last executing test programs: 7m9.309688107s ago: executing program 2 (id=375): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 7m7.838502791s ago: executing program 2 (id=381): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r1}}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000980)={0x7}) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7m6.831184424s ago: executing program 2 (id=386): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r1}}) capset(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100001070000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000980)={0x7}) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7m5.840716038s ago: executing program 2 (id=387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xa, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40100, 0x92) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) 7m5.460758796s ago: executing program 2 (id=389): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r2, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000020000200000000000000000000000000000000c55d4df52efff7ebb77443def940d903c62c79a2f9f2e8b8b40d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m4.934434509s ago: executing program 2 (id=391): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='writesame_16', 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600230d0000000c0000000007"], 0x18}}, 0x0) recvmsg$inet_nvme(r5, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x2100) read(r4, &(0x7f0000000380)=""/66, 0x42) 7m4.739121503s ago: executing program 32 (id=391): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='writesame_16', 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600230d0000000c0000000007"], 0x18}}, 0x0) recvmsg$inet_nvme(r5, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x2100) read(r4, &(0x7f0000000380)=""/66, 0x42) 5m8.850443834s ago: executing program 1 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr\x00', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 5m7.912421166s ago: executing program 1 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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") 5m6.545072628s ago: executing program 1 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1d6b 0001 0', 0xb) write(r0, &(0x7f0000000200)='1d6b 0002 0\x00', 0xc) write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2-0:1.0\x00', 0x7) 5m5.950494901s ago: executing program 1 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) lseek(r0, 0x5, 0x3) chmod(&(0x7f00000000c0)='./tracing\x00', 0x16) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x881, 0x100, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 5m3.347328261s ago: executing program 1 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1d6b 0001 0', 0xb) write(r0, &(0x7f0000000200)='1d6b 0002 0\x00', 0xc) write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2-0:1.0\x00', 0x7) 5m2.249356587s ago: executing program 1 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 4m46.911258042s ago: executing program 33 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 5.766173806s ago: executing program 3 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x6b, 0x0}, 0x10) 4.73488532s ago: executing program 3 (id=2083): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.73095316s ago: executing program 5 (id=2084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000700)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) 3.900151049s ago: executing program 5 (id=2085): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000740)={0xfffffffffffffff8, 0x20, 0x0, 0x20, 0xdc15}, 0x48) 3.796066742s ago: executing program 0 (id=2086): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x90d5493d}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.679860725s ago: executing program 3 (id=2088): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@errors_remount}, {@barrier}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) 3.606476906s ago: executing program 5 (id=2089): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="b7f117706b141db7c24424cc4935e8ca4dbd5396a7f2867dbc669c5441ab78e332d7fe17232d169d2912ef0360769edefded5ffae89d512cf296a6cc884970e13d8f23aceb737fb08500a7f57f4a0b42488b25658e2102e652b40820a17dd5ac888f3ab554138dcc4007fd7d931ea54f763ec1d9779f56b02f6b0b1d42e359e60cf77688b84b915a1a21b2ecc8f001a09bf6c187fee773454ccb6448c7e37ec56abcf8c1d8ec0e9cdf202759c053a886051221715e64425ee6f3389be9f7a172dca06b3b96bf574ed7d271bf15095156ea5d4ee14d8675d9130fe223d73114d227d5f45e8034bf07a5d841bedf64ba951b4f5f7953aa6131731b1b1f46c9711fbe30325e19680b5489951398d360b9cecf899950370ad8fcf79328e40706611adfaa2ad4c0d43ac57ae1457dd39480dac667be205546390f413dbac00a3ce0c06f967d1b6c14566814eed16589e42f5eba35a386ed4757ad0bf28f68f82e4f6857595e99ef05faec21b3e0c4335593ef8cc9a4e343bc5bb3a70536a3f8188a030031d0fc829cb21bfc160b4726eb166fab446307e0378bb58295889b09531ad5f539bab0baa075e2a45065b21d4852234883d7f04864b2890b8da97470d8fbe25a1a9418296425bbb2496a9dea76ca7bb8dc10ced6eae751bc9eafe358733a393207bb4e3de7195908efada119bb6bab7bcce942e634a5f71d57db3601a7fd70354a7135b93e99d5a79d7d7515ccc5150b2a440de65b0b81650b8f66f9a18a7841c6ccab2e7ea762cd9f5b6fdfc85ea8554796e44ee39ae93c4e4db2b9b90d54db275151b8ea2ded48552cf4577e5cf164caf097a301786843d60106fe9848e650d2a60e9b0aff1af12fbfd89ee1f99d26abf0068c7682b753bd082170ac39c5c78be0c710595a84c59709971997f788f0602cb899d3c9a5b2a2e2939197cd54fecef04e7b5fe710b5298b07e5149562601b9f48d1bc86c897ac70062ff3f5dbb382392b04d531f391090a3d93152772211bf30cb77f145427be66ac80445dd6732f64c91a684402736f8a77d35914d62ff48fba36b12c66256d3874849781d668748dc22ff5d1841845b09c8aaa2d028357bccf99fc9c7fc8df39666cb63fa2b67765dacc3eaae253d6caa5704af775d58fa81a32a358bb71b0c232a1f49a857e49a617190deb40c17d0c2c17744f29a43ba0a4fb191ba009637472bdc89e1a2296280a00ae5502fd566ed567b766186fea22de187306f6ad1914c7defffbd947517fb1dbc63cfd98983bdcb6f186ff2d86ab350d4a699cc1805713d3fa58671f6e7c98ccf03cdd9483086c78c0f68889a255de96d20df20344928436357dedbcbfb48f4ecca8a87b7770a45cc3e381a457667ce85f89d9f8c7ac03551e1928a3f11875a96a9b116a32068d9896b3081bd6364400a51dc797fb0a93cbed2f090fe9a4495aac94d0b68a1f56bdd7bbc95a3f65d626e17fdc12c1ba2175858c871d176fe534bfb74fc8327c23dd3732f77ec7453cc5b490668003b92319aa83297d91dee6014bfd61ab1e51dbee0d9f1651678c8c4bbf0408979db30ed414e4857315715ae394efc33e86d98a3f83dda94466a40f660b30ba0e8dbd6876f22fa8de3b96515dbfd6d4950889f38f3da85120de36cd9476b0784be54bf595c44561277fd763203b38b1f1ed74af9130ebbc310f061f9945587fb4958a0704c0a6465a30b0f0e896ecff22c21c30662fd3a398acc64005d083fc668499e0509688aa0d841f76d543e44f70025fc69b4da70988cfa9b14972104db44dc6972566ebb2d70c25b1a4e8b5d2f02303efa860509024af327605e1742b7d26914f4ab2b26e4b936b6aac58d510e51cfe4d379df7ada3112427644913de0e2fdffd683a0da527e3905fa409b603d50a7b8d7c2d80b31e0c4b15972eb222cee393d5736fe3088bdf29bb811c441c4d48393db8011767dc2fe50b567f14b7a277ed46417e259420aa41714e10ed8491d8322db36d6705388756c8f4b57b4884583b2be72ac2269bc6f54fdb7fb672f558126269e4edea9cc824d37d3cdc4115666031772f4a0d535a1a06ceee4856d6236af2bf6bd916317d0ec864ef8c9919368afb2f62091bf4185da10742ce1c94a16050d1d696b530b8ba2dc13edfa6cfc81532c1f3b4c778046876a28650a4d1bcba3e571bee74542ceabc83b2dbb91782a73a25254d0c50d93e8042ae89f0a3eecbee122d3457c6b10f53ca3632cdd8921f546c50c59b9ebb87cd91ff5a7e1114bd78941b42297c5d289004c2d04effdf9e467bac36909cc255a6c12bff69aded3a50ac2e393e48f1b5509d01f956de086aaec24589347f4b1419ca0dcfddea1f9bca7d7376a45b66e60625de766e874bfb4bd83797e496166d5714f2162666d53329388741148e2752410fe0884e0fa967e6774e6a61000e2207686cff1ac8eef0a0b555d98f74f7698012fea956e4948be0e4ee13b852c7ce6b883ac322a2a32a1938d8b329f92ae6f118b8ba1901e097f5151738bd35081cda69f9f0d0934477a763acb0e6d67f2401bcfb06043a5bc4befffe6149a4041cd25270b1fd7c33b30e6af8c9e6b9161a4351c6aaef743ccf1b849ad841dce628e597ae85a3d03759bba1145a4d6a486dd03fa24d0eccd7abe2de7fce1a35a20fcd79ba94c17102cf46a6cb3c5b3fce395a8736577c903e3c84035f9d85d1b35b62a97211df73dc56a14bbaf32c45a3727962ddecdd0cca1c03058b199d88ebc58b0fdbe24b7902d8787958eab6f0e22c0485c614e40afaaba7991c8fcdf4b8e3d45d53fdd69649e620e78eb64691e61978877c24a292b535311fdbe9f93ab568b89000823b2f16c13f4e4bf44b3fa88fc2200382487bddce1244fbff4eefee7ac171ce2ab072134301da0302d48559dc9917453b0636f476efd7aeba0340f186f2f00451dd27a44d832ad81592c6b3cd81c1df0aca34062ee3707313bdfe16b822861fe23f91d58da1f11a5009fa9614ea247654556be56a1aae56dbd352d2bf105790471ecb861603fdcdf323461f5f937f5473ab44193df46cf4d88c357e4e7b091127fa6a5b2c4eb237b66337e1072598db40ea719331c2f2115592e8cc700479bd5cfdf1ca42b11f48b496fbb17cca4de029e12a17485424b0e986794688ee308530c1d2444a58d5d25ad7bea90981d557aadbde00f7a96570c33692a6ffe38656590fc22d80b2a5967f455f21bb8e97066e0a862b629976e62f8a62acffa3b43729e91eae070799850f8d76422f8aa1fa1c3959d9faba4f446402e3a8604406166003f527942b45b03d2ffbaa7198f19a5b3571b38531723e90675a941e55bb8502ac6d5e1f67bb239c0de8e408d0da4039e41f29caa2b829d8851216717de31446e89ae38dcdc75e3cb25276d47b0b5d9481798f4515025f16982863f1b1033151efdff727a7ed35da92a34fc29f42b3009c373976b0e98a79924a60c69ed41e7e1021ca4ed3d74c5ec0da569db0a7c6cb28d59dac2130ee62e9390b7ef585e2a19be4f95eef20610b2955b2a010258801c0000ec94eb872572c8b190cb2f3e7361db734a24364599d09d9052062c1733366d9df31853dbf34083025adcb697952e80c5fa3dbf2619c206d8fb1856ac91c34e3ca56a124295203465a178dde9ed1b38240f9e149068bf5e9fc20e7c12ab9f2b82a58b4062faa78e46462029974d58b4c33f2d47d668ad010e9573f593ece7d8a3c706362ba728cfc63a67a9f04f1abf8632aa5a5bbfe5edfeeb089c21f1b7ddc10d3657b81627da4d868c5805c3abc25c7136fee17f2dc4cf5e4b3910dfb86f50eda971a01f3d9a85b7148bf24f39271c4db68cb3a9474295e4aeb142973eaf68be5fc29b320b1939a66f540eee497aeeba0a9ee2411a808989efd4af88ee6b421eecae3f8ee40a7a32daa214c826c1b2c5d7c866fd68e0d923fa48e34d2a8b0e8f79454baeb86d64a09991f1d7025301c9051cdf2562fb9adf0faac935b7cff55b3c88bdbe81566f57de20a9a8bee782e222b737f0110ad4fdbede5887aafb47ae95f520c3c1d9ce8dfa73e1b397b2038dcfe4a86740a9aa0f2f909077e5cb6afcc69bbadf1ec7c108d0c768328ed2c91430ae97148e9cf2bed4874bc3e4b84f21d7aea09bee1063f33b69f232210a4713c1815b9b15e2715715a5fdb92ac70aaf985ad7f7f4c716a4ba03994b969e5157596bbb70edbbdb12c4b88f80913bb3c679492a4c0a68a9bdb2e005b110dce8458ac5b6666722768157152d56f5e27f301a30905bc3a0cfa4aa12e9ce86ddddcc9dbffbe8a91906943705e22e9baa692dd4606000120eed43114c20d44f373febbcfe0b37ac6dd73fbb160eb4646c3dd3dc03f2fdb8f3a37a375dd4e2f40765d45d32a97043dc80706a26a0c5a8bfc427ddb9ecbab8c2ab902cfd51ba531e456be4eb8f0161622bc4ba01a7282135b52bd1abe7e8ea42f476b5c735bef8bbb598bbfca57cd5e7c2e95f8d592b70cb7823268333c758e43e6b9cbe7466fc18b7dd4678075ffa7dd2726f4e15916db3afd254247c03195c38a180ace3566dfdf627f76eb374f8f36c8aaa5df081143a65679d7502e440a3f642bcb507aa30176e5e20c4f90029f943b249e4d1bd8ee1ea1e9d42ebee30a4b902d95ce8d9294253a63f0bafbe20930f1aedcaf2a22de7bb874e4dcf29733ed01b1029551b45b7f81fba9819b742b7e39c0463d36f83b7f58fbe58200650e6043683c9f4482f53263862ce451d8e428d935ed6d6b34e462642728cc18d8abe1f5b127efed7976b85abe034a755ab91f6a5e9003a7c4561adcea1308a377ec602c556abe8b97b22feba38b0c14ad47521f4117f0cfd8efe16f22169ab26d3454f910a0926081303bdaaea6e7344c22dd1fd49e5461f5243c75dc2674bd929c90bdce65101ad5361417fb6fc8bbcacb35b58421124c911d8eaccc3a24dd24cc9fc4d4212907f63ed5ea606248981713362daca0888fc528f39360cc160d7208dec8f2c4c1702b7d605ab9fe8ddf1d0b20bcea8d716039023f1fbf116f3a4753747c92e870699408f3f14e309bebce55e5194d3afb9e646f97e6158d4d4241ffc75a67c0a14f44c6bfd804564ce8738c7676b5bb120ea3a9e834079031a18be4df727a648955d911c02b4026e757aa681525660f4ad9a7200996a1c5034c96488e507f219e489a3755d6abcbc7836a54605cddb55604d25a906dabe2bae8a4e87ff5951e651f0f4f4c26424cae9fef353b5a9c7aadedeb7e73b8b54d7192c177dce0eea9bafa93da7afbc395178ad3b458db5ee9d7922e3089d231baed5760fa12a112f87d02d84d76196b9692f13ba0fa35bca9b4e014adc10852949ebe265bfaeff993e6f85050a6c7fbe04116b5502f05bdd31dd74b667a859c01bebe74e09638c6b9c2d8401965bf95ab48bfc97e1b1e2171f182ac3a5e6cc89f5ee0f60db911e59eb49f9fda5579f2651e4fe1d63aebf8b5db7a3e6267a8ac321530f2be1da40b8349a4a3c9e44c24c28b13aabcd68d4e298fac3454ca350f1c187f8b976ac628fb61fe3426a1043f2260777715824e96bc5896841a8f50bc2ecc2c91cb98c9987dfad8f904be1699903492cccdc1b4e3028a990371b3744f0f64874bd12bed828b672763a4d831bbffc3cb4ce0e23b71f2507e50aeb7640ecb398e7634e1ae461d756e455d1b2c5d3dcf9b9fb21954b902c755f1b9bc983006480025909a0ad64e0a35114f8870ae39c9ebe0047ace8e4df5dc1c8dc683ee6f9dd4b245", @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="aa49221c02b2b2501aaf360f3b5490922c4ff563aa6bda6620eb2b8630c8f34e9f089faecc0fe919e58d4edceee7cada9b5ebef1324255f98aaf78fdbe3ba18e728cc31832c0e1252493b06284"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000f420000108fcfffffffcffffff020000000000000000fdff000700010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r3 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001802800a0007ee08000600000000000000000001aa849ea54a655886c36d74f93a712e5be1b449df00000000000000667cd94291b1f3327feda0b8e490a4"], 0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='decQdes io\x00'], 0xb) setpriority(0x1, 0x0, 0x80000000) 3.565938627s ago: executing program 4 (id=2090): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0xe2e5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000400"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0xa01388d7af6e45ad, 0x400) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x4, 0x103000) 3.551907898s ago: executing program 0 (id=2091): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) 2.620583479s ago: executing program 5 (id=2092): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$eJzs3T9oJFUcB/Df7O4YN1kkaiOIf0BENBBiJ9jERiEgIYgIKkRErCQRYoJd1srGQmuVgGATxM5oKTbBRhGscncpcs3BXbjiwhV3xR67s3u3m+xxd/v32Pl8YJk3ee/NexPm+yYEZjaA3JqNiMWIKEbEXESkEZG0N3g++8w2d3fK+6sRtdo7V5NGu2w/0+o3ExHViHgtotSq29r74Oj6wVsvfbOZvvjz3vvlUZ1fu+Ojw7dPflz++relV7f+/f/ychKLUWnWtZ/HICVdflZKIp4YxmAPiaQ07hlwP1a+/PVcPfdPRsQLjfynUWhG9tuNR/5K45Uf7tb3uyv/PT3KuQKDV6ul9XtgtQbkTiEiKpEU5iMiKxcK8/PZ3/Dni9OFz9Y3vpj7dH1z7ZNxr1TAoKSRHL75x9TvM6fyf6mY5R+YXJWIw3dXdi/UyyfFcc8GGJr2/7Y/k23q+Z/7aPvlkH/IHfmH/JJ/yC/5hwnQY3blH/Krn/w/OqQ5AaPh/g8TLG0Vql2r5R/yS/5hQv3U7anTTvIP+dWefwAgX2pT434CGRiXca8/AAAAAAAAAAAAAAAAAADAWTvl/dXWZ1Rj/v19xPEbEVHqNn6x8X3ErbeNT19L6s1uS7JuffnwuT4P0KdfBvb0dbmnXo9dHNT4vfnn2eEc96vO3c5fztSd4vZaRLXeeKFUOnv9Jc3rr3eP36M+/bjPAR7Q6bcCvv7eaMc/7ebueMdfOoj4s77+LHRbfwrxVGObrT9LSed6U2l/xXKPPr/R5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmVsBAAD//6iAbTQ=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) rmdir(&(0x7f0000000140)='./bus\x00') 2.619345369s ago: executing program 4 (id=2093): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='2', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) 2.486625372s ago: executing program 0 (id=2094): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000300)) 2.399992214s ago: executing program 3 (id=2095): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x2, 0x231, &(0x7f0000000240)="$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") mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x237406, 0x0) 2.257480757s ago: executing program 4 (id=2096): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.190655519s ago: executing program 0 (id=2097): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000740)={0xfffffffffffffff8, 0x20, 0x0, 0x20, 0xdc15}, 0x48) 2.075468482s ago: executing program 5 (id=2098): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr\x00', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 2.015598093s ago: executing program 4 (id=2099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x40, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x90d5493d}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.934429375s ago: executing program 3 (id=2100): syz_emit_ethernet(0x5e, &(0x7f0000000380)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2}}}}}}, 0x0) 1.934282175s