last executing test programs: 13m48.234712982s ago: executing program 2 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0xffffffff, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48}) memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) 13m41.112803058s ago: executing program 2 (id=605): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) 13m37.094770064s ago: executing program 2 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x4) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 13m34.793142164s ago: executing program 2 (id=611): syz_emit_vhci(0x0, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x11, 0x2, 0x0) bind$packet(r5, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002000300000005002c00000000"], 0x44}, 0x1, 0xffffffea}, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x2, 0x9808fe, 0x3}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_setup(0x1, 0x0) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000280)) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000140)={0x8, 0x1, 0xa, 0x4800}) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 13m32.27362077s ago: executing program 2 (id=615): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) truncate(&(0x7f00000000c0)='./file0\x00', 0xaf) write$binfmt_elf64(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd4\x94', 0x3a, '\x9f', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x4f, 0x43]}, 0x37) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13m30.311008512s ago: executing program 2 (id=617): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) 13m14.082456738s ago: executing program 32 (id=617): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) 27.258503376s ago: executing program 1 (id=1752): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 24.673434028s ago: executing program 1 (id=1757): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='secret\x00', &(0x7f0000000040)='AQB12/45\xc6w890123456789012B\xaf^@1\xd4\xa3\x13\xd5p\xd4w E\xf8\xfd3', 0x0) 23.154595634s ago: executing program 1 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r5, 0x0, 0x3, 0x1}}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) 17.692606795s ago: executing program 3 (id=1767): pipe(&(0x7f0000000240)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x30, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}], 0x1, 0xc8040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x3, 0x24, 0x4, @generic}], 0x8) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x20020004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4000) 15.965710157s ago: executing program 1 (id=1768): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xf2000, 0x0) mremap(&(0x7f0000579000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f00008ba000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = io_uring_setup(0x64a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setgroups(0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10, 0x3}) write$tcp_mem(r5, 0x0, 0xfffffeff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 15.884327869s ago: executing program 4 (id=1769): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, 0x0) truncate(0x0, 0xaf) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) write$binfmt_register(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.876892659s ago: executing program 3 (id=1770): socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009", 0x2d}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000000, 0x2, 0x3, 0x2, 0x1, 0x4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000000)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 14.250138228s ago: executing program 4 (id=1771): r0 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x8280b0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000500), 0xfa0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) socket(0x10, 0x3, 0x0) 12.605594388s ago: executing program 4 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r2, 0x2000000008, 0x0) 12.149949448s ago: executing program 4 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r5, 0x0, 0x3, 0x1}}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) 11.843480146s ago: executing program 3 (id=1777): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000300)={0x20000002}) r1 = epoll_create1(0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 11.166691282s ago: executing program 0 (id=1778): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 9.689651638s ago: executing program 3 (id=1779): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, 0x0) truncate(0x0, 0xaf) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) write$binfmt_register(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.940205489s ago: executing program 4 (id=1780): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x29a400) getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1d, 0x80000, 0x80000000, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x8200, &(0x7f00000001c0)={@align=0x7f, {0x9, 0xb, 0xffff, 0x4}}, 0x4, &(0x7f0000000240), 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x0, @multicast}, 0x42, {0x2, 0x0, @multicast1=0xe000cc02}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r5, 0x186a0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 7.939454309s ago: executing program 3 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r5, 0x0, 0x3, 0x1}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80b, 0x0, 0x0) 7.829679752s ago: executing program 0 (id=1782): r0 = syz_ublk_setup_io_uring(0x21, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x8280b0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000500), 0xfa0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) socket(0x10, 0x3, 0x0) 7.575322428s ago: executing program 1 (id=1783): r0 = syz_io_uring_complete(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff87) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xe01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x7f) getuid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x140, 0x0, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2d8, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) listen(r2, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x1a7, &(0x7f0000000400)={@link_local, @random="c94f2aaf35cd", @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x4, 0x199, 0x64, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x37, [@private=0xa010100, @broadcast, @multicast2, @private=0xa010102]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x31, 0x3, [0x8000], "90323e2e2ac4b19d22e84091e6264f8c2d30ccb7ce72eb4421b78efc01fca1aa57b9efe1458cdfba13fd35e896c405ec8e"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x7]}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x7f, 0x1, 0x0, 0x1, 0x4, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x4, 0x1, 0x1, 0x2, 0x4, 0x3}, 0x2, {0x4, 0x3, 0x3, 0x8, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "225673fdb7c53e37ed616b0ac9eaab2587489a5606cadb61bd4093810712b08c8c54c7d2d8ff86db728537dfbc5ad58ad8a5bd26a7b8d40629a2c198829ff79d298149e24a352557a1d298af5a49d0e6ab297b637f41e9ee69c92799e80073828300e56fa4fcb5e5c20b05be5fdf77d28f5c4a657d975cd53f1bf63c76ca96f940f78a6ac0d5c8dc4d556f15ad2ad409d8b29842120ba54874214dc921b9ad8df785b7fd3c56906ed49bbf390440bc5afc5015400ba6688e8a06ed97dbb48c85f18972c81c5199911c88cbdf195d3832603305937145d84a4f17c9c5a300d89b66412aad8e20d49abe4d2cab9b4c62da632b570b"}}}}}}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x5220, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x80010b, 0xc0840) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x0, 0x8e) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) 7.492600331s ago: executing program 0 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r2, 0x2000000008, 0x0) 6.741682609s ago: executing program 0 (id=1785): socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009", 0x2d}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000000, 0x2, 0x3, 0x2, 0x1, 0x4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000000)={0xc, r6}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 4.676715328s ago: executing program 0 (id=1786): syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.66293175s ago: executing program 4 (id=1787): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000300)={0x20000002}) r1 = epoll_create1(0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000001780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 1.6620856s ago: executing program 3 (id=1788): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 1.600540912s ago: executing program 1 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r5, 0x0, 0x3, 0x1}}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) 0s ago: executing program 0 (id=1790): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000080)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) msgget(0x1, 0x140) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r3, 0x0, 0x0, 0x2, 0x2000) msgsnd(r3, &(0x7f0000000200)={0x2}, 0x8, 0x800) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000540)=""/4096) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000000c0)='pipefs\x00', 0x81000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000140)='prev_state.function ==', 0x16) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffffd, 0x18b541) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000380)={0x3, 0x1, 0x8000000, 0x4, 0x8}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000c0000000033000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000025bd7000000000000a00040000000000000000001c00170000000000000000000000000080000000020000000400000048000100736d3300"/234], 0x15c}}, 0x80) kernel console output (not intermixed with test programs): oing over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.191290][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.204307][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.211292][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.237398][ T5786] Bluetooth: hci0: command tx timeout [ 92.242693][ T5083] Bluetooth: hci3: command tx timeout [ 92.244159][ T51] Bluetooth: hci2: command tx timeout [ 92.254618][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.375495][ T5773] hsr_slave_0: entered promiscuous mode [ 92.383590][ T5773] hsr_slave_1: entered promiscuous mode [ 92.390185][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.397932][ T5773] Cannot create hsr debugfs directory [ 92.453496][ T5776] hsr_slave_0: entered promiscuous mode [ 92.460604][ T5776] hsr_slave_1: entered promiscuous mode [ 92.469054][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.477166][ T5776] Cannot create hsr debugfs directory [ 92.844750][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.884733][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.896133][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.908786][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.988388][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.999365][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.011755][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.027665][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.117574][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.129739][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.150966][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.162473][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.275558][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.286028][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.298232][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.308994][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.358369][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.462725][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.490375][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.497800][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.510720][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.517945][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.560686][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.607442][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.637097][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.665186][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.672495][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.697554][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.704780][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.733613][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.795849][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.846493][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.853788][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.871090][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.878436][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.908172][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.972796][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.980019][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.006415][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.013671][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.143262][ T51] Bluetooth: hci1: command tx timeout [ 94.169242][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.303106][ T51] Bluetooth: hci2: command tx timeout [ 94.308585][ T51] Bluetooth: hci0: command tx timeout [ 94.316107][ T5786] Bluetooth: hci3: command tx timeout [ 94.367331][ T5775] veth0_vlan: entered promiscuous mode [ 94.408525][ T5775] veth1_vlan: entered promiscuous mode [ 94.494623][ T5775] veth0_macvtap: entered promiscuous mode [ 94.515912][ T5775] veth1_macvtap: entered promiscuous mode [ 94.552817][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.592672][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.617823][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.629159][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.640569][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.649715][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685091][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.725653][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.845050][ T5776] veth0_vlan: entered promiscuous mode [ 94.921975][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.934134][ T5776] veth1_vlan: entered promiscuous mode [ 94.945134][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.984522][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.006513][ T5774] veth0_vlan: entered promiscuous mode [ 95.037721][ T5774] veth1_vlan: entered promiscuous mode [ 95.073952][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.089799][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.123120][ T5776] veth0_macvtap: entered promiscuous mode [ 95.173662][ T5773] veth0_vlan: entered promiscuous mode [ 95.204797][ T5776] veth1_macvtap: entered promiscuous mode [ 95.244057][ T5774] veth0_macvtap: entered promiscuous mode [ 95.264891][ T5773] veth1_vlan: entered promiscuous mode [ 95.287682][ T5774] veth1_macvtap: entered promiscuous mode [ 