeout, send abort [ 1375.454008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025664c00: rx timeout, send abort [ 1375.462247][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025664000: abort rx timeout. Force session deactivation [ 1375.962291][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025664c00: abort rx timeout. Force session deactivation [ 1382.983379][T12702] nfs: Deprecated parameter 'nointr' [ 1383.093360][T12702] i2c i2c-0: new_device: Missing parameters [ 1385.688985][T12735] i2c i2c-0: delete_device: Can't find device in list [ 1387.262416][ T8718] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1387.262480][ T8718] Bluetooth: unknown link type 198 [ 1387.280012][ T8718] Bluetooth: hci3: connection err: -111 [ 1389.292575][ T8718] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1390.008924][T12778] nfs: Deprecated parameter 'nointr' [ 1393.513456][ T173] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1393.733241][ T173] usb 2-1: Using ep0 maxpacket: 8 [ 1393.797997][ T173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1393.845404][ T173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1393.873756][ T173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1393.913598][ T173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.963260][ T173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1393.972413][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.262818][ T173] usb 2-1: usb_control_msg returned -32 [ 1394.270705][ T173] usbtmc 2-1:16.0: can't read capabilities [ 1394.893017][ T173] usb 2-1: USB disconnect, device number 7 [ 1401.016706][T12881] i2c i2c-0: delete_device: Can't find device in list [ 1406.654963][T12913] program syz.2.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.743687][T12918] binder: 12917:12918 ioctl c0306201 200000000680 returned -14 [ 1407.998215][T12943] i2c i2c-0: delete_device: Can't find device in list [ 1409.381864][T12961] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1409.393625][T12961] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1409.402077][T12961] CPU: 1 PID: 12961 Comm: syz.4.2000 Not tainted syzkaller #0 [ 1409.409552][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.419621][T12961] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1409.425638][T12961] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf cb 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 cb 23 fb 41 be 78 12 00 00 4d [ 1409.445287][T12961] RSP: 0018:ffffc900038877e0 EFLAGS: 00010246 [ 1409.451377][T12961] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1409.459351][T12961] RDX: ffff88802cfdbc00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1409.467329][T12961] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1409.475312][T12961] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1409.483304][T12961] R13: ffff888079c54530 R14: ffff888147add280 R15: 0000000000000000 [ 1409.491282][T12961] FS: 00007f37c2c4c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1409.500217][T12961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1409.506803][T12961] CR2: 0000000000000000 CR3: 000000005d371000 CR4: 00000000003506e0 [ 1409.514782][T12961] Call Trace: [ 1409.518068][T12961] [ 1409.521014][T12961] ? dummy_wakeup+0x270/0x270 [ 1409.525721][T12961] usb_gadget_set_selfpowered+0x6e/0x230 [ 1409.531373][T12961] composite_dev_prepare+0x2fa/0x320 [ 1409.536696][T12961] configfs_composite_bind+0xa1/0x13f0 [ 1409.542187][T12961] ? kernfs_put+0x309/0x360 [ 1409.546705][T12961] ? webusb_landingPage_store+0x1c0/0x1c0 [ 1409.552437][T12961] gadget_bind_driver+0x2b3/0x770 [ 1409.557481][T12961] ? gadget_match_driver+0x130/0x130 [ 1409.562813][T12961] really_probe+0x247/0xae0 [ 1409.567336][T12961] ? pm_runtime_barrier+0x14b/0x1c0 [ 1409.572576][T12961] __driver_probe_device+0x1f5/0x390 [ 1409.577890][T12961] driver_probe_device+0x4f/0x420 [ 1409.582957][T12961] __driver_attach+0x444/0x6d0 [ 1409.587752][T12961] bus_for_each_dev+0x235/0x2b0 [ 1409.592637][T12961] ? driver_attach+0x50/0x50 [ 1409.597270][T12961] ? bus_remove_file+0x140/0x140 [ 1409.602238][T12961] ? do_raw_spin_unlock+0x121/0x230 [ 1409.607470][T12961] bus_add_driver+0x340/0x630 [ 1409.612183][T12961] driver_register+0x23a/0x310 [ 1409.616969][T12961] usb_gadget_register_driver_owner+0xf9/0x270 [ 1409.623155][T12961] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 1409.628817][T12961] configfs_write_iter+0x312/0x400 [ 1409.633953][T12961] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 1409.639521][T12961] vfs_write+0x474/0x9a0 [ 1409.643793][T12961] ? file_end_write+0x250/0x250 [ 1409.648675][T12961] ? __fget_files+0x3fc/0x460 [ 1409.653383][T12961] ? __fdget_pos+0x2a3/0x330 [ 1409.658003][T12961] ? ksys_write+0x74/0x260 [ 1409.662449][T12961] ksys_write+0x151/0x260 [ 1409.666823][T12961] ? __ia32_sys_read+0x90/0x90 [ 1409.671615][T12961] ? lockdep_hardirqs_on+0x98/0x150 [ 1409.676863][T12961] do_syscall_64+0x55/0xb0 [ 1409.681321][T12961] ? clear_bhb_loop+0x40/0x90 [ 1409.686032][T12961] ? clear_bhb_loop+0x40/0x90 [ 1409.690737][T12961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.696661][T12961] RIP: 0033:0x7f37c1d9e0d9 [ 1409.701135][T12961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.720783][T12961] RSP: 002b:00007f37c2c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1409.729229][T12961] RAX: ffffffffffffffda RBX: 00007f37c2025fa0 RCX: 00007f37c1d9e0d9 [ 1409.737228][T12961] RDX: 000000000000000b RSI: 0000200000000740 RDI: 0000000000000003 [ 1409.745215][T12961] RBP: 00007f37c1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1409.753226][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.761212][T12961] R13: 00007f37c2026038 R14: 00007f37c2025fa0 R15: 00007ffcdf111358 [ 1409.769220][T12961] [ 1409.772271][T12961] Modules linked in: [ 1409.892338][T12961] ---[ end trace 0000000000000000 ]--- [ 1409.945816][T12961] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1409.986202][T12961] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf cb 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 cb 23 fb 41 be 78 12 00 00 4d [ 1410.032209][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f80dc00: rx timeout, send abort [ 1410.075439][T12961] RSP: 0018:ffffc900038877e0 EFLAGS: 00010246 [ 1410.118210][T12961] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1410.164805][T12961] RDX: ffff88802cfdbc00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1410.260680][T12961] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1410.281271][T12961] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1410.291128][T12961] R13: ffff888079c54530 R14: ffff888147add280 R15: 0000000000000000 [ 1410.304072][T12961] FS: 00007f37c2c4c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1410.317994][T12961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1410.326161][T12961] CR2: 0000562426333950 CR3: 000000005d371000 CR4: 00000000003506e0 [ 1410.350099][T12961] Kernel panic - not syncing: Fatal exception [ 1410.356794][T12961] Kernel Offset: disabled [ 1410.361132][T12961] Rebooting in 86400 seconds..