ago: executing program 0 (id=2101): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0xe2e5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000400"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0xa01388d7af6e45ad, 0x400) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x4, 0x103000) 1.201247172s ago: executing program 4 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="aa49221c02b2b2501aaf360f3b5490922c4ff563aa6bda6620eb2b8630c8f34e9f089faecc0fe919e58d4edceee7cada9b5ebef1324255f98aaf78fdbe3ba18e728cc31832c0e1252493b06284"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000f420000108fcfffffffcffffff020000000000000000fdff000700010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r3 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001802800a0007ee08000600000000000000000001aa849ea54a655886c36d74f93a712e5be1b449df00000000000000667cd94291b1f3327feda0b8e490a4"], 0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='decQdes io\x00'], 0xb) setpriority(0x1, 0x0, 0x80000000) 1.012868776s ago: executing program 5 (id=2103): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000340)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)=""/38, 0x26) 970.160627ms ago: executing program 0 (id=2104): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='2', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2b, 0x801, 0x0) 969.031907ms ago: executing program 3 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 0s ago: executing program 4 (id=2106): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x3, 0x400000000}, 0xc1b1, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): 7] FAULT_INJECTION: forcing a failure. [ 183.867692][ T6857] name failslab, interval 1, probability 0, space 0, times 1 [ 183.881910][ T6857] CPU: 0 PID: 6857 Comm: syz.3.274 Not tainted syzkaller #0 [ 183.889268][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.899356][ T6857] Call Trace: [ 183.902656][ T6857] [ 183.905606][ T6857] dump_stack_lvl+0x18c/0x250 [ 183.910308][ T6857] ? show_regs_print_info+0x20/0x20 [ 183.915530][ T6857] ? load_image+0x420/0x420 [ 183.920071][ T6857] ? __might_sleep+0xe0/0xe0 [ 183.924677][ T6857] ? __lock_acquire+0x7d80/0x7d80 [ 183.929722][ T6857] should_fail_ex+0x394/0x4c0 [ 183.934422][ T6857] should_failslab+0x9/0x20 [ 183.938964][ T6857] slab_pre_alloc_hook+0x59/0x300 [ 183.944054][ T6857] kmem_cache_alloc+0x5a/0x2c0 [ 183.948860][ T6857] ? security_inode_alloc+0x34/0x110 [ 183.954175][ T6857] security_inode_alloc+0x34/0x110 [ 183.959311][ T6857] inode_init_always+0x914/0xc90 [ 183.964291][ T6857] new_inode_pseudo+0x95/0x1d0 [ 183.969082][ T6857] new_inode+0x22/0x1d0 [ 183.973270][ T6857] ? sprintf+0xe8/0x140 [ 183.977440][ T6857] shmem_get_inode+0x34d/0xcd0 [ 183.982229][ T6857] __shmem_file_setup+0x167/0x2c0 [ 183.987298][ T6857] newseg+0x46c/0xb10 [ 183.991300][ T6857] ? ksys_shmget+0x140/0x140 [ 183.995928][ T6857] ipcget+0x1d1/0xe10 [ 183.999945][ T6857] ? do_futex+0x35d/0x3e0 [ 184.004315][ T6857] ? __ia32_sys_get_robust_list+0x110/0x110 [ 184.010224][ T6857] ? bpf_link_show_fdinfo+0x390/0x390 [ 184.015614][ T6857] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 184.021272][ T6857] __x64_sys_shmget+0x141/0x180 [ 184.026172][ T6857] ? lock_chain_count+0x20/0x20 [ 184.031056][ T6857] ? shm_more_checks+0x80/0x80 [ 184.035839][ T6857] ? lockdep_hardirqs_on+0x98/0x150 [ 184.041189][ T6857] do_syscall_64+0x55/0xb0 [ 184.045623][ T6857] ? clear_bhb_loop+0x40/0x90 [ 184.050335][ T6857] ? clear_bhb_loop+0x40/0x90 [ 184.055032][ T6857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.060943][ T6857] RIP: 0033:0x7f9843f9e159 [ 184.065388][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.085015][ T6857] RSP: 002b:00007f98421f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 184.093455][ T6857] RAX: ffffffffffffffda RBX: 00007f9844225fa0 RCX: 00007f9843f9e159 [ 184.101444][ T6857] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 0000000000000000 [ 184.109434][ T6857] RBP: 00007f984403503b R08: 0000000000000000 R09: 0000000000000000 [ 184.117444][ T6857] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000000 [ 184.125429][ T6857] R13: 00007f9844226038 R14: 00007f9844225fa0 R15: 00007ffd518a3098 [ 184.133448][ T6857] [ 184.377288][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 185.894843][ T6879] 9pnet_virtio: no channels available for device syz [ 185.909774][ T6879] overlayfs: missing 'lowerdir' [ 188.137378][ T6903] loop5: detected capacity change from 0 to 6 [ 188.160561][ T6903] Dev loop5: unable to read RDB block 6 [ 188.166587][ T6903] loop5: unable to read partition table [ 188.173089][ T6903] loop5: partition table beyond EOD, truncated [ 188.179467][ T6903] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.048081][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 189.202073][ T6913] block nbd0: shutting down sockets [ 189.399457][ T6920] 9pnet_virtio: no channels available for device syz [ 189.411378][ T6920] overlayfs: missing 'lowerdir' [ 192.473669][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 193.331793][ T6955] 9pnet_virtio: no channels available for device syz [ 193.342424][ T6955] overlayfs: missing 'lowerdir' [ 193.640107][ T6964] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 193.640107][ T6964] [ 193.671932][ T6964] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 193.710129][ T6964] CIFS: Attempting to mount //127.0.0.1/share [ 193.773557][ T6972] syzkaller1: entered promiscuous mode [ 193.779662][ T6972] syzkaller1: entered allmulticast mode [ 194.512692][ T6964] CIFS: VFS: cifs_mount failed w/return code = -112 [ 194.692201][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698713][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.770037][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 195.912829][ T6988] 9pnet_virtio: no channels available for device syz [ 195.921731][ T6988] overlayfs: missing 'workdir' [ 196.944815][ T7000] MTD: Couldn't look up './dev/mtdblock0': -2 [ 197.163370][ T7008] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 197.163370][ T7008] [ 197.201560][ T7008] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 197.290171][ T7008] CIFS: Attempting to mount //127.0.0.1/share [ 198.038791][ T7008] CIFS: VFS: cifs_mount failed w/return code = -512 [ 199.110627][ T7021] 9pnet_virtio: no channels available for device syz [ 199.129980][ T7021] overlayfs: missing 'workdir' [ 199.526956][ T7031] MTD: Couldn't look up './dev/mtdblock0': -2 [ 200.626684][ T7040] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 200.626684][ T7040] [ 200.640812][ T7040] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 200.653822][ T7040] CIFS: Attempting to mount //127.0.0.1/share [ 200.729506][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 201.666269][ T7040] CIFS: VFS: cifs_mount failed w/return code = -112 [ 201.678932][ T7050] 9pnet_virtio: no channels available for device syz [ 201.687174][ T7050] overlayfs: missing 'workdir' [ 201.926804][ T7058] MTD: Couldn't look up './dev/mtdblock0': -2 [ 202.049769][ T7061] 9pnet_virtio: no channels available for device syz [ 205.212027][ T7078] 9pnet_virtio: no channels available for device syz [ 205.231815][ T7078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.240861][ T7078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.290882][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 205.329321][ T7082] FAULT_INJECTION: forcing a failure. [ 205.329321][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 205.354339][ T7082] CPU: 1 PID: 7082 Comm: syz.3.347 Not tainted syzkaller #0 [ 205.361725][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.371824][ T7082] Call Trace: [ 205.375151][ T7082] [ 205.378134][ T7082] dump_stack_lvl+0x18c/0x250 [ 205.382881][ T7082] ? show_regs_print_info+0x20/0x20 [ 205.388136][ T7082] ? load_image+0x420/0x420 [ 205.392699][ T7082] ? __might_sleep+0xe0/0xe0 [ 205.397354][ T7082] ? __lock_acquire+0x7d80/0x7d80 [ 205.402447][ T7082] should_fail_ex+0x394/0x4c0 [ 205.407200][ T7082] should_failslab+0x9/0x20 [ 205.411814][ T7082] slab_pre_alloc_hook+0x59/0x300 [ 205.416914][ T7082] kmem_cache_alloc+0x5a/0x2c0 [ 205.421730][ T7082] ? create_new_namespaces+0x34/0x700 [ 205.427144][ T7082] create_new_namespaces+0x34/0x700 [ 205.432388][ T7082] ? bpf_lsm_capable+0x9/0x10 [ 205.437117][ T7082] ? security_capable+0x89/0xb0 [ 205.442008][ T7082] unshare_nsproxy_namespaces+0x11a/0x160 [ 205.447786][ T7082] ksys_unshare+0x4fa/0x8f0 [ 205.452366][ T7082] ? sighand_ctor+0x50/0x50 [ 205.456918][ T7082] ? lock_chain_count+0x20/0x20 [ 205.461808][ T7082] ? syscall_enter_from_user_mode+0x25/0x80 [ 205.467768][ T7082] __x64_sys_unshare+0x38/0x40 [ 205.472594][ T7082] do_syscall_64+0x55/0xb0 [ 205.477043][ T7082] ? clear_bhb_loop+0x40/0x90 [ 205.481752][ T7082] ? clear_bhb_loop+0x40/0x90 [ 205.486460][ T7082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.492470][ T7082] RIP: 0033:0x7f9843f9e159 [ 205.496920][ T7082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.516588][ T7082] RSP: 002b:00007f98421f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 205.525052][ T7082] RAX: ffffffffffffffda RBX: 00007f9844225fa0 RCX: 00007f9843f9e159 [ 205.533064][ T7082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 205.541088][ T7082] RBP: 00007f984403503b R08: 0000000000000000 R09: 0000000000000000 [ 205.549097][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.557205][ T7082] R13: 00007f9844226038 R14: 00007f9844225fa0 R15: 00007ffd518a3098 [ 205.565226][ T7082] [ 205.581506][ T7085] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 205.581506][ T7085] [ 205.599725][ T7085] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 205.613638][ T7085] CIFS: Attempting to mount //127.0.0.1/share [ 205.698883][ T7089] MTD: Couldn't look up './dev/mtdblock0': -2 [ 206.239412][ T7085] CIFS: VFS: cifs_mount failed w/return code = -512 [ 207.263917][ T7107] MTD: Couldn't look up './dev/mtdblock0': -2 [ 208.164051][ T7111] 9pnet_virtio: no channels available for device syz [ 208.172250][ T7111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.181142][ T7111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.249583][ T7113] syz.3.359[7113]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 208.355749][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 208.510373][ T7122] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 208.510373][ T7122] [ 208.529255][ T7122] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 208.542587][ T7122] CIFS: Attempting to mount //127.0.0.1/share [ 208.810209][ T7113] loop3: detected capacity change from 0 to 40427 [ 208.835985][ T7113] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 208.844153][ T7113] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.857422][ T7113] F2FS-fs (loop3): invalid crc value [ 208.876064][ T7113] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.961839][ T7113] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 208.969597][ T7113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.101909][ T7113] syz.3.359: attempt to access beyond end of device [ 209.101909][ T7113] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.118514][ T7113] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 209.352431][ T7122] CIFS: VFS: cifs_mount failed w/return code = -112 [ 209.408463][ T7136] loop5: detected capacity change from 0 to 6 [ 209.442557][ T7136] Dev loop5: unable to read RDB block 6 [ 209.448438][ T7136] loop5: unable to read partition table [ 209.455079][ T7136] loop5: partition table beyond EOD, truncated [ 209.470250][ T7136] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.806640][ T7141] MTD: Couldn't look up './dev/mtdblock0': -2 [ 211.319385][ T7145] 9pnet_virtio: no channels available for device syz [ 211.328019][ T7145] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.336894][ T7145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.626758][ T7160] syz.3.373: attempt to access beyond end of device [ 212.626758][ T7160] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 212.655954][ T7160] XFS (nbd3): SB validate failed with error -5. [ 212.678805][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 212.779100][ T7170] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 212.779100][ T7170] [ 212.830853][ T7170] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 212.860353][ T7170] CIFS: Attempting to mount //127.0.0.1/share [ 212.945232][ T7175] capability: warning: `syz.1.376' uses 32-bit capabilities (legacy support in use) [ 213.684153][ T7170] CIFS: VFS: cifs_mount failed w/return code = -112 [ 213.963411][ T7180] MTD: Couldn't look up './dev/mtdblock0': -2 [ 214.173942][ T7187] 9pnet_virtio: no channels available for device syz [ 216.087164][ T7204] loop2: detected capacity change from 0 to 512 [ 216.104918][ T7204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 216.120325][ T7204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.161700][ T7204] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.387: bad orphan inode 131083 [ 216.183340][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 216.194772][ T7204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.287043][ T7204] loop2: detected capacity change from 512 to 64 [ 216.348153][ T7204] syz.2.387: attempt to access beyond end of device [ 216.348153][ T7204] loop2: rw=3, sector=74, nr_sectors = 6 limit=64 [ 216.377615][ T7204] syz.2.387: attempt to access beyond end of device [ 216.377615][ T7204] loop2: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 216.423992][ T5774] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=131072, rec_len=0, size=1024 fake=0 [ 216.525089][ T6910] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.693920][ T7212] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 216.693920][ T7212] [ 216.709241][ T7212] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 216.722987][ T7212] CIFS: Attempting to mount //127.0.0.1/share [ 216.979625][ T1096] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.110340][ T1096] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.216377][ T1096] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.322986][ T1096] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.552644][ T7212] CIFS: VFS: cifs_mount failed w/return code = -112 [ 219.556568][ T7237] netlink: 84 bytes leftover after parsing attributes in process `syz.3.399'. [ 219.592572][ T5818] IPVS: starting estimator thread 0... [ 219.826640][ T7238] IPVS: using max 16 ests per chain, 38400 per kthread [ 219.848441][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.867233][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.878303][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.910028][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.938135][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.958103][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.149684][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.174533][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.185493][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.201980][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.218631][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.227868][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.511204][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 221.044995][ T7258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.401'. [ 221.070457][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.078292][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.330732][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 222.361448][ T5787] Bluetooth: hci0: command tx timeout [ 223.386863][ T7285] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 223.386863][ T7285] [ 223.417844][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.232637][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.259084][ T7285] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 224.305813][ T7235] bridge_slave_0: entered allmulticast mode [ 224.306558][ T7285] CIFS: Attempting to mount //127.0.0.1/share [ 224.346038][ T7235] bridge_slave_0: entered promiscuous mode [ 224.436440][ T5787] Bluetooth: hci0: command tx timeout [ 224.448678][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.489936][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.509666][ T7235] bridge_slave_1: entered allmulticast mode [ 224.574298][ T7285] CIFS: VFS: cifs_mount failed w/return code = -112 [ 224.589685][ T7235] bridge_slave_1: entered promiscuous mode [ 224.608349][ T7299] netlink: 84 bytes leftover after parsing attributes in process `syz.3.407'. [ 225.493610][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 225.525174][ T1096] hsr_slave_0: left promiscuous mode [ 225.533956][ T1096] hsr_slave_1: left promiscuous mode [ 225.541166][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.566255][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.598977][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.616469][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.627002][ T1096] bridge_slave_1: left allmulticast mode [ 225.632722][ T1096] bridge_slave_1: left promiscuous mode [ 225.650480][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.672681][ T1096] bridge_slave_0: left allmulticast mode [ 225.688960][ T1096] bridge_slave_0: left promiscuous mode [ 225.697118][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.766203][ T1096] veth1_macvtap: left promiscuous mode [ 225.775641][ T1096] veth0_macvtap: left promiscuous mode [ 225.798315][ T1096] veth1_vlan: left promiscuous mode [ 225.804085][ T1096] veth0_vlan: left promiscuous mode [ 226.345199][ T1096] pim6reg (unregistering): left allmulticast mode [ 226.516043][ T5787] Bluetooth: hci0: command tx timeout [ 228.004152][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 228.053207][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 228.096770][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.144317][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.476087][ T1096] bond0 (unregistering): Released all slaves [ 228.574409][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.596151][ T5787] Bluetooth: hci0: command tx timeout [ 229.021520][ T7321] pim6reg: entered allmulticast mode [ 229.220230][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 229.673077][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 229.700367][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.755809][ T7235] team0: Port device team_slave_0 added [ 229.794645][ T7324] ceph: No mds server is up or the cluster is laggy [ 229.828846][ T7235] team0: Port device team_slave_1 added [ 229.928989][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.988589][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.093849][ T7335] netlink: 84 bytes leftover after parsing attributes in process `syz.3.416'. [ 230.114326][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.194414][ T7337] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 230.194414][ T7337] [ 230.223540][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.249572][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.281669][ T7337] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 230.304510][ T7341] MTD: Couldn't look up './dev/mtdblock0': -2 [ 230.332858][ T7337] CIFS: Attempting to mount //127.0.0.1/share [ 230.378591][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.575155][ T7235] hsr_slave_0: entered promiscuous mode [ 230.586753][ T7235] hsr_slave_1: entered promiscuous mode [ 230.593217][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.601456][ T7235] Cannot create hsr debugfs directory [ 230.912453][ T7337] CIFS: VFS: cifs_mount failed w/return code = -112 [ 231.909688][ T7235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.038321][ T7235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.248322][ T7235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.605785][ T7235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.203523][ T2135] libceph: connect (1)[c::]:6789 error -101 [ 233.303136][ T2135] libceph: mon0 (1)[c::]:6789 connect error [ 234.033007][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.130524][ T7377] ceph: No mds server is up or the cluster is laggy [ 234.138819][ T2135] libceph: connect (1)[c::]:6789 error -101 [ 234.144849][ T2135] libceph: mon0 (1)[c::]:6789 connect error [ 234.214229][ T7388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.426'. [ 234.223364][ T5818] IPVS: starting estimator thread 0... [ 234.366400][ T7389] IPVS: using max 17 ests per chain, 40800 per kthread [ 234.677124][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.015242][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.022474][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.132756][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.140174][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.398766][ T7400] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 235.398766][ T7400] [ 235.570511][ T7400] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 236.092269][ T7400] CIFS: Attempting to mount //127.0.0.1/share [ 236.336530][ T7400] CIFS: VFS: cifs_mount failed w/return code = -112 [ 237.353765][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.429829][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 240.505099][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 240.675298][ T7437] ceph: No mds server is up or the cluster is laggy [ 240.744460][ T7446] netlink: 84 bytes leftover after parsing attributes in process `syz.3.436'. [ 240.917313][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 240.923457][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 242.889085][ T7235] veth0_vlan: entered promiscuous mode [ 242.913788][ T7235] veth1_vlan: entered promiscuous mode [ 243.657205][ T7235] veth0_macvtap: entered promiscuous mode [ 243.848578][ T7235] veth1_macvtap: entered promiscuous mode [ 244.004228][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.080495][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.090618][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.101308][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.112337][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.123327][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.256933][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.415172][ T7483] netlink: 84 bytes leftover after parsing attributes in process `syz.3.444'. [ 247.575149][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.603066][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.633247][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.674846][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.730661][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.791362][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.855566][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.193630][ T7235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.319428][ T7235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.433407][ T7235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.487631][ T7235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.496927][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.515894][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.639557][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.663699][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.761792][ T7516] 9pnet_virtio: no channels available for device syz [ 250.782782][ T7520] netlink: 84 bytes leftover after parsing attributes in process `syz.1.452'. [ 250.809775][ T8] IPVS: starting estimator thread 0... [ 251.717047][ T7521] IPVS: using max 18 ests per chain, 43200 per kthread [ 252.939422][ T7541] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 253.445991][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 254.322401][ T23] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 254.344050][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.372159][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.408966][ T7569] 9pnet_virtio: no channels available for device syz [ 254.428497][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.439697][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.454554][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.466045][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.480342][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.499421][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.534283][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.618225][ T7572] netlink: 84 bytes leftover after parsing attributes in process `syz.3.464'. [ 255.154818][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.226479][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.237742][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.252405][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.276185][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.307075][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.335942][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.351714][ T23] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 255.366004][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.374090][ T23] usb 2-1: Product: syz [ 255.397603][ T23] usb 2-1: Manufacturer: syz [ 255.402373][ T23] usb 2-1: SerialNumber: syz [ 255.475798][ T23] usb-storage 2-1:1.0: USB Mass Storage device detected [ 255.526556][ T23] scsi host1: usb-storage 2-1:1.0 [ 255.757968][ T7585] loop4: detected capacity change from 0 to 256 [ 256.121764][ T7585] FAT-fs (loop4): Directory bread(block 64) failed [ 256.129147][ T7585] FAT-fs (loop4): Directory bread(block 65) failed [ 256.136488][ T7585] FAT-fs (loop4): Directory bread(block 66) failed [ 256.143207][ T7585] FAT-fs (loop4): Directory bread(block 67) failed [ 256.150422][ T7585] FAT-fs (loop4): Directory bread(block 68) failed [ 256.157156][ T7585] FAT-fs (loop4): Directory bread(block 69) failed [ 256.164356][ T7585] FAT-fs (loop4): Directory bread(block 70) failed [ 256.171161][ T7585] FAT-fs (loop4): Directory bread(block 71) failed [ 256.178424][ T7585] FAT-fs (loop4): Directory bread(block 72) failed [ 256.185337][ T7585] FAT-fs (loop4): Directory bread(block 73) failed [ 256.243839][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.258279][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.550810][ T5818] usb 2-1: USB disconnect, device number 2 [ 257.668408][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'. [ 258.844435][ T7611] 9pnet_virtio: no channels available for device syz [ 259.020477][ T7617] netlink: 84 bytes leftover after parsing attributes in process `syz.4.474'. [ 259.072127][ T2135] IPVS: starting estimator thread 0... [ 259.266282][ T7618] IPVS: using max 16 ests per chain, 38400 per kthread [ 261.098833][ T7645] loop3: detected capacity change from 0 to 128 [ 261.106817][ T7645] FAT-fs (loop3): Unrecognized mount option "00000000000000000000646®¡hºÌ" or missing value [ 262.845833][ C1] sched: RT throttling activated [ 263.466377][ T7655] 9pnet_virtio: no channels available for device syz [ 263.831586][ T7667] netlink: 84 bytes leftover after parsing attributes in process `syz.3.487'. [ 265.949458][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 266.283186][ T8] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 266.458063][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.529512][ T7686] input: syz0 as /devices/virtual/input/input21 [ 266.562427][ T8] usb 1-1: config 0 has no interfaces? [ 266.589639][ T7691] 9pnet_virtio: no channels available for device syz [ 266.619095][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.636140][ T8] usb 1-1: config 0 has no interfaces? [ 266.644514][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.656475][ T8] usb 1-1: config 0 has no interfaces? [ 266.663647][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.676549][ T8] usb 1-1: config 0 has no interfaces? [ 266.686453][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.705993][ T8] usb 1-1: config 0 has no interfaces? [ 266.713006][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.735746][ T8] usb 1-1: config 0 has no interfaces? [ 266.745469][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.785205][ T8] usb 1-1: config 0 has no interfaces? [ 266.801579][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.812075][ T8] usb 1-1: config 0 has no interfaces? [ 266.820333][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 266.859608][ T8] usb 1-1: New USB device strings: Mfr=192, Product=110, SerialNumber=129 [ 266.897341][ T8] usb 1-1: Product: syz [ 266.908805][ T8] usb 1-1: Manufacturer: syz [ 266.936270][ T8] usb 1-1: SerialNumber: syz [ 266.952202][ T8] usb 1-1: config 0 descriptor?? [ 267.449440][ T7680] KVM: debugfs: duplicate directory 7680-6 [ 268.735415][ T7722] netlink: 84 bytes leftover after parsing attributes in process `syz.3.500'. [ 269.729063][ T5818] usb 1-1: USB disconnect, device number 3 [ 270.404903][ T7734] input: syz0 as /devices/virtual/input/input23 [ 270.986899][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 271.220100][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.305918][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.405839][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 271.515196][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.732737][ T23] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 271.869961][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.086419][ T23] usb 5-1: Product: syz [ 272.090681][ T23] usb 5-1: Manufacturer: syz [ 272.095334][ T23] usb 5-1: SerialNumber: syz [ 272.112310][ T7762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.511'. [ 272.258640][ T23] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 272.307123][ T23] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 272.354522][ T23] usbserial_generic 5-1:1.0: generic converter detected [ 272.402967][ T23] usb 5-1: generic converter now attached to ttyUSB0 [ 272.497895][ T23] usb 5-1: USB disconnect, device number 2 [ 272.929587][ T23] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 273.150446][ T23] usbserial_generic 5-1:1.0: device disconnected [ 274.107452][ T7787] input: syz0 as /devices/virtual/input/input25 [ 275.686122][ T7813] netlink: 84 bytes leftover after parsing attributes in process `syz.3.522'. [ 276.789003][ T7824] input: syz0 as /devices/virtual/input/input27 [ 277.505944][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 278.266107][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 278.286537][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 278.306904][ T5816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 278.336117][ T5816] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1577, setting to 1024 [ 278.363858][ T5816] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 278.388191][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.175925][ T5816] usb 5-1: Product: syz [ 279.245263][ T5816] usb 5-1: Manufacturer: syz [ 279.250114][ T5816] usb 5-1: SerialNumber: syz [ 279.542319][ T5816] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 279.561880][ T5816] usb 5-1: unit 2 not found! [ 279.697760][ T5816] usb 5-1: USB disconnect, device number 3 [ 282.047974][ T7892] cgroup: Unknown subsys name 'rlimit' [ 282.496235][ T5787] block nbd1: Receive control