95.348799][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.365941][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.389134][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.405627][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.431886][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.443109][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.461553][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.478621][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.516359][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.538622][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.557586][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.586146][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.603487][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.618743][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.629721][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.646346][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.698758][ T5773] veth0_macvtap: entered promiscuous mode [ 95.719126][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729096][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.738308][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.748789][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.817616][ T5847] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.839338][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.301584][ T51] Bluetooth: hci1: command tx timeout [ 96.353570][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.381820][ T51] Bluetooth: hci0: command tx timeout [ 96.387295][ T51] Bluetooth: hci3: command tx timeout [ 96.393649][ T51] Bluetooth: hci2: command tx timeout [ 96.408574][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.417771][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427653][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.468215][ T5773] veth1_macvtap: entered promiscuous mode [ 96.637136][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.666184][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.678922][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.699407][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.710534][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.726123][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.738285][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.776341][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.805332][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.820580][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.836509][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.846917][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.862927][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.883435][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.900813][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.936537][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.046940][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061244][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.077103][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.086352][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.110394][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.129806][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.160887][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.170030][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.337546][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.370471][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.535564][ T27] cfg80211: failed to load regulatory.db [ 97.695392][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.718803][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.805221][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.819386][ T5860] Zero length message leads to an empty skb [ 97.863747][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.268532][ T5871] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.392846][ T5786] Bluetooth: hci1: command tx timeout [ 98.474909][ T5083] Bluetooth: hci0: command tx timeout [ 98.480522][ T51] Bluetooth: hci3: command tx timeout [ 98.487619][ T5786] Bluetooth: hci2: command tx timeout [ 98.513762][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.837016][ T27] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 98.956125][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.074362][ T27] usb 2-1: config 0 descriptor?? [ 99.383303][ T5869] IPVS: length: 31 != 24 [ 99.407199][ T5869] loop5: detected capacity change from 0 to 7 [ 99.430779][ T27] usb 2-1: USB disconnect, device number 2 [ 100.864074][ T5900] gfs2: not a GFS2 filesystem [ 101.867763][ T5906] netlink: 108 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.455108][ T5919] nvmet: Invalid value 'tc' for trtype [ 102.488027][ T28] audit: type=1800 audit(1788232956.539:2): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="addr_trtype" dev="configfs" ino=6733 res=0 errno=0 [ 102.839146][ T28] audit: type=1800 audit(1788232956.559:3): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="addr_traddr" dev="configfs" ino=6734 res=0 errno=0 [ 103.172284][ T5919] nvmet: transport type 0 not supported [ 103.179698][ T28] audit: type=1800 audit(1788232956.559:4): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="addr_trsvcid" dev="configfs" ino=6735 res=0 errno=0 [ 104.063847][ T5935] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 104.787716][ T5935] rtrs_client L2075: : Failed to resolve address, err: -19 [ 104.800497][ T5935] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 105.013575][ T5944] netlink: 108 bytes leftover after parsing attributes in process `syz.2.31'. [ 105.811274][ T5961] gfs2: not a GFS2 filesystem [ 106.654728][ T28] audit: type=1800 audit(1788232960.749:5): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="addr_trtype" dev="configfs" ino=8005 res=0 errno=0 [ 106.657308][ T5964] nvmet_tcp: address family 255 not supported [ 106.675396][ T28] audit: type=1800 audit(1788232960.749:6): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.36" name="addr_trsvcid" dev="configfs" ino=6791 res=0 errno=0 [ 107.678289][ T5977] netlink: 108 bytes leftover after parsing attributes in process `syz.0.41'. [ 108.742174][ T5983] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 108.775423][ T5983] rtrs_client L2075: : Failed to resolve address, err: -19 [ 108.787254][ T5983] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 109.356851][ T28] audit: type=1800 audit(1788232963.449:7): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="addr_trtype" dev="configfs" ino=6840 res=0 errno=0 [ 109.393244][ T5996] nvmet_tcp: address family 255 not supported [ 109.891594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.196853][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.610028][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 111.671985][ T28] audit: type=1800 audit(1788232963.479:8): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="addr_trsvcid" dev="configfs" ino=6841 res=0 errno=0 [ 111.831714][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.860840][ T5819] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 111.885344][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.318046][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.421011][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.432715][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.580928][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.588244][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.595657][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.602586][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.609179][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.617264][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.625614][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.635157][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.646103][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.661941][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.672130][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.689786][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.725842][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.831931][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.847109][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.856281][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.865382][ T5819] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 112.872219][ T5819] input input5: Timeout waiting for response from device. [ 112.886455][ T5819] usb 3-1: USB disconnect, device number 2 [ 112.910551][ T6008] netlink: 108 bytes leftover after parsing attributes in process `syz.3.52'. [ 113.223747][ T6019] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 113.256712][ T6019] rtrs_client L2075: : Failed to resolve address, err: -19 [ 113.274127][ T6019] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 114.848908][ T28] audit: type=1800 audit(1788232968.939:9): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_trtype" dev="configfs" ino=8074 res=0 errno=0 [ 115.179331][ T6030] nvmet_tcp: address family 255 not supported [ 115.314016][ T28] audit: type=1800 audit(1788232969.269:10): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="addr_trsvcid" dev="configfs" ino=8075 res=0 errno=0 [ 117.162154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.335051][ T6050] netlink: 108 bytes leftover after parsing attributes in process `syz.3.66'. [ 121.816512][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.390029][ T23] usb 1-1: device descriptor read/all, error -71 [ 122.550101][ T6068] capability: warning: `syz.0.71' uses 32-bit capabilities (legacy support in use) [ 124.671862][ T6077] MTDSB: Device #1 doesn't appear to exist [ 124.671862][ T6077] [ 124.971883][ T6027] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.086586][ T28] audit: type=1800 audit(1788232979.179:11): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="addr_trtype" dev="configfs" ino=6941 res=0 errno=0 [ 125.124228][ T6081] nvmet_tcp: address family 255 not supported [ 125.151574][ T6027] usb 2-1: Using ep0 maxpacket: 8 [ 125.263123][ T28] audit: type=1800 audit(1788232979.209:12): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="addr_traddr" dev="configfs" ino=6942 res=0 errno=0 [ 125.510329][ T28] audit: type=1800 audit(1788232979.209:13): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="addr_trsvcid" dev="configfs" ino=6943 res=0 errno=0 [ 125.863699][ T6027] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.881792][ T6027] usb 2-1: config 0 has no interface number 0 [ 125.887980][ T6027] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.928624][ T6027] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.946801][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.975470][ T6027] usb 2-1: config 0 descriptor?? [ 126.006877][ T6027] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.331159][ T6086] sched: RT throttling activated [ 127.811636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.858129][ T6066] usb 2-1: USB disconnect, device number 3 [ 130.275461][ T6109] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 130.342817][ T6109] rtrs_client L2075: : Failed to resolve address, err: -19 [ 130.350557][ T6109] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 132.521816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 132.931631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 133.345764][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.352585][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.808123][ T6123] nvmet_tcp: address family 255 not supported [ 133.866754][ T28] audit: type=1800 audit(1788232985.889:14): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.83" name="addr_trtype" dev="configfs" ino=8189 res=0 errno=0 [ 133.977430][ T28] audit: type=1800 audit(1788232987.899:15): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.83" name="addr_traddr" dev="configfs" ino=8192 res=0 errno=0 [ 134.052785][ T28] audit: type=1800 audit(1788232987.899:16): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.83" name="addr_trsvcid" dev="configfs" ino=8193 res=0 errno=0 [ 135.491703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.621180][ T6160] gfs2: not a GFS2 filesystem [ 137.948973][ T6164] syz.3.95[6164]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 138.129600][ T6164] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.611717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.762219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 143.171738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 145.322136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 148.326329][ T6205] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 150.765745][ T6215] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 150.841323][ T6215] rtrs_client L2075: : Failed to resolve address, err: -19 [ 150.917284][ T6215] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 161.788051][ T6272] gfs2: not a GFS2 filesystem [ 169.754303][ T6334] warning: `syz.2.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.071163][ T6363] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 173.958573][ T6363] rtrs_client L2075: : Failed to resolve address, err: -19 [ 174.011748][ T6363] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 174.537999][ T6371] netlink: 108 bytes leftover after parsing attributes in process `syz.3.155'. [ 175.611902][ T5818] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 175.843344][ T5818] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.886495][ T5818] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.903524][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.911428][ T5818] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.923526][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.951980][ T5818] usb 2-1: config 0 descriptor?? [ 177.971623][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 177.991041][ T5818] usbhid: probe of 2-1:0.0 failed with error -71 [ 178.007934][ T5818] usb 2-1: USB disconnect, device number 4 [ 194.785307][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.841651][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.941867][ T6472] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 195.061980][ T6472] rtrs_client L2075: : Failed to resolve address, err: -19 [ 195.079831][ T6472] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 195.453495][ T6477] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 199.821542][ T6494] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 203.477808][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.503697][ T5822] wlan1: authenticate with 08:02:11:00:00:00 [ 203.520650][ T5822] wlan1: No legacy rates in association response [ 203.535795][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.052345][ T6526] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 212.308315][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 213.490511][ T6582] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 213.672616][ T6582] rtrs_client L2075: : Failed to resolve address, err: -19 [ 214.896670][ T6582] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 217.344999][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 217.351106][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 217.354433][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 217.822525][ T6629] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 219.418756][ T6642] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 219.532145][ T6642] rtrs_client L2075: : Failed to resolve address, err: -19 [ 219.624931][ T6642] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 