failed (result -32) [ 282.624453][ T7888] block nbd1: shutting down sockets [ 282.997463][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 286.417464][ T5787] block nbd1: Receive control failed (result -32) [ 286.422205][ T7939] block nbd1: shutting down sockets [ 286.989708][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 288.479786][ T7984] loop4: detected capacity change from 0 to 128 [ 288.729481][ T28] audit: type=1804 audit(1789001201.536:7): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.567" name="/newroot/23/file0/bus" dev="loop4" ino=1048595 res=1 errno=0 [ 288.900619][ T28] audit: type=1804 audit(1789001201.576:8): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.567" name="/newroot/23/file0/bus" dev="loop4" ino=1048595 res=1 errno=0 [ 289.045152][ T28] audit: type=1804 audit(1789001201.586:9): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.567" name="/newroot/23/file0/bus" dev="loop4" ino=1048595 res=1 errno=0 [ 290.028035][ T7994] block nbd3: shutting down sockets [ 291.919137][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 293.208954][ T8041] loop0: detected capacity change from 0 to 256 [ 293.434371][ T8041] FAT-fs (loop0): Directory bread(block 64) failed [ 293.482463][ T8041] FAT-fs (loop0): Directory bread(block 65) failed [ 293.534714][ T8041] FAT-fs (loop0): Directory bread(block 66) failed [ 293.584263][ T8041] FAT-fs (loop0): Directory bread(block 67) failed [ 293.634905][ T8041] FAT-fs (loop0): Directory bread(block 68) failed [ 293.675187][ T8041] FAT-fs (loop0): Directory bread(block 69) failed [ 293.723422][ T8041] FAT-fs (loop0): Directory bread(block 70) failed [ 293.776343][ T8041] FAT-fs (loop0): Directory bread(block 71) failed [ 293.827476][ T8041] FAT-fs (loop0): Directory bread(block 72) failed [ 293.878615][ T8041] FAT-fs (loop0): Directory bread(block 73) failed [ 295.247925][ T5787] block nbd1: Receive control failed (result -32) [ 295.326891][ T8059] block nbd1: shutting down sockets [ 304.766430][ T8161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.606'. [ 307.910964][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.736208][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 316.293654][ T8264] netlink: 68 bytes leftover after parsing attributes in process `syz.3.628'. [ 316.337089][ T8252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.347587][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.356000][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.562842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.595887][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.381036][ T8284] syzkaller0: entered promiscuous mode [ 318.388014][ T8284] syzkaller0: entered allmulticast mode [ 318.924586][ T8293] syzkaller0: entered promiscuous mode [ 318.956252][ T8293] syzkaller0: entered allmulticast mode [ 319.339720][ T8313] loop4: detected capacity change from 0 to 256 [ 319.427544][ T8313] FAT-fs (loop4): Directory bread(block 64) failed [ 319.448181][ T8313] FAT-fs (loop4): Directory bread(block 65) failed [ 319.471264][ T8313] FAT-fs (loop4): Directory bread(block 66) failed [ 319.489118][ T8313] FAT-fs (loop4): Directory bread(block 67) failed [ 319.497283][ T8313] FAT-fs (loop4): Directory bread(block 68) failed [ 319.514147][ T8313] FAT-fs (loop4): Directory bread(block 69) failed [ 319.574759][ T8313] FAT-fs (loop4): Directory bread(block 70) failed [ 319.594667][ T8313] FAT-fs (loop4): Directory bread(block 71) failed [ 319.603932][ T8313] FAT-fs (loop4): Directory bread(block 72) failed [ 319.610820][ T8313] FAT-fs (loop4): Directory bread(block 73) failed [ 322.087585][ T8325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.157085][ T8334] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 325.178137][ T8334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 325.246030][ T8334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 325.739887][ T8352] loop0: detected capacity change from 0 to 512 [ 326.719225][ T8352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.754828][ T8352] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.825238][ T28] audit: type=1800 audit(1789001239.626:10): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.650" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 327.819028][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.647770][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 334.171740][ T8450] loop1: detected capacity change from 0 to 256 [ 334.387098][ T8450] FAT-fs (loop1): Directory bread(block 64) failed [ 334.393868][ T8450] FAT-fs (loop1): Directory bread(block 65) failed [ 334.400792][ T8450] FAT-fs (loop1): Directory bread(block 66) failed [ 334.408023][ T8450] FAT-fs (loop1): Directory bread(block 67) failed [ 334.414876][ T8450] FAT-fs (loop1): Directory bread(block 68) failed [ 334.421871][ T8450] FAT-fs (loop1): Directory bread(block 69) failed [ 334.428738][ T8450] FAT-fs (loop1): Directory bread(block 70) failed [ 334.435521][ T8450] FAT-fs (loop1): Directory bread(block 71) failed [ 334.442407][ T8450] FAT-fs (loop1): Directory bread(block 72) failed [ 334.449146][ T8450] FAT-fs (loop1): Directory bread(block 73) failed [ 336.797479][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 336.826059][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 337.030737][ T8468] ceph: No mds server is up or the cluster is laggy [ 337.240043][ T8490] loop0: detected capacity change from 0 to 256 [ 337.282462][ T8490] FAT-fs (loop0): Directory bread(block 64) failed [ 337.289663][ T8490] FAT-fs (loop0): Directory bread(block 65) failed [ 337.296519][ T8490] FAT-fs (loop0): Directory bread(block 66) failed [ 337.303153][ T8490] FAT-fs (loop0): Directory bread(block 67) failed [ 337.309968][ T8490] FAT-fs (loop0): Directory bread(block 68) failed [ 337.316827][ T8490] FAT-fs (loop0): Directory bread(block 69) failed [ 337.323510][ T8490] FAT-fs (loop0): Directory bread(block 70) failed [ 337.330308][ T8490] FAT-fs (loop0): Directory bread(block 71) failed [ 337.337137][ T8490] FAT-fs (loop0): Directory bread(block 72) failed [ 337.343712][ T8490] FAT-fs (loop0): Directory bread(block 73) failed [ 337.372013][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 339.877080][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 339.957898][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 340.320027][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 340.392106][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 340.500000][ T8516] syzkaller0: create flow: hash 1023348661 index 1 [ 340.630618][ T8517] ceph: No mds server is up or the cluster is laggy [ 340.789406][ T8526] syzkaller0: delete flow: hash 1023348661 index 1 [ 343.332564][ T8556] cgroup: Unknown subsys name 'rlimit' [ 344.091979][ T55] libceph: connect (1)[c::]:6789 error -101 [ 344.098121][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 344.357109][ T55] libceph: connect (1)[c::]:6789 error -101 [ 344.375744][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 344.946956][ T8558] ceph: No mds server is up or the cluster is laggy [ 345.251154][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 347.761596][ T8589] loop4: detected capacity change from 0 to 16 [ 347.823800][ T8589] erofs: (device loop4): mounted with root inode @ nid 36. [ 349.211658][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 349.272336][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 349.590192][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 349.624604][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 349.896531][ T8599] ceph: No mds server is up or the cluster is laggy [ 351.363696][ T8624] loop4: detected capacity change from 0 to 16 [ 351.398193][ T8624] erofs: (device loop4): mounted with root inode @ nid 36. [ 352.957420][ T8] libceph: connect (1)[c::]:6789 error -101 [ 352.963677][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 353.575989][ T8635] ceph: No mds server is up or the cluster is laggy [ 355.108296][ T8657] loop4: detected capacity change from 0 to 16 [ 355.156435][ T8657] erofs: (device loop4): mounted with root inode @ nid 36. [ 356.307950][ T8670] cgroup: Unknown subsys name 'rlimit' [ 358.106318][ T8675] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 358.264356][ T8684] loop4: detected capacity change from 0 to 16 [ 358.338022][ T8684] erofs: (device loop4): mounted with root inode @ nid 36. [ 358.350832][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.366869][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.375956][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.386978][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.409536][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.433614][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.588065][ T8689] Illegal XDP return value 4294967294 on prog (id 35) dev N/A, expect packet loss! [ 360.526318][ T5787] Bluetooth: hci4: command tx timeout [ 361.193156][ T2946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.477599][ T8700] pim6reg: entered allmulticast mode [ 362.590407][ T2946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.601160][ T5787] Bluetooth: hci4: command tx timeout [ 362.719334][ T8713] loop0: detected capacity change from 0 to 256 [ 362.775225][ T8713] FAT-fs (loop0): Directory bread(block 64) failed [ 362.782415][ T8713] FAT-fs (loop0): Directory bread(block 65) failed [ 362.789245][ T8713] FAT-fs (loop0): Directory bread(block 66) failed [ 362.795891][ T8713] FAT-fs (loop0): Directory bread(block 67) failed [ 362.802589][ T8713] FAT-fs (loop0): Directory bread(block 68) failed [ 362.809253][ T8713] FAT-fs (loop0): Directory bread(block 69) failed [ 362.815974][ T8713] FAT-fs (loop0): Directory bread(block 70) failed [ 362.822559][ T8713] FAT-fs (loop0): Directory bread(block 71) failed [ 362.829290][ T8713] FAT-fs (loop0): Directory bread(block 72) failed [ 362.835926][ T8713] FAT-fs (loop0): Directory bread(block 73) failed [ 362.968019][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 363.073621][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 363.080446][ T2946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.414288][ T5764] libceph: connect (1)[c::]:6789 error -101 [ 363.491708][ T5764] libceph: mon0 (1)[c::]:6789 connect error [ 363.632712][ T8718] ceph: No mds server is up or the cluster is laggy [ 363.702484][ T2946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.798115][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 364.114667][ T8737] 9pnet_virtio: no channels available for device syz [ 364.686783][ T5787] Bluetooth: hci4: command tx timeout [ 365.131577][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.163645][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.171829][ T8686] bridge_slave_0: entered allmulticast mode [ 365.201809][ T8686] bridge_slave_0: entered promiscuous mode [ 366.250121][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.350886][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.444875][ T8686] bridge_slave_1: entered allmulticast mode [ 366.570183][ T8686] bridge_slave_1: entered promiscuous mode [ 366.756180][ T5787] Bluetooth: hci4: command tx timeout [ 367.110024][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.226746][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.455576][ T8686] team0: Port device team_slave_0 added [ 367.501108][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 367.558990][ T8686] team0: Port device team_slave_1 added [ 367.746694][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.753716][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.833331][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.005372][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.034748][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.075496][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.206886][ T8686] hsr_slave_0: entered promiscuous mode [ 369.213921][ T8686] hsr_slave_1: entered promiscuous mode [ 369.226734][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.246145][ T8686] Cannot create hsr debugfs directory [ 369.283361][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 369.754852][ T2946] hsr_slave_0: left promiscuous mode [ 369.789695][ T2946] hsr_slave_1: left promiscuous mode [ 369.802876][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.821842][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.847295][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.868826][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.928470][ T2946] bridge_slave_1: left allmulticast mode [ 369.941535][ T2946] bridge_slave_1: left promiscuous mode [ 369.963403][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.006922][ T2946] bridge_slave_0: left allmulticast mode [ 370.012665][ T2946] bridge_slave_0: left promiscuous mode [ 370.044453][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.127185][ T2946] veth1_macvtap: left promiscuous mode [ 370.132831][ T2946] veth0_macvtap: left promiscuous mode [ 370.144353][ T2946] veth1_vlan: left promiscuous mode [ 370.151539][ T2946] veth0_vlan: left promiscuous mode [ 370.481457][ T2946] pim6reg (unregistering): left allmulticast mode [ 370.868248][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 371.420206][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 371.481241][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 371.534129][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.593835][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.024969][ T2946] bond0 (unregistering): Released all slaves [ 372.649254][ T8686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.730005][ T8686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.750885][ T8686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.829612][ T8686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.997549][ T2946] IPVS: stop unused estimator thread 0... [ 373.335067][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.390639][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.460261][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.467539][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.527279][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.534541][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.964061][ T8895] loop4: detected capacity change from 0 to 16 [ 374.026369][ T8895] erofs: (device loop4): mounted with root inode @ nid 36. [ 374.325265][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.575393][ T8686] veth0_vlan: entered promiscuous mode [ 375.724172][ T8686] veth1_vlan: entered promiscuous mode [ 375.975980][ T8686] veth0_macvtap: entered promiscuous mode [ 375.998097][ T8956] netlink: 68 bytes leftover after parsing attributes in process `syz.0.831'. [ 376.054146][ T8686] veth1_macvtap: entered promiscuous mode [ 376.171646][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.215939][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.242337][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.290429][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.320388][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.340352][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.371832][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.470991][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.511347][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.549748][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.582361][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.594887][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 376.605352][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.632259][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.697738][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.976853][ T8686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.029348][ T8686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.078201][ T8686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.124530][ T8686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.620687][ T8993] netlink: 68 bytes leftover after parsing attributes in process `syz.0.841'. [ 377.666930][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.695383][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.834287][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.857172][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.359788][ T9012] loop5: detected capacity change from 0 to 6 [ 378.386636][ T9012] Dev loop5: unable to read RDB block 6 [ 378.426601][ T9012] loop5: unable to read partition table [ 378.432985][ T9012] loop5: partition table beyond EOD, truncated [ 378.440904][ T9012] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.808271][ T9025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.849'. [ 379.006663][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.013055][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.598542][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.859'. [ 387.017725][ T9199] syzkaller1: entered promiscuous mode [ 387.023292][ T9199] syzkaller1: entered allmulticast mode [ 390.952249][ T9235] cgroup: Unknown subsys name 'rlimit' [ 391.555043][ T9240] loop4: detected capacity change from 0 to 256 [ 391.850819][ T9240] FAT-fs (loop4): Directory bread(block 64) failed [ 391.876195][ T9240] FAT-fs (loop4): Directory bread(block 65) failed [ 391.916363][ T9240] FAT-fs (loop4): Directory bread(block 66) failed [ 391.940293][ T9240] FAT-fs (loop4): Directory bread(block 67) failed [ 392.023865][ T9240] FAT-fs (loop4): Directory bread(block 68) failed [ 392.211081][ T9240] FAT-fs (loop4): Directory bread(block 69) failed [ 392.579093][ T9240] FAT-fs (loop4): Directory bread(block 70) failed [ 392.716331][ T9240] FAT-fs (loop4): Directory bread(block 71) failed [ 392.723071][ T9240] FAT-fs (loop4): Directory bread(block 72) failed [ 392.730083][ T9240] FAT-fs (loop4): Directory bread(block 73) failed [ 395.719145][ T9272] team0: No ports can be present during mode change [ 396.055412][ T9278] block nbd5: not configured, cannot reconfigure [ 397.377704][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 397.543420][ T9304] syzkaller0: entered promiscuous mode [ 397.552581][ T9304] syzkaller0: entered allmulticast mode [ 397.575336][ T9304] tipc: Started in network mode [ 397.603657][ T9304] tipc: Node identity 72a426c4b4a5, cluster identity 4711 [ 397.624111][ T9304] tipc: Enabled bearer , priority 0 [ 397.644146][ T9303] tipc: Resetting bearer [ 397.756534][ T9303] tipc: Disabling bearer [ 402.331283][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 406.597201][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.950'. [ 406.907495][ T9393] netlink: 84 bytes leftover after parsing attributes in process `syz.0.951'. [ 407.793341][ T9401] fuse: Bad value for 'fd' [ 411.160900][ T9419] loop5: detected capacity change from 0 to 6 [ 411.172203][ T9419] Dev loop5: unable to read RDB block 6 [ 411.177922][ T9419] loop5: unable to read partition table [ 411.183768][ T9419] loop5: partition table beyond EOD, truncated [ 411.190076][ T9419] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.573689][ T9430] netlink: 84 bytes leftover after parsing attributes in process `syz.4.963'. [ 416.709081][ T9466] loop5: detected capacity change from 0 to 6 [ 416.722883][ T9466] Dev loop5: unable to read RDB block 6 [ 416.728664][ T9466] loop5: unable to read partition table [ 416.734491][ T9466] loop5: partition table beyond EOD, truncated [ 416.740849][ T9466] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.948613][ T9479] netlink: 84 bytes leftover after parsing attributes in process `syz.4.976'. [ 421.101521][ T9497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.129483][ T9497] batman_adv: batadv0: Adding interface: gretap1 [ 421.155861][ T9497] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.242979][ T9497] batman_adv: batadv0: Interface activated: gretap1 [ 422.339731][ T9514] netlink: 84 bytes leftover after parsing attributes in process `syz.4.987'. [ 423.065589][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.986'. [ 423.154191][ T9513] bridge_slave_0: left allmulticast mode [ 423.160017][ T9513] bridge_slave_0: left promiscuous mode [ 423.166194][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.265074][ T9513] bridge_slave_1: left allmulticast mode [ 423.348886][ T9513] bridge_slave_1: left promiscuous mode [ 423.424351][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.646658][ T9513] bond0: (slave bond_slave_0): Releasing backup interface [ 423.740146][ T9513] bond0: (slave bond_slave_1): Releasing backup interface [ 423.882253][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 423.932942][ T9513] team0: Port device team_slave_0 removed [ 424.177765][ T9513] team0: Port device team_slave_1 removed [ 424.184596][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.255951][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.347783][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.355292][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.551522][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e40cc00: rx timeout, send abort [ 424.900734][ T9513] batman_adv: batadv0: Interface deactivated: gretap1 [ 425.052525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e40fc00: rx timeout, send abort [ 425.061433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e40cc00: abort rx timeout. Force session deactivation [ 425.448370][ T9513] batman_adv: batadv0: Removing interface: gretap1 [ 425.560827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e40fc00: abort rx timeout. Force session deactivation [ 428.392524][ T9567] netlink: 84 bytes leftover after parsing attributes in process `syz.3.997'. [ 429.475430][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 430.689302][ T9607] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1007'. [ 430.717454][ T9431] IPVS: starting estimator thread 0... [ 430.867013][ T9608] IPVS: using max 19 ests per chain, 45600 per kthread [ 432.056882][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'. [ 432.152452][ T9589] sctp: failed to load transform for md5: -2 [ 432.389024][ T9647] pim6reg: entered allmulticast mode [ 433.248767][ T9650] syzkaller0: entered promiscuous mode [ 433.254321][ T9650] syzkaller0: entered allmulticast mode [ 433.770190][ T9677] loop5: detected capacity change from 0 to 6 [ 433.778042][ T9677] Dev loop5: unable to read RDB block 6 [ 433.783708][ T9677] loop5: unable to read partition table [ 433.789672][ T9677] loop5: partition table beyond EOD, truncated [ 433.796064][ T9677] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.168852][ T9717] loop5: detected capacity change from 0 to 6 [ 437.179245][ T9717] Dev loop5: unable to read RDB block 6 [ 437.184864][ T9717] loop5: unable to read partition table [ 437.191050][ T9717] loop5: partition table beyond EOD, truncated [ 437.197364][ T9717] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.020112][ T9760] loop5: detected capacity change from 0 to 6 [ 439.034554][ T9760] Dev loop5: unable to read RDB block 6 [ 439.040301][ T9760] loop5: unable to read partition table [ 439.046297][ T9760] loop5: partition table beyond EOD, truncated [ 439.052481][ T9760] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.515923][ T9777] loop3: detected capacity change from 0 to 256 [ 439.590405][ T9777] FAT-fs (loop3): Directory bread(block 64) failed [ 439.597200][ T9777] FAT-fs (loop3): Directory bread(block 65) failed [ 439.603859][ T9777] FAT-fs (loop3): Directory bread(block 66) failed [ 439.610646][ T9777] FAT-fs (loop3): Directory bread(block 67) failed [ 439.617394][ T9777] FAT-fs (loop3): Directory bread(block 68) failed [ 439.623946][ T9777] FAT-fs (loop3): Directory bread(block 69) failed [ 439.630652][ T9777] FAT-fs (loop3): Directory bread(block 70) failed [ 439.637566][ T9777] FAT-fs (loop3): Directory bread(block 71) failed [ 439.644306][ T9777] FAT-fs (loop3): Directory bread(block 72) failed [ 439.650977][ T9777] FAT-fs (loop3): Directory bread(block 73) failed [ 440.461013][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.467717][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.798689][ T9801] loop5: detected capacity change from 0 to 6 [ 440.805614][ T9801] Dev loop5: unable to read RDB block 6 [ 440.811660][ T9801] loop5: unable to read partition table [ 440.817551][ T9801] loop5: partition table beyond EOD, truncated [ 440.823714][ T9801] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.920465][ T9804] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1055'. [ 441.221384][ T9816] fuse: Bad value for 'fd' [ 441.463343][ T9830] loop3: detected capacity change from 0 to 256 [ 441.646712][ T9830] FAT-fs (loop3): Directory bread(block 64) failed [ 441.653399][ T9830] FAT-fs (loop3): Directory bread(block 65) failed [ 441.660182][ T9830] FAT-fs (loop3): Directory bread(block 66) failed [ 441.666902][ T9830] FAT-fs (loop3): Directory bread(block 67) failed [ 441.673591][ T9830] FAT-fs (loop3): Directory bread(block 68) failed [ 441.680251][ T9830] FAT-fs (loop3): Directory bread(block 69) failed [ 441.686973][ T9830] FAT-fs (loop3): Directory bread(block 70) failed [ 441.693553][ T9830] FAT-fs (loop3): Directory bread(block 71) failed [ 441.700293][ T9830] FAT-fs (loop3): Directory bread(block 72) failed [ 441.706925][ T9830] FAT-fs (loop3): Directory bread(block 73) failed [ 441.941932][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1062'. [ 442.373396][ T9844] syzkaller0: entered promiscuous mode [ 442.396266][ T9844] syzkaller0: entered allmulticast mode [ 442.863279][ T9858] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1067'. [ 442.914802][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.922648][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.977259][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1069'. [ 443.296836][ T9863] veth0_to_bond: entered promiscuous mode [ 443.312974][ T9863] veth0_to_bond: entered allmulticast mode [ 443.983411][ T9904] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1079'. [ 444.166454][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1080'. [ 444.469242][ T9923] netlink: 'syz.0.1086': attribute type 2 has an invalid length. [ 445.408464][ T9929] 9pnet_virtio: no channels available for device syz [ 447.035568][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1091'. [ 447.429026][ T9961] loop5: detected capacity change from 0 to 6 [ 447.766496][ T9961] Dev loop5: unable to read RDB block 6 [ 447.772464][ T9961] loop5: unable to read partition table [ 447.779514][ T9961] loop5: partition table beyond EOD, truncated [ 447.786427][ T9961] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.492301][ T9976] 9pnet_virtio: no channels available for device syz [ 449.296720][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1102'. [ 449.657890][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1106'. [ 449.695258][T10008] hsr_slave_0: left promiscuous mode [ 449.777137][T10008] hsr_slave_1: left promiscuous mode [ 449.910370][T10013] loop5: detected capacity change from 0 to 6 [ 449.934644][T10013] Dev loop5: unable to read RDB block 6 [ 449.940803][T10013] loop5: unable to read partition table [ 449.947817][T10013] loop5: partition table beyond EOD, truncated [ 449.954109][T10013] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.931659][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'. [ 451.942774][T10032] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1112'. [ 452.433117][T10046] loop5: detected capacity change from 0 to 6 [ 452.446495][T10046] Dev loop5: unable to read RDB block 6 [ 452.452300][T10046] loop5: unable to read partition table [ 452.459133][T10046] loop5: partition table beyond EOD, truncated [ 452.465409][T10046] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.576231][T10014] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 452.858602][T10014] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.982678][T10014] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.107827][T10014] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 453.183233][T10014] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.291763][T10014] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 453.954326][T10014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.135275][T10014] usb 4-1: Product: syz [ 454.146240][T10014] usb 4-1: Manufacturer: syz [ 454.151016][T10014] usb 4-1: SerialNumber: syz [ 454.284222][T10014] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 454.457229][T10014] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 454.522286][T10014] usbserial_generic 4-1:1.0: generic converter detected [ 454.581769][T10014] usb 4-1: generic converter now attached to ttyUSB0 [ 454.649360][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 454.676483][T10014] usb 4-1: USB disconnect, device number 2 [ 454.722241][T10014] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 454.770228][T10014] usbserial_generic 4-1:1.0: device disconnected [ 455.260786][T10078] syzkaller0: entered promiscuous mode [ 455.271005][T10078] syzkaller0: entered allmulticast mode [ 456.530165][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 457.190547][T10106] syzkaller0: entered promiscuous mode [ 457.259582][T10106] syzkaller0: entered allmulticast mode [ 457.936603][ T5787] Bluetooth: hci4: link tx timeout [ 457.944450][ T5787] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.904431][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 460.040260][T10114] Bluetooth: hci4: command 0x0406 tx timeout [ 463.835511][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 465.268763][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 467.966414][ T5816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 468.092465][T10286] vlan2: entered promiscuous mode [ 468.101446][T10286] vlan2: entered allmulticast mode [ 468.109737][T10286] hsr_slave_1: entered allmulticast mode [ 468.171585][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.240119][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.299970][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 468.347917][ T5816] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 468.456927][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.513844][T10289] hsr_slave_0: left promiscuous mode [ 468.677499][ T5816] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 468.782915][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.879580][ T5816] usb 5-1: Product: syz [ 468.934320][ T5816] usb 5-1: Manufacturer: syz [ 468.965993][ T5816] usb 5-1: SerialNumber: syz [ 469.092808][ T5816] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 469.201680][ T5816] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 469.322703][ T5816] usbserial_generic 5-1:1.0: generic converter detected [ 469.507761][ T5816] usb 5-1: generic converter now attached to ttyUSB0 [ 469.542173][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1202'. [ 469.554118][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1202'. [ 469.573655][ T5816] usb 5-1: USB disconnect, device number 4 [ 469.635279][ T5816] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 469.656449][T10293] bond0: entered promiscuous mode [ 469.712601][ T5816] usbserial_generic 5-1:1.0: device disconnected [ 469.754042][T10293] bond0: left promiscuous mode [ 470.880889][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 472.359093][T10325] 9pnet_virtio: no channels available for device syz [ 473.455987][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 474.288219][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.316106][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.339567][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 474.360022][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.419143][ T8] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 474.457460][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.465538][ T8] usb 1-1: Product: syz [ 474.496158][ T8] usb 1-1: Manufacturer: syz [ 474.501094][ T8] usb 1-1: SerialNumber: syz [ 474.541806][ T8] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 474.566855][ T8] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 474.596181][ T8] usbserial_generic 1-1:1.0: generic converter detected [ 474.614690][ T8] usb 1-1: generic converter now attached to ttyUSB0 [ 474.726261][T10348] lo: entered promiscuous mode [ 474.736811][T10348] lo: left promiscuous mode [ 474.798037][ T8] usb 1-1: USB disconnect, device number 4 [ 474.830373][ T8] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 474.854415][ T8] usbserial_generic 1-1:1.0: device disconnected [ 476.039827][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 476.093529][T10365] vlan0: entered promiscuous mode [ 478.402443][T10387] tipc: Started in network mode [ 478.414401][T10387] tipc: Node identity da5bca7ee0a3, cluster identity 4711 [ 478.426178][T10387] tipc: Enabled bearer , priority 0 [ 478.435549][T10387] syzkaller0: entered promiscuous mode [ 478.442706][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 478.503952][T10387] syzkaller0: entered allmulticast mode [ 478.762382][T10390] tipc: Resetting bearer [ 479.083092][T10385] tipc: Resetting bearer [ 479.186110][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.293260][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.303150][ T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 479.313836][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.332040][ T23] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 479.341328][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.351408][ T23] usb 6-1: Product: syz [ 479.355632][ T23] usb 6-1: Manufacturer: syz [ 479.360406][ T23] usb 6-1: SerialNumber: syz [ 479.363034][T10385] tipc: Disabling bearer [ 479.392892][ T23] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 479.406830][ T23] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 479.418374][ T23] usbserial_generic 6-1:1.0: generic converter detected [ 479.436695][ T23] usb 6-1: generic converter now attached to ttyUSB0 [ 479.592026][ T5816] usb 6-1: USB disconnect, device number 2 [ 479.613474][ T5816] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 479.643103][ T5816] usbserial_generic 6-1:1.0: device disconnected [ 482.925840][ T5816] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 484.058155][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.427209][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.926659][ T5816] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 484.937201][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.954097][ T5816] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 484.963530][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.971806][ T5816] usb 5-1: Product: syz [ 484.976256][ T5816] usb 5-1: Manufacturer: syz [ 484.981302][ T5816] usb 5-1: SerialNumber: syz [ 484.995675][ T5816] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 485.007706][ T5816] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 485.018645][ T5816] usbserial_generic 5-1:1.0: generic converter detected [ 485.029599][ T5816] usb 5-1: generic converter now attached to ttyUSB0 [ 485.226676][ T23] usb 5-1: USB disconnect, device number 5 [ 485.414782][ T23] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 485.559494][ T23] usbserial_generic 5-1:1.0: device disconnected [ 488.196513][ T9431] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 488.284498][T10512] loop0: detected capacity change from 0 to 256 [ 488.515670][ T9431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.629353][ T9431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.738128][ T9431] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 488.794901][ T9431] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.233285][T10512] FAT-fs (loop0): Directory bread(block 64) failed [ 489.319674][T10512] FAT-fs (loop0): Directory bread(block 65) failed [ 489.389973][T10512] FAT-fs (loop0): Directory bread(block 66) failed [ 489.453875][T10512] FAT-fs (loop0): Directory bread(block 67) failed [ 489.514256][T10512] FAT-fs (loop0): Directory bread(block 68) failed [ 489.578061][T10512] FAT-fs (loop0): Directory bread(block 69) failed [ 489.696248][ T9431] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 489.710719][ T9431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.718712][T10512] FAT-fs (loop0): Directory bread(block 70) failed [ 489.718812][T10512] FAT-fs (loop0): Directory bread(block 71) failed [ 489.719069][T10512] FAT-fs (loop0): Directory bread(block 72) failed [ 489.725359][ T9431] usb 5-1: Product: syz [ 489.725408][ T9431] usb 5-1: Manufacturer: syz [ 489.747736][ T9431] usb 5-1: SerialNumber: syz [ 489.760755][ T9431] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 489.772397][ T9431] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 489.783589][ T9431] usbserial_generic 5-1:1.0: generic converter detected [ 489.805470][ T9431] usb 5-1: generic converter now attached to ttyUSB0 [ 489.826006][T10512] FAT-fs (loop0): Directory bread(block 73) failed [ 489.993677][ T2181] usb 5-1: USB disconnect, device number 6 [ 490.057813][ T2181] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 490.087708][ T2181] usbserial_generic 5-1:1.0: device disconnected [ 490.471215][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 491.905215][T10565] fuse: Bad value for 'group_id' [ 491.949848][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1288'. [ 492.023138][T10568] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 492.027885][ T2181] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 492.130315][T10568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.235879][ T2181] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.331282][ T2181] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.428604][ T2181] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 492.519806][ T2181] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.690974][ T2181] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 492.718375][T10574] bond1: (slave geneve2): making interface the new active one [ 492.748048][ T2181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.839643][ T2181] usb 6-1: Product: syz [ 492.879310][ T2181] usb 6-1: Manufacturer: syz [ 492.922144][ T2181] usb 6-1: SerialNumber: syz [ 492.991944][T10574] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 493.146548][ T2181] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 493.233090][T10579] loop4: detected capacity change from 0 to 256 [ 493.329626][ T2181] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 493.404796][ T2181] usbserial_generic 6-1:1.0: generic converter detected [ 493.481472][T10579] FAT-fs (loop4): Directory bread(block 64) failed [ 493.490811][ T2181] usb 6-1: generic converter now attached to ttyUSB0 [ 493.530335][T10579] FAT-fs (loop4): Directory bread(block 65) failed [ 493.560681][ T2181] usb 6-1: USB disconnect, device number 3 [ 493.596579][T10579] FAT-fs (loop4): Directory bread(block 66) failed [ 493.621905][T10579] FAT-fs (loop4): Directory bread(block 67) failed [ 493.627580][ T2181] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 493.645893][T10579] FAT-fs (loop4): Directory bread(block 68) failed [ 493.693501][ T2181] usbserial_generic 6-1:1.0: device disconnected [ 493.708503][T10579] FAT-fs (loop4): Directory bread(block 69) failed [ 493.762741][T10579] FAT-fs (loop4): Directory bread(block 70) failed [ 493.806745][T10579] FAT-fs (loop4): Directory bread(block 71) failed [ 493.882381][T10579] FAT-fs (loop4): Directory bread(block 72) failed [ 493.909645][T10579] FAT-fs (loop4): Directory bread(block 73) failed [ 495.780046][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 495.796333][T10612] netlink: 'syz.3.1302': attribute type 7 has an invalid length. [ 495.816289][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 495.834018][T10612] team0: entered promiscuous mode [ 495.845800][T10612] team_slave_0: entered promiscuous mode [ 495.851806][T10612] team_slave_1: entered promiscuous mode [ 495.880509][T10612] bond0: entered promiscuous mode [ 495.895815][T10612] bond_slave_0: entered promiscuous mode [ 495.901969][T10612] bond_slave_1: entered promiscuous mode [ 495.911639][T10612] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 497.089005][T10597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.806472][T10644] loop0: detected capacity change from 0 to 256 [ 497.830256][T10644] FAT-fs (loop0): Directory bread(block 64) failed [ 497.837160][T10644] FAT-fs (loop0): Directory bread(block 65) failed [ 497.843917][T10644] FAT-fs (loop0): Directory bread(block 66) failed [ 497.851052][T10644] FAT-fs (loop0): Directory bread(block 67) failed [ 497.857779][T10644] FAT-fs (loop0): Directory bread(block 68) failed [ 497.864371][T10644] FAT-fs (loop0): Directory bread(block 69) failed [ 497.871115][T10644] FAT-fs (loop0): Directory bread(block 70) failed [ 497.877836][T10644] FAT-fs (loop0): Directory bread(block 71) failed [ 497.884556][T10644] FAT-fs (loop0): Directory bread(block 72) failed [ 497.891229][T10644] FAT-fs (loop0): Directory bread(block 73) failed [ 498.097049][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 498.446150][T10663] syzkaller0: entered promiscuous mode [ 498.451812][T10663] syzkaller0: entered allmulticast mode [ 498.645072][T10666] tipc: Started in network mode [ 498.650389][T10666] tipc: Node identity 66035736a68d, cluster identity 4711 [ 498.663841][T10666] tipc: Enabled bearer , priority 0 [ 498.693270][T10666] syzkaller0: entered promiscuous mode [ 498.704294][T10666] syzkaller0: entered allmulticast mode [ 498.802480][T10666] tipc: Resetting bearer [ 499.047687][T10665] tipc: Resetting bearer [ 499.548467][T10665] tipc: Disabling bearer [ 500.010790][T10681] loop0: detected capacity change from 0 to 256 [ 500.084392][T10681] FAT-fs (loop0): Directory bread(block 64) failed [ 500.091752][T10681] FAT-fs (loop0): Directory bread(block 65) failed [ 500.098535][T10681] FAT-fs (loop0): Directory bread(block 66) failed [ 500.105601][T10681] FAT-fs (loop0): Directory bread(block 67) failed [ 500.112373][T10681] FAT-fs (loop0): Directory bread(block 68) failed [ 500.119035][T10681] FAT-fs (loop0): Directory bread(block 69) failed [ 500.125706][T10681] FAT-fs (loop0): Directory bread(block 70) failed [ 500.132334][T10681] FAT-fs (loop0): Directory bread(block 71) failed [ 500.139070][T10681] FAT-fs (loop0): Directory bread(block 72) failed [ 500.145663][T10681] FAT-fs (loop0): Directory bread(block 73) failed [ 501.233738][T10713] loop3: detected capacity change from 0 to 256 [ 501.355445][T10713] FAT-fs (loop3): Directory bread(block 64) failed [ 501.362138][T10713] FAT-fs (loop3): Directory bread(block 65) failed [ 501.368939][T10713] FAT-fs (loop3): Directory bread(block 66) failed [ 501.375502][T10713] FAT-fs (loop3): Directory bread(block 67) failed [ 501.382175][T10713] FAT-fs (loop3): Directory bread(block 68) failed [ 501.388868][T10713] FAT-fs (loop3): Directory bread(block 69) failed [ 501.395486][T10713] FAT-fs (loop3): Directory bread(block 70) failed [ 501.402087][T10713] FAT-fs (loop3): Directory bread(block 71) failed [ 501.408786][T10713] FAT-fs (loop3): Directory bread(block 72) failed [ 501.415395][T10713] FAT-fs (loop3): Directory bread(block 73) failed [ 501.882707][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.889313][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.168640][T10721] tipc: Enabled bearer , priority 0 [ 502.184423][T10721] syzkaller0: entered promiscuous mode [ 502.193711][T10721] syzkaller0: entered allmulticast mode [ 502.222100][T10721] tipc: Resetting bearer [ 502.246184][T10717] tipc: Resetting bearer [ 502.323524][T10717] tipc: Disabling bearer [ 502.686505][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1341'. [ 505.841505][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1353'. [ 506.098095][T10768] loop5: detected capacity change from 0 to 6 [ 506.116478][T10768] Dev loop5: unable to read RDB block 6 [ 506.122355][T10768] loop5: unable to read partition table [ 506.129289][T10768] loop5: partition table beyond EOD, truncated [ 506.135624][T10768] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 507.113838][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 508.626629][T10800] fuse: Unknown parameter 'grou00000000000000000000' [ 508.807700][T10804] tipc: Enabled bearer , priority 0 [ 508.839824][T10804] syzkaller0: entered promiscuous mode [ 508.845379][T10804] syzkaller0: entered allmulticast mode [ 508.956952][T10804] tipc: Resetting bearer [ 508.967454][T10803] tipc: Resetting bearer [ 509.014118][T10803] tipc: Disabling bearer [ 509.213026][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 510.377354][T10832] fuse: Unknown parameter 'grou00000000000000000000' [ 510.799137][T10844] tipc: Enabled bearer , priority 0 [ 510.828079][T10844] syzkaller0: entered promiscuous mode [ 510.847581][T10844] syzkaller0: entered allmulticast mode [ 510.908960][T10844] tipc: Resetting bearer [ 510.948488][T10841] tipc: Resetting bearer [ 511.025034][T10841] tipc: Disabling bearer [ 511.475428][T10860] fuse: Unknown parameter 'group_i00000000000000000000' [ 513.356488][T10887] tipc: Enabled bearer , priority 0 [ 513.384557][T10887] syzkaller0: entered promiscuous mode [ 513.436374][T10887] syzkaller0: entered allmulticast mode [ 513.452209][T10887] tipc: Resetting bearer [ 513.473213][T10886] tipc: Resetting bearer [ 513.608036][T10886] tipc: Disabling bearer [ 513.846573][T10902] fuse: Unknown parameter 'group_i00000000000000000000' [ 516.368797][T10918] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1400'. [ 516.985185][T10944] fuse: Unknown parameter 'group_i00000000000000000000' [ 517.266550][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 519.762142][T10930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.393110][T10975] fuse: Unknown parameter 'group_id00000000000000000000' [ 522.784455][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 523.061057][T11006] bridge0: port 1(vlan2) entered blocking state [ 523.067866][T11006] bridge0: port 1(vlan2) entered disabled state [ 523.074332][T11006] vlan2: entered allmulticast mode [ 523.080553][T11006] geneve0: entered allmulticast mode [ 523.583301][T11017] loop5: detected capacity change from 0 to 256 [ 523.615600][T11017] FAT-fs (loop5): Directory bread(block 64) failed [ 523.622831][T11017] FAT-fs (loop5): Directory bread(block 65) failed [ 523.629569][T11017] FAT-fs (loop5): Directory bread(block 66) failed [ 523.636284][T11017] FAT-fs (loop5): Directory bread(block 67) failed [ 523.642940][T11017] FAT-fs (loop5): Directory bread(block 68) failed [ 523.649639][T11017] FAT-fs (loop5): Directory bread(block 69) failed [ 523.657056][T11017] FAT-fs (loop5): Directory bread(block 70) failed [ 523.663633][T11017] FAT-fs (loop5): Directory bread(block 71) failed [ 523.670399][T11017] FAT-fs (loop5): Directory bread(block 72) failed [ 523.677024][T11017] FAT-fs (loop5): Directory bread(block 73) failed [ 524.425313][T11019] fuse: Unknown parameter 