225.684231][ T6678] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 230.072390][ T5083] Bluetooth: hci0: unexpected event for opcode 0x200c [ 230.446510][ T6719] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 234.152571][ T5083] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 234.161677][ T5083] Bluetooth: hci0: Injecting HCI hardware error event [ 234.169861][ T5786] Bluetooth: hci0: hardware error 0x00 [ 235.874138][ T6761] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 237.602665][ T5786] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.958750][ T6783] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 241.975099][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 242.180595][ T5779] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 242.221523][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.240549][ T5779] usb 1-1: config 0 descriptor?? [ 243.892028][ T6791] IPVS: length: 31 != 24 [ 243.913244][ T6791] loop5: detected capacity change from 0 to 7 [ 243.958644][ T9] usb 1-1: USB disconnect, device number 4 [ 246.747577][ T6810] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 247.401746][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 247.603484][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 64703, setting to 1024 [ 248.643314][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 248.771764][ T27] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 248.780904][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.023245][ T6814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.118885][ T27] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 249.167684][ T27] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 251.228981][ T23] usb 4-1: USB disconnect, device number 2 [ 251.290338][ T23] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 251.316753][ T23] spcp8x5 4-1:1.0: device disconnected [ 253.321623][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 253.539621][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 253.550709][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.645041][ T9] usb 2-1: config 0 descriptor?? [ 253.856809][ T6854] IPVS: length: 31 != 24 [ 253.874032][ T6854] loop5: detected capacity change from 0 to 7 [ 253.929754][ T23] usb 2-1: USB disconnect, device number 5 [ 254.041590][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 256.362781][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.369977][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.393497][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.421267][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.474389][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 256.501855][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.559569][ T9] usb 4-1: config 0 descriptor?? [ 257.799009][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 257.805475][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 257.863407][ T9] usb 4-1: USB disconnect, device number 3 [ 262.900544][ T6939] netlink: 'syz.0.295': attribute type 4 has an invalid length. [ 266.551966][ T6951] process 'syz.1.287' launched './file0' with NULL argv: empty string added [ 273.596936][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 273.621677][ T6994] block nbd0: not configured, cannot reconfigure [ 275.186759][ T6066] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 276.211275][ T6066] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 276.231660][ T6066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.266072][ T6066] usb 3-1: config 0 descriptor?? [ 276.490392][ T7004] IPVS: length: 31 != 24 [ 276.509110][ T7004] loop5: detected capacity change from 0 to 7 [ 276.564669][ T5818] usb 3-1: USB disconnect, device number 3 [ 280.758805][ T7035] netlink: 108 bytes leftover after parsing attributes in process `syz.3.322'. [ 286.893133][ T7072] netlink: 108 bytes leftover after parsing attributes in process `syz.0.332'. [ 288.861562][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 289.072592][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 289.082083][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.122980][ T9] usb 3-1: config 0 descriptor?? [ 289.511613][ T7078] IPVS: length: 31 != 24 [ 290.982748][ T7078] loop5: detected capacity change from 0 to 7 [ 291.034081][ T6066] usb 3-1: USB disconnect, device number 4 [ 291.923885][ T7100] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 291.997093][ T7100] rtrs_client L2075: : Failed to resolve address, err: -19 [ 292.015869][ T7100] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 295.032422][ T7114] netlink: 108 bytes leftover after parsing attributes in process `syz.0.342'. [ 297.814697][ T7129] IPVS: length: 31 != 24 [ 297.837188][ T7129] loop5: detected capacity change from 0 to 7 [ 297.861664][ T5779] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 298.088513][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.135311][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.151469][ T5779] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 298.171992][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.207035][ T5779] usb 1-1: config 0 descriptor?? [ 299.603454][ T5779] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 301.149069][ T7142] syz.0.343: attempt to access beyond end of device [ 301.149069][ T7142] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 301.445306][ T9] usb 1-1: USB disconnect, device number 5 [ 303.016255][ T7143] fido_id[7143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 304.477497][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 310.276879][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 313.351661][ T5819] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 313.538834][ T7217] IPVS: length: 31 != 24 [ 313.546477][ T7217] loop5: detected capacity change from 0 to 7 [ 313.573876][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.601642][ T5819] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.641724][ T5819] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 313.652367][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.693733][ T5819] usb 3-1: config 0 descriptor?? [ 315.252665][ T5779] usb 3-1: USB disconnect, device number 5 [ 315.568807][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 315.602963][ T7243] netlink: 'syz.1.378': attribute type 4 has an invalid length. [ 317.681029][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.687686][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.711535][ T6066] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.913965][ T6066] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 317.932921][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.014160][ T7260] gfs2: not a GFS2 filesystem [ 318.105348][ T6066] usb 4-1: config 0 descriptor?? [ 318.469404][ T7253] IPVS: length: 31 != 55320 [ 318.517431][ T7253] loop5: detected capacity change from 0 to 7 [ 318.559118][ T6066] usb 4-1: USB disconnect, device number 4 [ 319.062083][ T27] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 319.323228][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.446150][ T27] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.602267][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.677240][ T27] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 319.767855][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.942837][ T27] usb 3-1: config 0 descriptor?? [ 320.023910][ T27] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 321.182847][ T7300] gfs2: not a GFS2 filesystem [ 323.426803][ T27] usb 3-1: USB disconnect, device number 6 [ 330.851526][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 331.247969][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 331.257411][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.284132][ T9] usb 4-1: config 0 descriptor?? [ 331.503982][ T7343] gfs2: not a GFS2 filesystem [ 333.433372][ T7329] IPVS: length: 31 != 55320 [ 333.458825][ T7329] loop5: detected capacity change from 0 to 7 [ 333.536895][ T5779] usb 4-1: USB disconnect, device number 5 [ 335.591656][ T6027] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 337.455307][ T6027] usb 3-1: device not accepting address 7, error -71 [ 342.612864][ T7385] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 344.681890][ T7392] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 344.770628][ T7392] rtrs_client L2075: : Failed to resolve address, err: -19 [ 345.265348][ T7392] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 348.326495][ T7414] netlink: 168 bytes leftover after parsing attributes in process `syz.0.428'. [ 348.399209][ T6027] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 348.585018][ T6027] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 348.608718][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.739871][ T6027] usb 4-1: config 0 descriptor?? [ 349.241035][ T7405] IPVS: length: 31 != 55320 [ 349.261718][ T7405] loop5: detected capacity change from 0 to 7 [ 349.315538][ T6027] usb 4-1: USB disconnect, device number 6 [ 358.221724][ T7450] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 358.304416][ T7450] rtrs_client L2075: : Failed to resolve address, err: -19 [ 358.326113][ T7450] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 358.611702][ T7455] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 361.622601][ T7465] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 365.478121][ T7492] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 369.101689][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 369.332028][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.351569][ T23] usb 4-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.381601][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 369.398461][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 369.422867][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.447760][ T23] usb 4-1: config 0 descriptor?? [ 369.475075][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 372.266116][ T23] usb 4-1: USB disconnect, device number 7 [ 379.528274][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.534739][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.642979][ T7583] netlink: 168 bytes leftover after parsing attributes in process `syz.1.470'. [ 389.677789][ T7617] netlink: 108 bytes leftover after parsing attributes in process `syz.0.480'. [ 400.694316][ T7690] netlink: 108 bytes leftover after parsing attributes in process `syz.1.492'. [ 407.064885][ T7733] netlink: 108 bytes leftover after parsing attributes in process `syz.2.509'. [ 418.500395][ T7779] netlink: 168 bytes leftover after parsing attributes in process `syz.1.520'. [ 429.459915][ T7820] netlink: 108 bytes leftover after parsing attributes in process `syz.1.530'. [ 431.454530][ T7832] netlink: 168 bytes leftover after parsing attributes in process `syz.3.531'. [ 437.292926][ T7859] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 439.002078][ T7867] netlink: 108 bytes leftover after parsing attributes in process `syz.1.541'. [ 440.905951][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.912448][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.507520][ T7882] gfs2: not a GFS2 filesystem [ 444.068996][ T7899] netlink: 168 bytes leftover after parsing attributes in process `syz.1.549'. [ 448.982858][ T7923] gfs2: not a GFS2 filesystem [ 450.313799][ T7927] netlink: 108 bytes leftover after parsing attributes in process `syz.0.552'. [ 451.071812][ T7935] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 457.612652][ T7958] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 457.856301][ T7958] rtrs_client L2075: : Failed to resolve address, err: -19 [ 457.881704][ T7958] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 458.487470][ T7970] netlink: 168 bytes leftover after parsing attributes in process `syz.3.566'. [ 461.192324][ T7976] netlink: 108 bytes leftover after parsing attributes in process `syz.2.567'. [ 464.364537][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 465.523027][ T8009] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 467.151987][ T8009] rtrs_client L2075: : Failed to resolve address, err: -19 [ 467.159871][ T8009] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 468.242444][ T8019] netlink: 108 bytes leftover after parsing attributes in process `syz.3.578'. [ 471.281686][ T8036] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 471.505171][ T8038] netlink: 168 bytes leftover after parsing attributes in process `syz.1.583'. [ 477.482410][ T8059] netlink: 108 bytes leftover after parsing attributes in process `syz.0.589'. [ 479.881995][ T8074] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 479.947176][ T8074] rtrs_client L2075: : Failed to resolve address, err: -19 [ 480.021927][ T8074] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 485.999686][ T8105] netlink: 108 bytes leftover after parsing attributes in process `syz.1.601'. [ 486.116583][ T8109] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 488.033757][ T8118] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 495.816583][ T8151] netlink: 'syz.2.611': attribute type 4 has an invalid length. [ 496.996717][ T8155] netlink: 108 bytes leftover after parsing attributes in process `syz.0.612'. [ 502.642241][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.648797][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.832136][ T8193] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 508.390347][ T8204] netlink: 108 bytes leftover after parsing attributes in process `syz.0.624'. [ 512.761501][ T8228] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 518.665663][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 518.675084][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 518.683154][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 518.693390][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 518.703578][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 518.710957][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 520.781769][ T5786] Bluetooth: hci4: command tx timeout [ 520.827977][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 521.242460][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.250239][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.275282][ T8251] bridge_slave_0: entered allmulticast mode [ 521.361559][ T8251] bridge_slave_0: entered promiscuous mode [ 521.928217][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.052005][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.116920][ T8251] bridge_slave_1: entered allmulticast mode [ 522.175096][ T8251] bridge_slave_1: entered promiscuous mode [ 522.861443][ T5786] Bluetooth: hci4: command tx timeout [ 523.431273][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.540693][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.677378][ T8251] team0: Port device team_slave_0 added [ 523.712849][ T8251] team0: Port device team_slave_1 added [ 523.807845][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.835581][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.897793][ T8251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.925864][ T8276] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 523.947006][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.982183][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.061557][ T8251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.200607][ T8251] hsr_slave_0: entered promiscuous mode [ 524.222264][ T8251] hsr_slave_1: entered promiscuous mode [ 524.231193][ T8251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.259477][ T8251] Cannot create hsr debugfs directory [ 524.375341][ T8282] gfs2: not a GFS2 filesystem [ 524.941496][ T5786] Bluetooth: hci4: command tx timeout [ 526.874113][ T8251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 526.903745][ T8251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 526.943686][ T8251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 526.982683][ T8251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.031880][ T5786] Bluetooth: hci4: command tx timeout [ 527.308701][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.395642][ T8251] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.439294][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.446457][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.563098][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.570301][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.117239][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.385320][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.602847][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.649477][ T8251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.791150][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.862385][ T8317] netlink: 168 bytes leftover after parsing attributes in process `syz.0.652'. [ 532.894265][ T8251] veth0_vlan: entered promiscuous mode [ 532.944528][ T8251] veth1_vlan: entered promiscuous mode [ 533.303444][ T8251] veth0_macvtap: entered promiscuous mode [ 533.320947][ T8350] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 533.332108][ T8353] gfs2: not a GFS2 filesystem [ 533.356457][ T8251] veth1_macvtap: entered promiscuous mode [ 533.497872][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.541407][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.566077][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.609170][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.735998][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.771358][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.831499][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.870876][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.908341][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.117857][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.153952][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.181586][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.217327][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.241445][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.820680][ T8361] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 536.721400][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.741455][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.771406][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.803140][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.897480][ T8251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.921817][ T8251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.930604][ T8251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.961391][ T8251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.611787][ T42] hsr_slave_0: left promiscuous mode [ 537.628872][ T42] hsr_slave_1: left promiscuous mode [ 537.667410][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.681484][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.713596][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.721089][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.962108][ T42] bridge_slave_1: left allmulticast mode [ 537.967857][ T42] bridge_slave_1: left promiscuous mode [ 537.996222][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.019189][ T42] bridge_slave_0: left allmulticast mode [ 538.097454][ T42] bridge_slave_0: left promiscuous mode [ 538.132508][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.365817][ T42] veth1_macvtap: left promiscuous mode [ 538.399593][ T42] veth0_macvtap: left promiscuous mode [ 538.416061][ T42] veth1_vlan: left promiscuous mode [ 538.422470][ T42] veth0_vlan: left promiscuous mode [ 541.065157][ T42] team0 (unregistering): Port device team_slave_1 removed [ 541.130520][ T42] team0 (unregistering): Port device team_slave_0 removed [ 541.189295][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.258152][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.709567][ T42] bond0 (unregistering): Released all slaves [ 542.238504][ T8371] netlink: 168 bytes leftover after parsing attributes in process `syz.3.661'. [ 542.249125][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.396941][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.650445][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.689919][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.733086][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 544.235348][ T8413] netlink: 108 bytes leftover after parsing attributes in process `syz.4.636'. [ 548.522727][ T8459] autofs4:pid:8459:autofs_fill_super: called with bogus options [ 554.603845][ T8494] netlink: 108 bytes leftover after parsing attributes in process `syz.1.679'. [ 554.690652][ T8503] autofs4:pid:8503:autofs_fill_super: called with bogus options [ 560.886322][ T8534] netlink: 168 bytes leftover after parsing attributes in process `syz.3.696'. [ 562.113251][ T8540] netlink: 108 bytes leftover after parsing attributes in process `syz.3.697'. [ 563.070017][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 563.271221][ T8553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.698'. [ 563.429315][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.436019][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.131870][ T8563] autofs4:pid:8563:autofs_fill_super: called with bogus options [ 565.816157][ T8579] gfs2: not a GFS2 filesystem [ 569.569701][ T8593] netlink: 108 bytes leftover after parsing attributes in process `syz.4.706'. [ 569.925759][ T8606] autofs4:pid:8606:autofs_fill_super: called with bogus options [ 573.672003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.037312][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 576.814074][ T8646] netlink: 'syz.4.712': attribute type 4 has an invalid length. [ 576.851543][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 577.088127][ T23] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 577.096680][ T23] usb 2-1: config 1 has no interface number 0 [ 577.124234][ T23] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 577.161368][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.183983][ T23] usb 2-1: Product: syz [ 577.188221][ T23] usb 2-1: Manufacturer: syz [ 577.214863][ T23] usb 2-1: SerialNumber: syz [ 578.631623][ T23] usb 2-1: 3:1 : does not exist [ 578.636938][ T23] usb 2-1: 3:2 : does not exist [ 578.711538][ T23] usb 2-1: USB disconnect, device number 6 [ 578.764478][ T8244] udevd[8244]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.287659][ T8671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.719'. [ 580.858742][ T28] audit: type=1800 audit(1788233434.949:17): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.720" name="(" dev="sda1" ino=2046 res=0 errno=0 [ 580.983499][ T8680] netlink: 168 bytes leftover after parsing attributes in process `syz.1.722'. [ 581.538364][ T5786] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 581.651954][ T8692] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 582.463250][ T8697] autofs4:pid:8697:autofs_fill_super: called with bogus options [ 585.824692][ T8712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.730'. [ 586.293027][ T8732] netlink: 'syz.4.734': attribute type 4 has an invalid length. [ 588.565171][ T8746] autofs4:pid:8746:autofs_fill_super: called with bogus options [ 590.226743][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.411888][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.752652][ T8783] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 595.104154][ T8774] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 596.135091][ T5819] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 596.483396][ T5819] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 596.492915][ T5819] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 596.514397][ T5819] usb 5-1: config 4 has no interface number 0 [ 596.520616][ T5819] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 596.692641][ T5819] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 596.721396][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.729495][ T5819] usb 5-1: Product: syz [ 596.739345][ T8807] autofs4:pid:8807:autofs_fill_super: called with bogus options [ 596.771452][ T5819] usb 5-1: Manufacturer: syz [ 596.776118][ T5819] usb 5-1: SerialNumber: syz [ 598.967281][ T5819] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 599.094366][ T5819] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 599.110140][ T5819] dib0700: firmware download failed at 7 with -22 [ 600.593814][ T5819] usb 5-1: USB disconnect, device number 2 [ 601.219224][ T8833] netlink: 'syz.4.753': attribute type 4 has an invalid length. [ 605.672482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.991604][ T8403] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 606.203277][ T8403] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 606.216228][ T8403] usb 4-1: config 1 has no interface number 0 [ 606.267120][ T8403] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 606.286291][ T8403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.302289][ T8403] usb 4-1: Product: syz [ 606.306528][ T8403] usb 4-1: Manufacturer: syz [ 606.311174][ T8403] usb 4-1: SerialNumber: syz [ 606.584448][ T8403] usb 4-1: 3:1 : does not exist [ 606.589442][ T8403] usb 4-1: 3:2 : does not exist [ 606.692966][ T8403] usb 4-1: USB disconnect, device number 8 [ 607.383001][ T28] audit: type=1800 audit(1788233461.479:18): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.761" name="(" dev="sda1" ino=2046 res=0 errno=0 [ 610.235151][ T8907] gfs2: not a GFS2 filesystem [ 612.289378][ T8921] autofs4:pid:8921:autofs_fill_super: called with bogus options [ 613.820729][ T8930] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 614.621689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.785158][ T8948] autofs4:pid:8948:autofs_fill_super: called with bogus options [ 619.744503][ T8976] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 624.862879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.901806][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.908171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.772888][ T9020] autofs4:pid:9020:autofs_fill_super: called with bogus options [ 627.561058][ T9030] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 627.672264][ T9035] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 630.326263][ T9056] autofs4:pid:9056:autofs_fill_super: called with bogus options [ 632.707937][ T9070] netlink: 'syz.1.800': attribute type 4 has an invalid length. [ 632.775166][ T8403] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 633.028248][ T8403] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 634.506557][ T8403] usb 1-1: config 1 has no interface number 0 [ 634.651511][ T8403] usb 1-1: string descriptor 0 read error: -71 [ 634.657885][ T8403] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 634.667029][ T8403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.681954][ T8403] usb 1-1: can't set config #1, error -71 [ 634.701672][ T8403] usb 1-1: USB disconnect, device number 6 [ 635.724167][ T9079] autofs4:pid:9079:autofs_fill_super: called with bogus options [ 636.941609][ T9081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 642.214759][ T9112] netlink: 168 bytes leftover after parsing attributes in process `syz.1.802'. [ 642.708013][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 643.541413][ T6027] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 644.192143][ T6027] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 645.201387][ T6027] usb 1-1: config 1 has no interface number 0 [ 645.393070][ T6027] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 645.415308][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.457521][ T6027] usb 1-1: Product: syz [ 645.501452][ T6027] usb 1-1: Manufacturer: syz [ 645.506145][ T6027] usb 1-1: SerialNumber: syz [ 645.847749][ T9131] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 645.961981][ T6027] usb 1-1: 3:1 : does not exist [ 645.967035][ T6027] usb 1-1: 3:2 : does not exist [ 646.071622][ T6027] usb 1-1: USB disconnect, device number 7 [ 646.136041][ T8244] udevd[8244]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.172859][ T9138] autofs4:pid:9138:autofs_fill_super: called with bogus options [ 648.861707][ T5779] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 649.691662][ T5779] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 649.724066][ T9152] syz.3.821: attempt to access beyond end of device [ 649.724066][ T9152] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 649.753303][ T5779] usb 2-1: config 0 has no interface number 0 [ 649.759582][ T5779] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.797888][ T5779] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 649.807216][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.844738][ T5779] usb 2-1: Product: syz [ 649.849233][ T5779] usb 2-1: Manufacturer: syz [ 649.871754][ T5779] usb 2-1: SerialNumber: syz [ 649.896681][ T5779] usb 2-1: config 0 descriptor?? [ 649.926380][ T5779] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 650.891639][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 651.484215][ T9168] netlink: 'syz.3.824': attribute type 4 has an invalid length. [ 651.586333][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 652.284024][ T9] usb 2-1: USB disconnect, device number 7 [ 652.333808][ T9] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 652.774080][ T9179] autofs4:pid:9179:autofs_fill_super: called with bogus options [ 654.352835][ T9190] netlink: 168 bytes leftover after parsing attributes in process `syz.3.832'. [ 659.071496][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 659.294469][ T5818] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 659.309064][ T5818] usb 4-1: config 0 has no interface number 0 [ 660.251315][ T5818] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.264694][ T5818] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 660.281771][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.289835][ T5818] usb 4-1: Product: syz [ 660.356080][ T5818] usb 4-1: Manufacturer: syz [ 660.360761][ T5818] usb 4-1: SerialNumber: syz [ 660.421929][ T5818] usb 4-1: config 0 descriptor?? [ 660.493068][ T5818] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 661.803322][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 662.685209][ T5818] usb 4-1: USB disconnect, device number 9 [ 662.701983][ T5818] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 662.904054][ T9217] autofs4:pid:9217:autofs_fill_super: called with bogus options [ 663.232541][ T9221] netlink: 168 bytes leftover after parsing attributes in process `syz.3.841'. [ 672.666203][ T9261] gfs2: not a GFS2 filesystem [ 673.827795][ T9268] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 673.871534][ T9268] rtrs_client L2075: : Failed to resolve address, err: -19 [ 673.879387][ T9268] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 675.399198][ T9277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 676.062013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.804208][ T9285] netlink: 168 bytes leftover after parsing attributes in process `syz.4.850'. [ 681.365550][ T9308] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 681.748573][ T9317] gfs2: not a GFS2 filesystem [ 682.301481][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 682.850555][ T9324] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 682.882413][ T9324] rtrs_client L2075: : Failed to resolve address, err: -19 [ 682.890128][ T9324] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 683.261098][ T9329] netlink: 168 bytes leftover after parsing attributes in process `syz.1.873'. [ 684.879455][ T9336] netlink: 168 bytes leftover after parsing attributes in process `syz.1.867'. [ 686.306335][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.312761][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.687145][ T9350] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 686.771698][ T9350] rtrs_client L2075: : Failed to resolve address, err: -19 [ 686.790544][ T9350] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 687.078211][ T9358] netlink: 168 bytes leftover after parsing attributes in process `syz.4.876'. [ 689.114213][ T9356] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 689.250720][ T9370] netlink: 168 bytes leftover after parsing attributes in process `syz.3.879'. [ 690.937898][ T9385] netlink: 168 bytes leftover after parsing attributes in process `syz.3.886'. [ 693.248424][ T9403] netlink: 168 bytes leftover after parsing attributes in process `syz.0.889'. [ 696.661899][ T9424] netlink: 168 bytes leftover after parsing attributes in process `syz.1.895'. [ 696.882261][ T9426] syz.4.893: attempt to access beyond end of device [ 696.882261][ T9426] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 698.776716][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 700.239625][ T9450] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 700.293561][ T9450] rtrs_client L2075: : Failed to resolve address, err: -19 [ 700.311831][ T9450] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 701.001495][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 701.245484][ T5819] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 701.332649][ T5819] usb 5-1: config 1 has no interface number 0 [ 701.554626][ T5819] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 701.586229][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.616291][ T5819] usb 5-1: Product: syz [ 701.639803][ T5819] usb 5-1: Manufacturer: syz [ 701.659605][ T5819] usb 5-1: SerialNumber: syz [ 703.784482][ T9474] netlink: 168 bytes leftover after parsing attributes in process `syz.0.906'. [ 703.954362][ T5819] usb 5-1: 3:1 : does not exist [ 703.959330][ T5819] usb 5-1: 3:2 : does not exist [ 704.111743][ T5819] usb 5-1: USB disconnect, device number 3 [ 704.244838][ T8244] udevd[8244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.883784][ T9482] syz.4.908: attempt to access beyond end of device [ 704.883784][ T9482] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 705.182803][ T9491] netlink: 168 bytes leftover after parsing attributes in process `syz.3.909'. [ 706.039420][ T9500] autofs4:pid:9500:autofs_fill_super: called with bogus options [ 706.381521][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 706.716341][ T9508] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 706.787048][ T9508] rtrs_client L2075: : Failed to resolve address, err: -19 [ 706.831477][ T9508] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 711.091428][ T8403] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 711.188707][ T9528] netlink: 168 bytes leftover after parsing attributes in process `syz.1.919'. [ 711.350987][ T8403] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 711.362507][ T8403] usb 5-1: config 0 has no interface number 0 [ 711.379994][ T8403] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.423383][ T8403] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 711.441358][ T8403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.474264][ T8403] usb 5-1: Product: syz [ 711.478581][ T8403] usb 5-1: Manufacturer: syz [ 711.493962][ T8403] usb 5-1: SerialNumber: syz [ 711.506568][ T8403] usb 5-1: config 0 descriptor?? [ 711.638219][ T8403] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 711.762144][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 711.826148][ T8403] usb 5-1: USB disconnect, device number 4 [ 711.980772][ T8403] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 712.084437][ T27] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 712.113073][ T27] usb 4-1: config 1 has no interface number 0 [ 712.140162][ T27] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 712.171354][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.193924][ T27] usb 4-1: Product: syz [ 712.198606][ T27] usb 4-1: Manufacturer: syz [ 712.227111][ T27] usb 4-1: SerialNumber: syz [ 712.359210][ T9534] netlink: 168 bytes leftover after parsing attributes in process `syz.1.920'. [ 712.480198][ T27] usb 4-1: 3:1 : does not exist [ 712.492335][ T27] usb 4-1: 3:2 : does not exist [ 712.564575][ T27] usb 4-1: USB disconnect, device number 10 [ 712.614517][ T8244] udevd[8244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.734353][ T9538] autofs4:pid:9538:autofs_fill_super: called with bogus options [ 713.740013][ T9548] syz.4.923: attempt to access beyond end of device [ 713.740013][ T9548] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 715.719050][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 717.822765][ T9570] netlink: 168 bytes leftover after parsing attributes in process `syz.4.929'. [ 719.080590][ T9578] autofs4:pid:9578:autofs_fill_super: called with bogus options [ 719.476518][ T9587] netlink: 168 bytes leftover after parsing attributes in process `syz.1.933'. [ 720.711399][ T8403] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 721.053560][ T8403] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 721.071432][ T8403] usb 1-1: config 1 has no interface number 0 [ 721.084592][ T8403] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 721.111447][ T8403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.129892][ T8403] usb 1-1: Product: syz [ 721.134376][ T8403] usb 1-1: Manufacturer: syz [ 721.139021][ T8403] usb 1-1: SerialNumber: syz [ 721.378274][ T8403] usb 1-1: 3:1 : does not exist [ 721.419160][ T8403] usb 1-1: 3:2 : does not exist [ 721.531753][ T8403] usb 1-1: USB disconnect, device number 8 [ 722.266417][ T9598] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 724.900165][ T9616] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 724.962710][ T9616] rtrs_client L2075: : Failed to resolve address, err: -19 [ 724.994119][ T9616] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 725.379870][ T9624] netlink: 168 bytes leftover after parsing attributes in process `syz.4.944'. [ 727.686161][ T9636] syz.3.945: attempt to access beyond end of device [ 727.686161][ T9636] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 731.176233][ T9658] overlayfs: conflicting options: nfs_export=on,index=off [ 732.824380][ T9662] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 732.991860][ T9665] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 733.102734][ T9665] rtrs_client L2075: : Failed to resolve address, err: -19 [ 733.319512][ T9665] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 738.392922][ T9690] netlink: 168 bytes leftover after parsing attributes in process `syz.3.960'. [ 739.492791][ T9694] netlink: 168 bytes leftover after parsing attributes in process `syz.3.961'. [ 742.853774][ T9715] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 742.893837][ T9715] rtrs_client L2075: : Failed to resolve address, err: -19 [ 742.919083][ T9715] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 747.880408][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.886784][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.897851][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.041551][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.006376][ T9742] netlink: 168 bytes leftover after parsing attributes in process `syz.0.969'. [ 751.230771][ T9751] netlink: 168 bytes leftover after parsing attributes in process `syz.3.971'. [ 751.600388][ T9102] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 756.376545][ T9784] netlink: 168 bytes leftover after parsing attributes in process `syz.4.983'. [ 757.091510][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 757.344500][ T27] usb 1-1: Dual-Role OTG device on HNP port [ 757.410215][ T27] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 757.421277][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.452035][ T9795] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 757.486408][ T27] gspca_main: spca501-2.14.0 probing 0000:0000 [ 757.501109][ T9795] rtrs_client L2075: : Failed to resolve address, err: -19 [ 757.521704][ T9795] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 757.537891][ T27] gspca_spca501: reg write: error -32 [ 757.559438][ T27] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 757.592105][ T27] spca501: probe of 1-1:1.0 failed with error -22 [ 757.622054][ T9102] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 757.632351][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 760.240798][ T9811] netlink: 168 bytes leftover after parsing attributes in process `syz.0.990'. [ 761.910512][ T9826] overlayfs: conflicting options: nfs_export=on,index=off [ 762.383149][ T9829] netlink: 168 bytes leftover after parsing attributes in process `syz.3.995'. [ 763.507511][ T9840] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 763.522834][ T9840] rtrs_client L2075: : Failed to resolve address, err: -19 [ 763.571614][ T9840] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 765.802988][ T9862] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1004'. [ 767.308809][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.412440][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.185751][ T9874] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1008'. [ 769.260447][ T9882] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 769.312782][ T9882] rtrs_client L2075: : Failed to resolve address, err: -19 [ 769.320577][ T9882] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 774.088720][ T9925] overlayfs: conflicting options: nfs_export=on,index=off [ 774.107835][ T9914] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1017'. [ 776.193556][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.279083][ T9935] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1021'. [ 776.641897][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.654613][ T9965] overlayfs: conflicting options: nfs_export=on,index=off [ 783.501444][ T5819] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 783.793800][ T5819] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 783.921459][ T5819] usb 4-1: config 1 has no interface number 0 [ 783.935732][ T5819] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 783.961774][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.969867][ T5819] usb 4-1: Product: syz [ 784.031410][ T5819] usb 4-1: Manufacturer: syz [ 784.041341][ T5819] usb 4-1: SerialNumber: syz [ 784.324108][ T5819] usb 4-1: 3:1 : does not exist [ 784.329079][ T5819] usb 4-1: 3:2 : does not exist [ 784.492192][ T5819] usb 4-1: USB disconnect, device number 11 [ 784.564638][ T9568] udevd[9568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 790.434485][T10000] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1028'. [ 791.301747][ T5779] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 791.485189][ T5779] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 791.500060][ T5779] usb 2-1: config 0 has no interface number 0 [ 791.519295][ T5779] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.535211][ T8403] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 791.576746][ T5779] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 791.601551][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.636122][ T5779] usb 2-1: Product: syz [ 791.640564][ T5779] usb 2-1: Manufacturer: syz [ 791.645870][ T5779] usb 2-1: SerialNumber: syz [ 791.662407][ T5779] usb 2-1: config 0 descriptor?? [ 791.683423][ T5779] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 791.754268][ T8403] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.773208][ T8403] usb 4-1: config 1 has no interface number 0 [ 791.793589][ T8403] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 791.806300][ T8403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.837268][ T8403] usb 4-1: Product: syz [ 791.869202][ T8403] usb 4-1: Manufacturer: syz [ 791.901571][ T8403] usb 4-1: SerialNumber: syz [ 791.913464][ T5779] usb 2-1: USB disconnect, device number 8 [ 791.955522][ T5779] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 792.293205][T10017] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1040'. [ 792.407790][ T8403] usb 4-1: 3:1 : does not exist [ 793.737682][ T8403] usb 4-1: 3:2 : does not exist [ 793.778960][ T8403] usb 4-1: USB disconnect, device number 12 [ 793.817632][ T9568] udevd[9568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 795.748800][T10035] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1053'. [ 796.158387][T10049] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1049'. [ 800.117819][T10071] overlayfs: conflicting options: nfs_export=on,index=off [ 800.462753][T10074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1064'. [ 801.287225][T10085] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1065'. [ 801.911913][T10088] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR [ 802.271563][ T5819] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 803.642457][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 803.702059][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 804.414549][ T5819] usb 4-1: device descriptor read/all, error -71 [ 804.933021][T10116] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1072'. [ 805.398793][T10122] overlayfs: conflicting options: nfs_export=on,index=off [ 808.758006][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.204355][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.210897][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.222666][T10137] overlayfs: conflicting options: nfs_export=on,index=off [ 809.833854][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.139352][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.191745][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.464069][T10157] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1075'. [ 815.233039][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.598521][T10170] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop4": -EINTR [ 817.463660][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.201903][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 819.421827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.830239][T10205] overlayfs: conflicting options: nfs_export=on,index=off [ 821.277732][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.393973][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.452531][T10218] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 