'group_id00000000000000000000' [ 525.623308][T10985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.921837][T11047] fuse: Unknown parameter 'group_id00000000000000000000' [ 525.935006][T11048] loop0: detected capacity change from 0 to 256 [ 525.972647][T11048] FAT-fs (loop0): Directory bread(block 64) failed [ 525.979575][T11048] FAT-fs (loop0): Directory bread(block 65) failed [ 525.986372][T11048] FAT-fs (loop0): Directory bread(block 66) failed [ 525.992941][T11048] FAT-fs (loop0): Directory bread(block 67) failed [ 525.999654][T11048] FAT-fs (loop0): Directory bread(block 68) failed [ 526.006322][T11048] FAT-fs (loop0): Directory bread(block 69) failed [ 526.013468][T11048] FAT-fs (loop0): Directory bread(block 70) failed [ 526.020111][T11048] FAT-fs (loop0): Directory bread(block 71) failed [ 526.026891][T11048] FAT-fs (loop0): Directory bread(block 72) failed [ 526.033470][T11048] FAT-fs (loop0): Directory bread(block 73) failed [ 526.490259][T11064] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 526.866031][T10014] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 527.015903][T10014] usb 5-1: device descriptor read/64, error -71 [ 527.296040][T10014] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 527.456273][T10014] usb 5-1: device descriptor read/64, error -71 [ 527.586539][T10014] usb usb5-port1: attempt power cycle [ 528.006581][T10014] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 528.047695][T10014] usb 5-1: device descriptor read/8, error -71 [ 528.316025][T10014] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 528.357051][T10014] usb 5-1: device descriptor read/8, error -71 [ 528.476530][T10014] usb usb5-port1: unable to enumerate USB device [ 529.671002][T11069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.386562][T11105] 0: reclassify loop, rule prio 0, protocol 03 [ 530.676929][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 530.846120][ T23] usb 6-1: device descriptor read/64, error -71 [ 531.135869][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 531.316078][ T23] usb 6-1: device descriptor read/64, error -71 [ 531.366298][T11144] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 531.436655][ T23] usb usb6-port1: attempt power cycle [ 531.449262][T11146] 9pnet_virtio: no channels available for device syz [ 531.866079][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 531.918077][ T23] usb 6-1: device descriptor read/8, error -71 [ 532.196169][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 532.251476][ T23] usb 6-1: device descriptor read/8, error -71 [ 532.328907][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1483'. [ 532.357563][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 532.387694][ T23] usb usb6-port1: unable to enumerate USB device [ 532.489234][T11181] 9pnet_virtio: no channels available for device syz [ 533.475496][T11212] 9pnet_virtio: no channels available for device syz [ 534.107961][T11214] syzkaller0: entered promiscuous mode [ 534.135926][T11214] syzkaller0: entered allmulticast mode [ 534.329690][T11218] loop5: detected capacity change from 0 to 6 [ 534.370304][T11218] Dev loop5: unable to read RDB block 6 [ 534.376473][T11218] loop5: unable to read partition table [ 534.382983][T11218] loop5: partition table beyond EOD, truncated [ 534.390125][T11218] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.876770][T10014] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 535.922702][T11241] bridge0: port 3(vlan2) entered blocking state [ 535.930087][T11241] bridge0: port 3(vlan2) entered disabled state [ 535.938557][T11241] vlan2: entered allmulticast mode [ 535.953246][T11241] geneve0: entered allmulticast mode [ 535.968969][T11241] vlan2: entered promiscuous mode [ 535.977522][T11241] geneve0: entered promiscuous mode [ 536.047181][T10014] usb 4-1: device descriptor read/64, error -71 [ 536.192710][T11248] xt_hashlimit: max too large, truncated to 1048576 [ 536.212912][T11248] No such timeout policy "syz1" [ 536.219810][T11244] 9pnet_virtio: no channels available for device syz [ 536.335964][T10014] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 536.455018][T11252] loop5: detected capacity change from 0 to 6 [ 536.471932][T11252] Dev loop5: unable to read RDB block 6 [ 536.478189][T11252] loop5: unable to read partition table [ 536.484921][T11252] loop5: partition table beyond EOD, truncated [ 536.491347][T11252] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 536.579632][T10014] usb 4-1: device descriptor read/64, error -71 [ 536.787374][T10014] usb usb4-port1: attempt power cycle [ 537.274755][T10014] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 537.297337][T11256] syzkaller0: entered promiscuous mode [ 537.302990][T11256] syzkaller0: entered allmulticast mode [ 537.326983][T10014] usb 4-1: device descriptor read/8, error -71 [ 537.380752][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 537.529238][T11260] vlan3: entered promiscuous mode [ 537.544789][T11260] vlan3: entered allmulticast mode [ 537.550355][T11260] hsr_slave_1: entered allmulticast mode [ 537.626140][T10014] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 537.690285][T10014] usb 4-1: device descriptor read/8, error -71 [ 537.826209][T10014] usb usb4-port1: unable to enumerate USB device [ 537.958155][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1516'. [ 538.513463][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1520'. [ 538.695386][T11290] vlan3: entered promiscuous mode [ 538.702799][T11290] hsr_slave_1: entered promiscuous mode [ 538.722502][T11290] vlan3: entered allmulticast mode [ 538.729525][T11290] hsr_slave_1: entered allmulticast mode [ 538.738888][T11288] syzkaller0: entered promiscuous mode [ 538.744411][T11288] syzkaller0: entered allmulticast mode [ 538.785847][T11294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1523'. [ 539.048590][T11303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 539.545835][T10014] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 539.749181][T10014] usb 5-1: config 0 has no interfaces? [ 539.766561][T10014] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 539.783851][T11327] syzkaller0: entered promiscuous mode [ 539.789624][T10014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.798882][T11327] syzkaller0: entered allmulticast mode [ 539.805171][T10014] usb 5-1: Product: syz [ 539.824481][T10014] usb 5-1: Manufacturer: syz [ 539.830005][T10014] usb 5-1: SerialNumber: syz [ 539.849270][T10014] usb 5-1: config 0 descriptor?? [ 540.076770][ T5816] usb 5-1: USB disconnect, device number 11 [ 540.178825][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1538'. [ 541.064455][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1550'. [ 541.725952][ T5816] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 541.918774][ T5816] usb 4-1: config 0 has no interfaces? [ 541.929400][ T5816] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 541.951208][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.962607][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 541.976276][ T5816] usb 4-1: Product: syz [ 541.981095][ T5816] usb 4-1: Manufacturer: syz [ 541.989270][ T5816] usb 4-1: SerialNumber: syz [ 542.008109][ T5816] usb 4-1: config 0 descriptor?? [ 542.135025][T11407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 542.219675][ T5816] usb 4-1: USB disconnect, device number 7 [ 544.253080][T11375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.537065][T11422] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1567'. [ 545.213698][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 545.236280][T11451] fuse: Bad value for 'fd' [ 545.426589][T11450] syzkaller0: entered allmulticast mode [ 545.445301][T11444] syzkaller0: entered promiscuous mode [ 545.458202][T11457] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1579'. [ 548.189006][T11497] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1589'. [ 548.506533][T11508] tun0: tun_chr_ioctl cmd 2147767511 [ 549.032243][T11526] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1600'. [ 549.812876][T11547] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1611'. [ 551.470671][T11577] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1622'. [ 553.606578][T11611] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1634'. [ 555.168881][T11644] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1647'. [ 556.573125][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 556.667716][T11670] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1659'. [ 556.750999][T11673] bridge0: port 3(vlan4) entered blocking state [ 556.763708][T11673] bridge0: port 3(vlan4) entered disabled state [ 556.784573][T11673] vlan4: entered allmulticast mode [ 556.790796][T11673] geneve0: entered allmulticast mode [ 556.798245][T11673] vlan4: entered promiscuous mode [ 556.803570][T11673] geneve0: entered promiscuous mode [ 557.411291][T11698] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1670'. [ 557.665098][T11703] syzkaller0: entered promiscuous mode [ 557.681513][T11703] syzkaller0: entered allmulticast mode [ 557.700051][T11703] tipc: Started in network mode [ 557.718069][T11703] tipc: Node identity 6afc1b39c569, cluster identity 4711 [ 557.746406][T11703] tipc: Enabled bearer , priority 0 [ 557.764299][T11701] tipc: Resetting bearer [ 557.839351][T11701] tipc: Disabling bearer [ 558.360242][T11720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1679'. [ 558.455913][ T5764] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 558.703207][ T5764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.875555][ T5764] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 558.998156][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.089722][ T5764] usb 6-1: Product: syz [ 559.132539][ T5764] usb 6-1: Manufacturer: syz [ 559.180877][ T5764] usb 6-1: SerialNumber: syz [ 559.246992][ T5764] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 559.308886][ T5764] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 559.324419][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 559.371856][ T5764] usbserial_generic 6-1:1.0: device has no bulk endpoints [ 559.492150][ T2181] usb 6-1: USB disconnect, device number 8 [ 559.665471][T11736] syzkaller0: entered promiscuous mode [ 559.673922][T11736] syzkaller0: entered allmulticast mode [ 559.691254][T11736] tipc: Enabled bearer , priority 0 [ 559.716524][T11735] tipc: Resetting bearer [ 559.758649][T11735] tipc: Disabling bearer [ 559.851702][T11744] veth1_macvtap: left promiscuous mode [ 559.874833][T11744] macsec0: entered promiscuous mode [ 559.948084][T11746] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1689'. [ 560.356410][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 560.578568][T11767] syzkaller0: entered promiscuous mode [ 560.599366][T11767] syzkaller0: entered allmulticast mode [ 560.631101][T11767] tipc: Enabled bearer , priority 0 [ 560.655640][T11763] tipc: Resetting bearer [ 560.767137][T11763] tipc: Disabling bearer [ 561.047835][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 561.667454][T11799] syzkaller0: entered promiscuous mode [ 561.673253][T11799] syzkaller0: entered allmulticast mode [ 561.684641][T11799] tipc: Enabled bearer , priority 0 [ 561.716488][T11798] tipc: Resetting bearer [ 561.825318][T11798] tipc: Disabling bearer [ 562.036929][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 562.591391][T11826] syzkaller0: entered promiscuous mode [ 562.610679][T11826] syzkaller0: entered allmulticast mode [ 562.656433][T11826] tipc: Enabled bearer , priority 0 [ 562.667951][T11825] tipc: Resetting bearer [ 562.743726][T11825] tipc: Disabling bearer [ 562.970988][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1727'. [ 563.326525][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.341448][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.779939][T11877] syzkaller0: entered promiscuous mode [ 565.805935][T11877] syzkaller0: entered allmulticast mode [ 565.848255][T11877] tipc: Enabled bearer , priority 0 [ 565.937165][T11874] tipc: Resetting bearer [ 566.484377][T11874] tipc: Disabling bearer [ 567.412140][T11914] syzkaller0: entered promiscuous mode [ 567.445818][T11914] syzkaller0: entered allmulticast mode [ 567.857111][T11928] syzkaller0: entered promiscuous mode [ 567.862732][T11928] syzkaller0: entered allmulticast mode [ 567.873665][T11928] tipc: Enabled bearer , priority 0 [ 568.565179][T11927] tipc: Resetting bearer [ 568.790154][T11927] tipc: Disabling bearer [ 570.906234][T11947] syzkaller0: entered promiscuous mode [ 570.911796][T11947] syzkaller0: entered allmulticast mode [ 571.884452][T11960] syzkaller0: entered promiscuous mode [ 571.898090][T11960] syzkaller0: entered allmulticast mode [ 571.924950][T11965] tipc: Enabled bearer , priority 0 [ 571.962934][T11963] tipc: Resetting bearer [ 572.100292][T11963] tipc: Disabling bearer [ 573.907098][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 574.122669][T11988] syzkaller0: entered promiscuous mode [ 574.134023][T11988] syzkaller0: entered allmulticast mode [ 574.395205][T11997] syzkaller0: entered promiscuous mode [ 574.423532][T11997] syzkaller0: entered allmulticast mode [ 574.442267][T11997] tipc: Enabled bearer , priority 0 [ 574.971983][T11996] tipc: Resetting bearer [ 575.177691][T11996] tipc: Disabling bearer [ 575.581121][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1779'. [ 576.004216][T12022] syzkaller0: entered promiscuous mode [ 576.019643][T12022] syzkaller0: entered allmulticast mode [ 576.171606][T12024] syzkaller0: entered promiscuous mode [ 576.177492][T12024] syzkaller0: entered allmulticast mode [ 576.486276][T12036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1792'. [ 576.844315][T12056] tipc: Enabling of bearer rejected, failed to enable media [ 578.113192][T12098] tipc: Enabling of bearer rejected, failed to enable media [ 580.271075][T12133] tipc: Enabling of bearer rejected, failed to enable media [ 580.761608][T10114] Bluetooth: hci4: command 0x0406 tx timeout [ 582.289505][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 582.925528][T12176] tipc: Enabling of bearer rejected, failed to enable media [ 583.338779][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 584.178847][T12212] tipc: Enabling of bearer rejected, failed to enable media [ 585.296946][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 585.315014][T12230] loop5: detected capacity change from 0 to 512 [ 585.325453][T12230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 585.351835][T12230] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1858: invalid indirect mapped block 2304 (level 1) [ 585.383122][T12230] EXT4-fs (loop5): Remounting filesystem read-only [ 585.392765][T12230] EXT4-fs (loop5): 1 truncate cleaned up [ 585.401108][T12230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.487352][T12236] Bluetooth: MGMT ver 1.22 [ 585.500280][ T8686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.598314][T12236] loop0: detected capacity change from 0 to 2048 [ 585.652619][T12236] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 585.844734][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 589.698334][T12280] tipc: Enabling of bearer rejected, failed to enable media [ 590.802370][T12292] loop3: detected capacity change from 0 to 256 [ 590.936485][T12292] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 590.989495][T12292] FAT-fs (loop3): Filesystem has been set read-only [ 591.007637][T12292] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 592.465774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 593.730534][T12314] tipc: Enabling of bearer rejected, failed to enable media [ 