822.802504][T10222] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 826.611488][ T5786] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 827.506768][T10250] overlayfs: conflicting options: nfs_export=on,index=off [ 833.205697][T10277] overlayfs: conflicting options: nfs_export=on,index=off [ 837.543014][T10310] overlayfs: conflicting options: nfs_export=on,index=off [ 840.302655][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 842.086512][T10344] netlink: 'syz.0.1130': attribute type 4 has an invalid length. [ 844.805267][T10362] overlayfs: conflicting options: nfs_export=on,index=off [ 846.176054][T10374] overlayfs: conflicting options: nfs_export=on,index=off [ 847.888372][T10382] netlink: 'syz.1.1140': attribute type 4 has an invalid length. [ 849.885755][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.566506][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.747810][T10410] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 857.690761][T10428] overlayfs: conflicting options: nfs_export=on,index=off [ 860.089301][T10438] overlayfs: conflicting options: nfs_export=on,index=off [ 860.657486][T10440] netlink: 'syz.4.1150': attribute type 4 has an invalid length. [ 860.919608][T10442] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 860.935636][T10442] rtrs_client L2075: : Failed to resolve address, err: -19 [ 860.952917][T10442] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 861.737910][T10455] syz.3.1158: attempt to access beyond end of device [ 861.737910][T10455] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 863.998386][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 864.130065][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.043422][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.367765][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 867.164191][T10486] overlayfs: conflicting options: nfs_export=on,index=off [ 868.322108][T10490] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 868.357126][T10490] rtrs_client L2075: : Failed to resolve address, err: -19 [ 868.381735][T10490] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 868.521337][ T9831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 868.722341][ T9831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.774116][ T9831] usb 5-1: config 0 has no interfaces? [ 868.841006][ T9831] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 868.862174][ T9831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.907075][ T9831] usb 5-1: Product: syz [ 868.922108][ T9831] usb 5-1: Manufacturer: syz [ 868.941407][ T9831] usb 5-1: SerialNumber: syz [ 868.985325][T10500] netlink: 'syz.0.1165': attribute type 4 has an invalid length. [ 869.053674][ T9831] usb 5-1: config 0 descriptor?? [ 869.356844][ T9831] usb 5-1: USB disconnect, device number 5 [ 870.627503][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.633960][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.768380][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.399495][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.043721][T10526] netlink: 'syz.4.1179': attribute type 4 has an invalid length. [ 877.122038][T10537] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 877.198005][T10537] rtrs_client L2075: : Failed to resolve address, err: -19 [ 877.245275][T10537] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 877.366476][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.408687][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.539516][T10548] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 882.365266][T10571] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 882.848963][T10584] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 882.875820][T10584] rtrs_client L2075: : Failed to resolve address, err: -19 [ 882.913828][T10584] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 883.149330][T10590] netlink: 'syz.3.1197': attribute type 4 has an invalid length. [ 883.402747][ T6027] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 885.286033][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 885.406590][ T6027] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.461775][ T6027] usb 2-1: config 0 has no interfaces? [ 885.528943][ T6027] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 885.596216][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.659652][ T6027] usb 2-1: Product: syz [ 885.698156][ T6027] usb 2-1: Manufacturer: syz [ 885.730550][ T6027] usb 2-1: SerialNumber: syz [ 885.805970][ T6027] usb 2-1: config 0 descriptor?? [ 886.265085][ T6066] usb 2-1: USB disconnect, device number 9 [ 887.513060][T10622] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 887.784034][T10627] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 887.908160][T10627] rtrs_client L2075: : Failed to resolve address, err: -19 [ 887.976728][T10627] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 888.212492][T10630] netlink: 'syz.3.1209': attribute type 4 has an invalid length. [ 889.151657][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 895.462781][T10660] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop0": -EINTR [ 896.251369][ T6066] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 897.029088][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 898.113246][ T6066] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 898.142179][ T6066] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.169891][ T6066] usb 2-1: config 0 has no interface number 0 [ 898.210078][ T6066] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 898.219973][ T6066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.239787][ T6066] usb 2-1: Product: syz [ 898.244945][ T6066] usb 2-1: Manufacturer: syz [ 898.249615][ T6066] usb 2-1: SerialNumber: syz [ 898.275840][ T6066] usb 2-1: config 0 descriptor?? [ 898.307527][ T6066] yurex 2-1:0.50: Could not find endpoints [ 899.919453][T10689] netlink: 'syz.4.1221': attribute type 4 has an invalid length. [ 899.962213][ T5819] usb 2-1: USB disconnect, device number 10 [ 901.170449][T10700] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1226'. [ 901.401816][T10702] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 901.435825][T10702] rtrs_client L2075: : Failed to resolve address, err: -19 [ 901.461722][T10702] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 903.211580][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.234561][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.252635][T10718] netlink: 'syz.1.1233': attribute type 4 has an invalid length. [ 904.633399][T10726] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1236'. [ 905.831708][T10730] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 905.870217][T10730] rtrs_client L2075: : Failed to resolve address, err: -19 [ 905.884546][T10730] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 911.972586][T10759] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1247'. [ 914.573135][T10772] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1245'. [ 918.609996][T10791] overlayfs: conflicting options: nfs_export=on,index=off [ 921.968642][T10804] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1257'. [ 922.906007][T10810] syz.0.1252: attempt to access beyond end of device [ 922.906007][T10810] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 927.841490][T10843] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1266'. [ 928.964861][T10846] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1268'. [ 929.991469][T10851] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1263'. [ 930.419091][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.488123][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.525005][T10856] IPVS: length: 31 != 24 [ 930.562698][T10860] overlayfs: conflicting options: nfs_export=on,index=off [ 930.570372][T10856] loop5: detected capacity change from 0 to 7 [ 932.671833][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.678207][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.382437][T10876] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1277'. [ 935.747605][T10897] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 935.850160][T10897] rtrs_client L2075: : Failed to resolve address, err: -19 [ 935.859244][T10897] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 938.269658][T10909] overlayfs: conflicting options: nfs_export=on,index=off [ 939.045679][T10912] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1285'. [ 942.826382][T10923] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 943.950186][T10923] rtrs_client L2075: : Failed to resolve address, err: -19 [ 943.969048][T10923] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 949.165616][T10951] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1298'. [ 949.497226][T10953] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1293'. [ 953.767217][T10971] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 953.794224][T10971] rtrs_client L2075: : Failed to resolve address, err: -19 [ 953.802298][T10971] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 957.993145][T10986] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1307'. [ 958.519823][T10994] syz.3.1310: attempt to access beyond end of device [ 958.519823][T10994] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 960.770485][ T9102] Bluetooth: hci4: command 0x0406 tx timeout [ 962.688474][T11017] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1315'. [ 964.204449][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.167802][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.515557][ T9831] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 966.713541][ T9831] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 966.731422][ T9831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.792380][ T9831] usb 4-1: config 0 descriptor?? [ 967.023234][T11032] IPVS: length: 31 != 24 [ 967.049145][T11032] loop5: detected capacity change from 0 to 7 [ 968.819083][ T9831] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 968.835959][ T9831] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 968.859798][ T9831] [drm:udl_init] *ERROR* Selecting channel failed [ 968.970180][ T9831] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 969.051613][ T9831] [drm] Initialized udl on minor 2 [ 969.074962][ T9831] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 969.107165][ T9831] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 969.140027][ T5819] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 969.148677][ T9831] usb 4-1: USB disconnect, device number 15 [ 969.164536][ T5819] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 970.451360][ T9102] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 977.940116][T11092] syz.3.1329: attempt to access beyond end of device [ 977.940116][T11092] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 980.063771][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 984.641429][T11132] overlayfs: conflicting options: nfs_export=on,index=off [ 987.448394][T11144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 987.721754][ T5786] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 993.782100][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.788488][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.126748][T11173] overlayfs: conflicting options: nfs_export=on,index=off [ 994.636080][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 996.905240][T11189] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 996.978981][T11189] rtrs_client L2075: : Failed to resolve address, err: -19 [ 997.031352][T11189] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1003.111071][T11211] overlayfs: conflicting options: nfs_export=on,index=off [ 1009.258543][T11241] overlayfs: conflicting options: nfs_export=on,index=off [ 1010.126470][T11246] overlayfs: conflicting options: nfs_export=on,index=off [ 1012.453784][T11262] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1012.632561][T11262] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1014.561577][T11262] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1015.852309][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.506088][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.070936][T11279] overlayfs: conflicting options: nfs_export=on,index=off [ 1020.202561][T11293] overlayfs: conflicting options: nfs_export=on,index=off [ 1020.722228][T11301] syz.0.1387: attempt to access beyond end of device [ 1020.722228][T11301] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1023.058323][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1024.074851][ T6027] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1024.271218][ T6027] usb 4-1: Using ep0 maxpacket: 8 [ 1024.292397][ T6027] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1024.306343][ T6027] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1024.316843][ T6027] usb 4-1: config 0 has no interface number 0 [ 1024.343999][ T6027] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1024.367871][ T6027] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1024.396938][ T6027] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1024.414371][ T6027] usb 4-1: language id specifier not provided by device, defaulting to English [ 1024.435928][ T6027] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1024.445457][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1024.470001][ T6027] usb 4-1: Product: syz [ 1024.484339][ T6027] usb 4-1: Manufacturer: 奍ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚ؐ鐳똗⊇ͳ䭔妸䏑芑㝈⁨ꋏ횷풋ⷦၘ鑲쌯嘝玜帕⃢槴灅캟蹝ᓩﮠ蜝턷觙堆 [ 1024.519271][ T6027] usb 4-1: SerialNumber: syz [ 1024.541895][ T6027] usb 4-1: config 0 descriptor?? [ 1025.278816][T11332] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1026.585557][T11324] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1393'. [ 1026.639944][ T6027] input: 奍ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚ؐ鐳똗⊇ͳ䭔妸䏑芑㝈⁨ꋏ횷풋ⷦၘ鑲쌯嘝玜帕⃢槴灅캟蹝ᓩﮠ蜝턷觙 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 1026.673299][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.806929][ T6027] usb 4-1: USB disconnect, device number 16 [ 1026.831406][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.953246][T10673] udevd[10673]: Error opening device "/dev/input/event4": No such file or directory [ 1027.201796][T11339] overlayfs: conflicting options: nfs_export=on,index=off [ 1027.761410][T10673] udevd[10673]: Unable to EVIOCGABS device "/dev/input/event4" [ 1027.769207][T10673] udevd[10673]: Unable to EVIOCGABS device "/dev/input/event4" [ 1033.508661][T11376] overlayfs: conflicting options: nfs_export=on,index=off [ 1036.573268][T11391] syz.0.1405 uses obsolete (PF_INET,SOCK_PACKET) [ 1036.721486][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.048163][T11390] veth0_to_bridge: entered allmulticast mode [ 1037.088512][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.662611][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.081758][T11407] overlayfs: conflicting options: nfs_export=on,index=off [ 1039.490725][T11415] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1416'. [ 1039.581749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.762141][T11429] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop3": -EINTR [ 1041.261425][ T5786] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1042.903532][T11452] nvme_fcloop: unknown parameter or missing value 'ro' [ 1043.262275][T11454] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1428'. [ 1044.357474][T11463] overlayfs: conflicting options: nfs_export=on,index=off [ 1045.862744][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.882551][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.133236][T11485] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1438'. [ 1051.837847][T11501] nvme_fcloop: unknown parameter or missing value 'ro' [ 1054.537897][T11519] syz.3.1446: attempt to access beyond end of device [ 1054.537897][T11519] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1054.676216][T11530] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1449'. [ 1054.946221][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.952912][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.953701][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1058.320147][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 1058.654142][T10673] udevd[10673]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1058.698441][T10691] udevd[10691]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1060.189017][T11567] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1060.274236][T11564] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1459'. [ 1060.323784][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.399623][T11567] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1060.411384][T11567] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1060.531458][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.910550][ T8288] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1066.326450][T11592] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1468'. [ 1069.741297][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1069.863392][T11602] syz.0.1469: attempt to access beyond end of device [ 1069.863392][T11602] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1070.619521][T11619] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1071.319098][T11619] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1071.355483][T11619] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1071.607121][T11623] binder: BINDER_SET_CONTEXT_MGR already set [ 1071.615569][T11623] binder: 11621:11623 ioctl 4018620d 200000004a80 returned -16 [ 1072.692104][T11630] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1083.441626][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1084.111371][ T8288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1084.313275][ T8288] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1084.334132][ T8288] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1084.346474][ T8288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.381580][ T8288] usb 5-1: Product: syz [ 1084.395975][ T8288] usb 5-1: Manufacturer: syz [ 1084.400640][ T8288] usb 5-1: SerialNumber: syz [ 1084.456890][ T8288] usb 5-1: config 0 descriptor?? [ 1084.701017][ T8288] usb 5-1: USB disconnect, device number 6 [ 1091.405318][T11683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1492'. [ 1091.618606][T11663] udevd[11663]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1091.701485][T11665] udevd[11665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1097.021276][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1097.168753][T11708] syz.3.1494: attempt to access beyond end of device [ 1097.168753][T11708] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1097.337839][T11711] overlayfs: conflicting options: nfs_export=on,index=off [ 1101.950842][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1504'. [ 1102.418535][T11665] udevd[11665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1102.574523][T11665] udevd[11665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1102.981193][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1103.203017][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1103.241647][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1103.256286][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.291623][T11753] syz.3.1507: attempt to access beyond end of device [ 1103.291623][T11753] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1103.321613][ T9] usb 2-1: Product: syz [ 1103.325856][ T9] usb 2-1: Manufacturer: syz [ 1103.330522][ T9] usb 2-1: SerialNumber: syz [ 1103.346030][ T9] usb 2-1: config 0 descriptor?? [ 1105.018558][ T27] usb 2-1: USB disconnect, device number 12 [ 1105.199765][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1106.141646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.156871][T11789] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1108.211423][T11789] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1109.421846][T11799] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1111.628844][T11807] overlayfs: conflicting options: nfs_export=on,index=off [ 1117.528729][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.535255][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.451590][T11827] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1523'. [ 1121.526326][T11852] overlayfs: conflicting options: nfs_export=on,index=off [ 1128.902521][T11872] syz.4.1525: attempt to access beyond end of device [ 1128.902521][T11872] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1129.372784][T11885] overlayfs: conflicting options: nfs_export=on,index=off [ 1130.706566][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1132.613966][T11900] PKCS7: Unknown OID: [4] 0.0 [ 1132.619063][T11900] PKCS7: Only support pkcs7_signedData type [ 1132.677880][T11900] xt_policy: output policy not valid in PREROUTING and INPUT [ 1135.518698][T11913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1544'. [ 1137.579358][T11923] syz.1.1546: attempt to access beyond end of device [ 1137.579358][T11923] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1138.200720][T11937] overlayfs: conflicting options: nfs_export=on,index=off [ 1140.396887][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1142.231640][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1142.474394][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1142.509337][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1142.528892][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.572887][ T9] usb 2-1: Product: syz [ 1142.577225][ T9] usb 2-1: Manufacturer: syz [ 1142.591440][ T9] usb 2-1: SerialNumber: syz [ 1142.605147][ T9] usb 2-1: config 0 descriptor?? [ 1142.836374][ T8288] usb 2-1: USB disconnect, device number 13 [ 1142.997308][T11949] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1143.118906][T11949] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1143.127207][T11949] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1146.868465][T11970] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop3": -EINTR [ 1148.662838][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1149.067906][T11989] overlayfs: conflicting options: nfs_export=on,index=off [ 1152.150170][T12002] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1152.244888][T12002] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1152.260393][T12002] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1155.088565][T12026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1570'. [ 1156.652936][T12032] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1158.782845][T12043] overlayfs: conflicting options: nfs_export=on,index=off [ 1161.464414][T12047] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1161.485544][T12047] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1161.523490][T12047] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1161.792108][T12058] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1578'. [ 1162.462800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.473241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.007223][T12069] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 1164.071357][T12081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1165.011130][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1167.672332][T12096] overlayfs: conflicting options: nfs_export=on,index=off [ 1168.457361][T12101] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1168.657061][T12101] rtrs_client L2075: : Failed to resolve address, err: -19 [ 1168.671475][T12101] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1172.874711][T12122] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1176.723203][T12135] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1591'. [ 1177.089792][T12144] overlayfs: conflicting options: nfs_export=on,index=off [ 1179.288535][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.295438][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.991405][ T8288] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1186.973116][T12184] overlayfs: conflicting options: nfs_export=on,index=off [ 1187.948388][T12193] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1607'. [ 1188.502951][T12197] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1608'. [ 1189.393046][T12205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.403797][T12205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.237400][T12232] syz.4.1619: attempt to access beyond end of device [ 1196.237400][T12232] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1198.422081][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1198.646715][T12250] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1621'. [ 1198.691241][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1199.056442][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1199.102213][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1199.139043][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.178653][ T9] usb 5-1: Product: syz [ 1199.203673][ T9] usb 5-1: Manufacturer: syz [ 1199.237581][ T9] usb 5-1: SerialNumber: syz [ 1199.329827][ T9] usb 5-1: config 0 descriptor?? [ 1199.442329][T12259] overlayfs: conflicting options: nfs_export=on,index=off [ 1199.572450][ T9] usb 5-1: USB disconnect, device number 7 [ 1205.594631][T12279] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1628'. [ 1209.421682][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1209.464963][T12291] syz.1.1629: attempt to access beyond end of device [ 1209.464963][T12291] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1210.111199][ T27] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1210.324060][ T27] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 1210.332521][ T27] usb 2-1: config 1 has no interface number 0 [ 1210.338692][ T27] usb 2-1: config 1 interface 82 has no altsetting 0 [ 1210.381488][ T27] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 1210.411466][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.419590][ T27] usb 2-1: Product: syz [ 1210.441104][ T27] usb 2-1: Manufacturer: syz [ 1210.445894][ T27] usb 2-1: SerialNumber: syz [ 1212.766067][ T27] hub 2-1:1.82: bad descriptor, ignoring hub [ 1212.789465][ T27] hub: probe of 2-1:1.82 failed with error -5 [ 1212.816779][ T27] sierra 2-1:1.82: Sierra USB modem converter detected [ 1212.852869][ T27] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1214.624248][ T27] usb 2-1: USB disconnect, device number 15 [ 1214.681755][ T27] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1214.708216][ T27] sierra 2-1:1.82: device disconnected [ 1214.715393][T12318] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1637'. [ 1217.039483][T12327] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1638'. [ 1219.312094][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.331944][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.181158][ T6027] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1222.970807][T12353] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.996004][T12353] binder: 12352:12353 ioctl 4018620d 200000004a80 returned -16 [ 1223.837866][T12360] syz.1.1642: attempt to access beyond end of device [ 1223.837866][T12360] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1226.662104][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1226.917015][T12383] overlayfs: conflicting options: nfs_export=on,index=off [ 1227.249816][T12386] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1653'. [ 1227.672035][T12392] overlayfs: conflicting options: nfs_export=on,index=off [ 1228.911238][ T6027] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1229.103765][ T6027] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1229.129357][ T6027] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1229.144056][ T6027] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1229.163321][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.194018][ T6027] usb 5-1: config 0 descriptor?? [ 1229.301410][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1229.435488][ T6027] usbhid 5-1:0.0: can't add hid device: -71 [ 1229.450434][ T6027] usbhid: probe of 5-1:0.0 failed with error -71 [ 1229.470850][ T6027] usb 5-1: USB disconnect, device number 8 [ 1229.493451][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1229.507513][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.544703][ T9] usb 2-1: config 0 descriptor?? [ 1229.561985][T12408] binder: BINDER_SET_CONTEXT_MGR already set [ 1229.568057][T12408] binder: 12407:12408 ioctl 4018620d 200000004a80 returned -16 [ 1229.588402][T12410] binder: 12409:12410 ioctl c00c6211 0 returned -14 [ 1229.892037][T12406] IPVS: length: 31 != 24 [ 1229.956679][T12406] loop5: detected capacity change from 0 to 7 [ 1230.061182][ T9] usb 2-1: USB disconnect, device number 16 [ 1232.595826][T12430] nvmet_tcp: address family 255 not supported [ 1232.815697][T12431] syz.4.1659: attempt to access beyond end of device [ 1232.815697][T12431] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1233.450032][T12441] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1665'. [ 1234.611717][T12455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.621215][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1234.655540][T12455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.698017][T12455] IPVS: length: 31 != 24 [ 1234.722170][T12455] loop5: detected capacity change from 0 to 7 [ 1237.119338][T12472] overlayfs: conflicting options: nfs_export=on,index=off [ 1238.590107][T12483] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 1239.032181][T12497] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1678'. [ 1239.277841][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.291155][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.991119][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1243.288169][T12528] fuse: Bad value for 'fd' [ 1243.514974][T12531] overlayfs: conflicting options: nfs_export=on,index=off [ 1243.952997][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 1244.001253][ T6027] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1244.193289][ T6027] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1244.204556][ T6027] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.216694][ T6027] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1244.247770][ T6027] usb 5-1: language id specifier not provided by device, defaulting to English [ 1244.283207][ T6027] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1244.335789][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1244.415800][ T6027] usb 5-1: Product: 爜ᦾ鱢餍≔镼蕙侰盯 [ 1244.563236][T12544] syz.1.1686: attempt to access beyond end of device [ 1244.563236][T12544] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1245.014185][ T6027] usb 5-1: USB disconnect, device number 9 [ 1245.345843][T12556] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1689'. [ 1245.861521][ T6027] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1245.894364][T12564] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1691'. [ 1246.064238][ T6027] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1246.101230][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.131930][ T6027] usb 4-1: config 0 descriptor?? [ 1247.711154][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1247.971547][T12559] IPVS: length: 31 != 24 [ 1247.983051][T12559] loop5: detected capacity change from 0 to 7 [ 1248.004616][ T5779] usb 4-1: USB disconnect, device number 18 [ 1248.781519][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.801807][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.680414][T12598] overlayfs: conflicting options: nfs_export=on,index=off [ 1255.011458][ T9831] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1255.213625][ T9831] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1255.240775][T12607] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1703'. [ 1255.250229][ T9831] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1255.279409][ T9831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.310423][ T9831] usb 5-1: Product: syz [ 1255.326440][ T9831] usb 5-1: Manufacturer: syz [ 1255.349044][ T9831] usb 5-1: SerialNumber: syz [ 1255.370622][ T9831] usb 5-1: config 0 descriptor?? [ 1255.597952][ T8288] usb 5-1: USB disconnect, device number 10 [ 1255.604120][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1255.798838][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1255.821653][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.855835][ T9] usb 2-1: config 0 descriptor?? [ 1256.123083][T12609] IPVS: length: 31 != 24 [ 1256.171266][T12609] loop5: detected capacity change from 0 to 7 [ 1256.206148][ T9] usb 2-1: USB disconnect, device number 17 [ 1256.252414][T12612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1701'. [ 1258.882007][T12635] overlayfs: conflicting options: nfs_export=on,index=off [ 1259.146926][T12640] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1714'. [ 1259.577263][T12642] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1715'. [ 1260.253611][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.270397][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.281985][T12652] IPVS: length: 31 != 24 [ 1260.288303][T12652] loop5: detected capacity change from 0 to 7 [ 1263.783945][ T8288] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1264.262749][T12671] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1264.682618][T12672] overlayfs: conflicting options: nfs_export=on,index=off [ 1264.790774][T12676] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1725'. [ 1269.325017][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.335286][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.347130][T12702] IPVS: length: 31 != 24 [ 1269.353815][T12702] loop5: detected capacity change from 0 to 7 [ 1269.551185][ T8288] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1269.772725][ T8288] usb 5-1: Using ep0 maxpacket: 32 [ 1269.780257][ T8288] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1269.803447][ T8288] usb 5-1: config 0 has no interface number 0 [ 1269.827190][ T8288] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1269.851058][ T8288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.859120][ T8288] usb 5-1: Product: syz [ 1269.881336][ T8288] usb 5-1: Manufacturer: syz [ 1269.886045][ T8288] usb 5-1: SerialNumber: syz [ 1269.914266][ T8288] usb 5-1: config 0 descriptor?? [ 1269.937687][ T8288] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1269.961394][ T8288] usb 5-1: selecting invalid altsetting 1 [ 1269.967209][ T8288] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1270.031660][ T8288] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1270.052638][ T8288] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1270.071709][ T8288] usb 5-1: media controller created [ 1270.162355][ T8288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.202598][T12707] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1733'. [ 1271.742699][ T8288] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1271.754346][ T8288] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1271.794601][ T8288] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1272.072265][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1272.623056][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.647400][ T8288] usb 5-1: USB disconnect, device number 12 [ 1272.655532][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1272.666769][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.675726][ T9] usb 2-1: Product: syz [ 1272.679947][ T9] usb 2-1: Manufacturer: syz [ 1272.687905][ T9] usb 2-1: SerialNumber: syz [ 1272.704149][ T9] usb 2-1: config 0 descriptor?? [ 1272.919063][ T9] usb 2-1: USB disconnect, device number 18 [ 1273.157564][T12723] syz.4.1735: attempt to access beyond end of device [ 1273.157564][T12723] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1273.519569][T12734] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1738'. [ 1275.091104][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 1275.731131][ T8288] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1275.953184][ T8288] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1275.981428][ T8288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.009385][ T8288] usb 4-1: config 0 descriptor?? [ 1276.399646][T12739] IPVS: length: 31 != 24 [ 1276.516060][T12745] syz.0.1743: attempt to access beyond end of device [ 1276.516060][T12745] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1276.575220][T12739] loop5: detected capacity change from 0 to 7 [ 1276.824054][ T8288] usb 4-1: USB disconnect, device number 19 [ 1278.585714][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1282.132957][T12782] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 1284.899948][T11090] Bluetooth: hci4: command 0x0406 tx timeout [ 1285.011551][T12795] overlayfs: conflicting options: nfs_export=on,index=off [ 1288.712629][T12821] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1751'. [ 1289.508579][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.541522][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.597493][T12824] IPVS: length: 31 != 24 [ 1289.622459][T12824] loop5: detected capacity change from 0 to 7 [ 1290.133430][T12829] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1763'. [ 1293.757742][T12853] overlayfs: conflicting options: nfs_export=on,index=off [ 1294.041187][ T8288] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1296.131138][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.139983][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.979858][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.005637][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.028563][T12863] IPVS: length: 31 != 24 [ 1297.049301][T12863] loop5: detected capacity change from 0 to 7 [ 1297.279233][T12865] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1770'. [ 1302.121713][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.128094][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.991278][ T5779] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1304.171826][ T5779] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1304.243861][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.318042][ T5779] usb 2-1: config 0 descriptor?? [ 1304.412693][T12901] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1785'. [ 1304.717133][T12893] IPVS: length: 31 != 24 [ 1304.740726][T12893] loop5: detected capacity change from 0 to 7 [ 1304.774582][ T5779] usb 2-1: USB disconnect, device number 20 [ 1310.033552][T12919] binder: BINDER_SET_CONTEXT_MGR already set [ 1310.066055][T12919] binder: 12918:12919 ioctl 4018620d 200000004a80 returned -16 [ 1310.146388][ T5779] [ 1310.148786][ T5779] ============================================ [ 1310.154945][ T5779] WARNING: possible recursive locking detected [ 1310.161128][ T5779] syzkaller #0 Not tainted [ 1310.165567][ T5779] -------------------------------------------- [ 1310.171734][ T5779] kworker/1:4/5779 is trying to acquire lock: [ 1310.177811][ T5779] ffff88814c3de130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 1310.187592][ T5779] [ 1310.187592][ T5779] but task is already holding lock: [ 1310.194971][ T5779] ffff8880458d4130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 1310.204744][ T5779] [ 1310.204744][ T5779] other info that might help us debug this: [ 1310.212814][ T5779] Possible unsafe locking scenario: [ 1310.212814][ T5779] [ 1310.220275][ T5779] CPU0 [ 1310.223567][ T5779] ---- [ 1310.226877][ T5779] lock(&grp->list_lock); [ 1310.231314][ T5779] lock(&grp->list_lock); [ 1310.235754][ T5779] [ 1310.235754][ T5779] *** DEADLOCK *** [ 1310.235754][ T5779] [ 1310.243913][ T5779] May be due to missing lock nesting notation [ 1310.243913][ T5779] [ 1310.252246][ T5779] 3 locks held by kworker/1:4/5779: [ 1310.257459][ T5779] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1310.268456][ T5779] #1: ffffc900046a7d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1310.281018][ T5779] #2: ffff8880458d4130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 1310.291238][ T5779] [ 1310.291238][ T5779] stack backtrace: [ 1310.297158][ T5779] CPU: 1 PID: 5779 Comm: kworker/1:4 Not tainted syzkaller #0 [ 1310.304633][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1310.314712][ T5779] Workqueue: events snd_rawmidi_input_event_work [ 1310.321087][ T5779] Call Trace: [ 1310.324386][ T5779] [ 1310.327335][ T5779] dump_stack_lvl+0x18c/0x250 [ 1310.332038][ T5779] ? show_regs_print_info+0x20/0x20 [ 1310.337261][ T5779] ? print_deadlock_bug+0x435/0x5d0 [ 1310.342485][ T5779] __lock_acquire+0x6809/0x7d80 [ 1310.347367][ T5779] ? verify_lock_unused+0x140/0x140 [ 1310.352592][ T5779] ? verify_lock_unused+0x140/0x140 [ 1310.357841][ T5779] ? verify_lock_unused+0x140/0x140 [ 1310.363067][ T5779] ? __rwlock_init+0x150/0x150 [ 1310.367865][ T5779] lock_acquire+0x19e/0x420 [ 1310.372389][ T5779] ? snd_seq_deliver_event+0x248/0x970 [ 1310.377890][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 1310.382939][ T5779] ? read_lock_is_recursive+0x20/0x20 [ 1310.388333][ T5779] ? mark_lock+0x94/0x320 [ 1310.392686][ T5779] ? do_raw_read_unlock+0x3d/0x80 [ 1310.397741][ T5779] ? snd_seq_deliver_event+0x220/0x970 [ 1310.403229][ T5779] _raw_read_lock+0x36/0x50 [ 1310.407751][ T5779] ? snd_seq_deliver_event+0x248/0x970 [ 1310.413238][ T5779] snd_seq_deliver_event+0x248/0x970 [ 1310.418549][ T5779] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1310.424467][ T5779] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 1310.430050][ T5779] ? client_use_ptr+0xa9/0xaa0 [ 1310.434841][ T5779] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 1310.441113][ T5779] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 1310.447219][ T5779] snd_seq_control_queue+0x886/0x1060 [ 1310.452644][ T5779] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 1310.458560][ T5779] ? mark_lock+0x94/0x320 [ 1310.462920][ T5779] ? snd_seq_port_use_ptr+0x101/0x130 [ 1310.468321][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 1310.473368][ T5779] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1310.479283][ T5779] ? _raw_spin_unlock+0x40/0x40 [ 1310.484155][ T5779] ? verify_lock_unused+0x140/0x140 [ 1310.489389][ T5779] ? do_raw_read_unlock+0x3d/0x80 [ 1310.494485][ T5779] ? _raw_read_unlock+0x28/0x40 [ 1310.499353][ T5779] ? snd_seq_port_use_ptr+0x101/0x130 [ 1310.504762][ T5779] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 1310.510693][ T5779] ? snd_seq_system_notify+0x170/0x170 [ 1310.516178][ T5779] ? snd_sequencer_device_done+0x30/0x30 [ 1310.521858][ T5779] ? mark_lock+0x94/0x320 [ 1310.526217][ T5779] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1310.532227][ T5779] ? __lock_acquire+0x7d80/0x7d80 [ 1310.537277][ T5779] snd_seq_deliver_event+0x270/0x970 [ 1310.542599][ T5779] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1310.548608][ T5779] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 1310.554289][ T5779] ? client_use_ptr+0xa9/0xaa0 [ 1310.559086][ T5779] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 1310.565361][ T5779] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 1310.571485][ T5779] snd_seq_oss_timer_start+0x337/0x570 [ 1310.576977][ T5779] ? snd_seq_oss_process_timer_event+0x3e0/0x3e0 [ 1310.583363][ T5779] ? snd_seq_oss_readq_put_event+0x161/0x250 [ 1310.589381][ T5779] ? snd_seq_oss_readq_put_timestamp+0x137/0x1a0 [ 1310.595751][ T5779] ? snd_seq_oss_readq_poll+0xb0/0xb0 [ 1310.601161][ T5779] snd_seq_oss_midi_input+0x34d/0x9b0 [ 1310.606681][ T5779] ? snd_seq_port_use_ptr+0x101/0x130 [ 1310.612087][ T5779] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 1310.617928][ T5779] ? do_raw_read_unlock+0x3d/0x80 [ 1310.623067][ T5779] ? _raw_read_unlock+0x28/0x40 [ 1310.628117][ T5779] ? snd_seq_port_use_ptr+0x101/0x130 [ 1310.633523][ T5779] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 1310.639490][ T5779] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 1310.645513][ T5779] ? snd_sequencer_device_done+0x30/0x30 [ 1310.651192][ T5779] ? do_raw_read_unlock+0x3d/0x80 [ 1310.656248][ T5779] snd_seq_deliver_event+0x502/0x970 [ 1310.661573][ T5779] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 1310.667239][ T5779] ? client_use_ptr+0xa9/0xaa0 [ 1310.672121][ T5779] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 1310.678396][ T5779] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 1310.684522][ T5779] snd_midi_input_event+0x2b2/0x3f0 [ 1310.689841][ T5779] ? event_process_midi+0x4a0/0x4a0 [ 1310.695072][ T5779] ? _raw_spin_unlock_irq+0x23/0x50 [ 1310.700289][ T5779] ? process_scheduled_works+0x975/0x1600 [ 1310.706049][ T5779] ? process_scheduled_works+0x975/0x1600 [ 1310.711797][ T5779] process_scheduled_works+0xa60/0x1600 [ 1310.717389][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 1310.722876][ T5779] ? assign_work+0x3cc/0x5d0 [ 1310.727668][ T5779] worker_thread+0xa5e/0xfe0 [ 1310.732290][ T5779] ? _raw_spin_unlock+0x40/0x40 [ 1310.737161][ T5779] ? __kthread_parkme+0x71/0x1c0 [ 1310.742131][ T5779] kthread+0x2fa/0x390 [ 1310.746230][ T5779] ? pr_cont_work+0x550/0x550 [ 1310.750935][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 1310.755556][ T5779] ret_from_fork+0x48/0x80 [ 1310.760002][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 1310.764613][ T5779] ret_from_fork_asm+0x11/0x20 [ 1310.769412][ T5779] [ 1310.921055][ T8288] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1311.054136][T12924] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1790'. [ 1311.113409][ T8288] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1311.126897][ T8288] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1311.148017][ T8288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.165913][ T8288] usb 2-1: Product: syz [ 1311.181204][ T8288] usb 2-1: Manufacturer: syz [ 1311.185880][ T8288] usb 2-1: SerialNumber: syz [ 1311.211806][ T8288] usb 2-1: config 0 descriptor?? [ 1311.441439][ T8288] usb 2-1: USB disconnect, device number 21 [ 1311.635384][T12934] overlayfs: conflicting options: nfs_export=on,index=off