596.819697][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 597.008020][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.039462][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.073624][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.127668][ T5818] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 597.172087][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.200165][ T5818] usb 4-1: Product: syz [ 597.204401][ T5818] usb 4-1: Manufacturer: syz [ 597.253133][ T5818] usb 4-1: SerialNumber: syz [ 597.290416][ T5818] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 597.325210][ T5818] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 597.358809][ T5818] usbserial_generic 4-1:1.0: device has no bulk endpoints [ 597.557111][ T5818] usb 4-1: USB disconnect, device number 8 [ 598.700940][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 600.684846][T12405] loop4: detected capacity change from 0 to 1024 [ 600.875964][ T5818] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 601.077963][ T5818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.101895][ T5818] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.124295][ T5818] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.157929][ T5818] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 601.187946][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.206410][ T5818] usb 6-1: Product: syz [ 601.217636][ T5818] usb 6-1: Manufacturer: syz [ 601.228409][ T5818] usb 6-1: SerialNumber: syz [ 601.251561][ T5818] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 601.294790][ T5818] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 601.330352][ T5818] usbserial_generic 6-1:1.0: device has no bulk endpoints [ 601.748686][T10014] usb 6-1: USB disconnect, device number 9 [ 602.423067][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 602.483453][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 602.644896][T12426] syzkaller0: entered promiscuous mode [ 602.655783][T12426] syzkaller0: entered allmulticast mode [ 602.817869][T12428] bridge0: entered promiscuous mode [ 602.827421][T12427] bridge0: left promiscuous mode [ 604.545850][ T5764] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 604.758210][ T5764] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.779039][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.803398][ T5764] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.840077][T12465] syzkaller0: entered promiscuous mode [ 604.845075][ T5764] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 604.855006][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.858253][T12465] syzkaller0: entered allmulticast mode [ 604.888274][ T5764] usb 1-1: Product: syz [ 604.897085][ T5764] usb 1-1: Manufacturer: syz [ 604.907349][ T5764] usb 1-1: SerialNumber: syz [ 604.925438][ T5764] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 604.945944][ T5764] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 604.974703][ T5764] usbserial_generic 1-1:1.0: device has no bulk endpoints [ 605.134336][T10014] usb 1-1: USB disconnect, device number 5 [ 607.071614][T12483] loop3: detected capacity change from 0 to 128 [ 607.127673][T12483] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 607.195396][T12483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.263108][ T28] audit: type=1800 audit(1789001521.066:11): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1935" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 608.686016][ T2135] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 609.016687][ T2135] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.692281][ T2135] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.703130][ T2135] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 610.713513][ T2135] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.741150][ T2135] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 610.766226][ T2135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.774304][ T2135] usb 5-1: Product: syz [ 610.778875][ T2135] usb 5-1: Manufacturer: syz [ 610.783522][ T2135] usb 5-1: SerialNumber: syz [ 610.808237][ T2135] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 610.820862][ T2135] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 610.831984][ T2135] usbserial_generic 5-1:1.0: generic converter detected [ 610.842312][ T2135] usb 5-1: generic converter now attached to ttyUSB0 [ 611.059363][ T5817] usb 5-1: USB disconnect, device number 12 [ 611.086455][ T5817] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 611.103237][ T5817] usbserial_generic 5-1:1.0: device disconnected [ 611.115274][T12524] loop0: detected capacity change from 0 to 256 [ 611.174271][T12524] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 612.476691][T12533] syzkaller0: entered promiscuous mode [ 612.482395][T12533] syzkaller0: entered allmulticast mode [ 615.262026][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1955'. [ 615.529430][T12558] loop5: detected capacity change from 0 to 256 [ 615.657514][T12558] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 616.645305][T12566] syzkaller0: entered promiscuous mode [ 616.651726][T12566] syzkaller0: entered allmulticast mode [ 619.298022][T12594] loop3: detected capacity change from 0 to 128 [ 619.336497][T12594] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 619.495872][T12594] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 619.580191][T12593] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 619.913169][T12604] syzkaller0: entered promiscuous mode [ 619.923595][T12604] syzkaller0: entered allmulticast mode [ 621.950476][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1988'. [ 622.388046][T12640] syzkaller0: entered promiscuous mode [ 622.393706][T12640] syzkaller0: entered allmulticast mode [ 624.350706][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1998'. [ 624.656492][ T5816] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 624.715852][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 624.764081][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.770771][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.877855][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.907173][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.929758][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.945950][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.975825][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.985653][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 624.985986][ T5816] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.016746][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.042050][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.066899][ T8] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 625.078297][ T5816] usb 4-1: config 0 descriptor?? [ 625.085875][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.106145][ T8] usb 1-1: Product: syz [ 625.109471][ C1] Unknown status report in ack skb [ 625.110396][ T8] usb 1-1: Manufacturer: syz [ 625.120866][ T8] usb 1-1: SerialNumber: syz [ 625.149897][ T8] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 625.165598][ T8] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 625.181066][ T8] usbserial_generic 1-1:1.0: generic converter detected [ 625.203775][ T8] usb 1-1: generic converter now attached to ttyUSB0 [ 625.379812][ T5764] usb 1-1: USB disconnect, device number 6 [ 625.396861][ T5764] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 625.421843][ T5764] usbserial_generic 1-1:1.0: device disconnected [ 625.510237][ T5816] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 625.593189][ T5816] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 625.821500][T12681] syzkaller0: entered promiscuous mode [ 625.830896][T12681] syzkaller0: entered allmulticast mode [ 625.844450][T12683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2008'. [ 626.696936][T10014] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 626.968525][T10014] usb 1-1: Using ep0 maxpacket: 32 [ 627.061288][T10014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.182209][T10014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.250068][T10014] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 627.296959][T10014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.326560][T10014] usb 1-1: config 0 descriptor?? [ 627.354219][T10014] hub 1-1:0.0: USB hub found [ 627.454815][T12711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2017'. [ 627.566921][T10014] hub 1-1:0.0: 1 port detected [ 627.616113][T12713] syzkaller0: entered promiscuous mode [ 627.622087][T12713] syzkaller0: entered allmulticast mode [ 627.788392][T10014] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 627.875460][ T2135] usb 4-1: USB disconnect, device number 9 [ 627.889910][T10014] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 628.171629][T10014] usbhid 1-1:0.0: can't add hid device: -71 [ 628.273126][T10014] usbhid: probe of 1-1:0.0 failed with error -71 [ 628.509770][T10014] usb 1-1: USB disconnect, device number 7 [ 630.514365][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2028'. [ 630.682819][T12756] syzkaller0: entered promiscuous mode [ 630.688566][T12756] syzkaller0: entered allmulticast mode [ 630.766071][T10014] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 630.999108][T10014] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 631.734492][T10014] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 631.765938][T10014] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 631.775066][T10014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.783819][T10014] usb 4-1: Product: syz [ 631.788936][T10014] usb 4-1: Manufacturer: syz [ 631.793592][T10014] usb 4-1: SerialNumber: syz [ 631.804764][T10014] usb 4-1: config 0 descriptor?? [ 631.812837][T12750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 631.862268][T12750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.117083][T12750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.124450][T12750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.140671][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2040'. [ 632.172827][T12777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2042'. [ 632.208657][T12778] syzkaller0: entered promiscuous mode [ 632.214280][T12778] syzkaller0: entered allmulticast mode [ 632.596251][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.706630][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.828864][T12788] loop0: detected capacity change from 0 to 1756 [ 632.840521][T10014] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 632.994587][T12788] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 633.101923][T12788] UDF-fs: Scanning with blocksize 512 failed [ 633.291545][T12788] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 633.345247][T12788] UDF-fs: Scanning with blocksize 1024 failed [ 633.351736][T10014] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 633.386815][T10014] usb 4-1: USB disconnect, device number 10 [ 633.421950][T12788] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount. [ 633.590711][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2052'. [ 634.113866][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2061'. [ 634.182914][T12820] loop3: detected capacity change from 0 to 256 [ 634.197873][T12820] exfat: Unknown parameter '' [ 634.236578][ T9480] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 634.335995][T10014] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 634.556266][T10014] usb 1-1: Using ep0 maxpacket: 16 [ 634.578699][T10014] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 634.755114][T10014] usb 1-1: config 0 has no interface number 0 [ 634.782832][T10014] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 635.082500][T10014] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 635.438160][T10014] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 635.451878][T10014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.498903][T10014] usb 1-1: Product: syz [ 635.503162][T10014] usb 1-1: Manufacturer: syz [ 635.512566][T10014] usb 1-1: SerialNumber: syz [ 635.571275][T10014] usb 1-1: config 0 descriptor?? [ 635.597005][T12810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.616247][T12810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.877680][T12810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.885222][T12810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.208825][T10014] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 636.891341][T10014] asix: probe of 1-1:0.34 failed with error -61 [ 637.029810][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 638.028818][ T9431] usb 1-1: USB disconnect, device number 8 [ 638.305051][T12883] loop3: detected capacity change from 0 to 512 [ 639.233833][T12883] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2088: invalid indirect mapped block 256 (level 2) [ 639.266490][T12883] EXT4-fs (loop3): Remounting filesystem read-only [ 639.296400][T12883] EXT4-fs (loop3): 2 truncates cleaned up [ 639.338631][T12893] loop5: detected capacity change from 0 to 128 [ 639.346948][T12883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.377991][T12893] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 639.431804][T12893] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 639.477943][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.510902][T12893] ext2 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.648019][T12901] loop3: detected capacity change from 0 to 16 [ 639.666505][T12901] erofs: (device loop3): mounted with root inode @ nid 36. [ 639.711776][T12903] overlayfs: failed to clone upperpath [ 639.723298][T12901] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 639.787432][T12901] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 639.831816][ T8686] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 640.960750][T12920] loop5: detected capacity change from 0 to 1024 [ 640.986568][T12920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.806698][T12920] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 641.932947][T12920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.130931][ T34] ------------[ cut here ]------------ [ 642.137334][ T34] WARNING: CPU: 0 PID: 34 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.148427][ T34] Modules linked in: [ 642.152355][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 642.159916][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.170057][ T34] Workqueue: phy13 ieee80211_csa_finalize_work [ 642.176351][ T34] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.183720][ T34] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 642.203621][ T34] RSP: 0018:ffffc90000aaf9c0 EFLAGS: 00010293 [ 642.210270][ T34] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88801be75a00 [ 642.210794][ T2946] ------------[ cut here ]------------ [ 642.218791][ T34] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 642.224458][ T2946] WARNING: CPU: 1 PID: 2946 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.233404][ C0] ------------[ cut here ]------------ [ 642.233418][ C0] WARNING: CPU: 0 PID: 34 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 642.233545][ C0] Modules linked in: [ 642.233561][ C0] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 642.233581][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.233596][ C0] Workqueue: phy13 ieee80211_csa_finalize_work [ 642.233629][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 642.233661][ C0] Code: f7 4c 89 ef e8 b0 9f b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 6b ba 79 f7 0f 0b e9 61 f8 ff ff e8 5f ba 79 f7 <0f> 0b e9 85 fb ff ff e8 53 ba 79 f7 48 c7 c7 e0 cc 65 8e 4c 89 e6 [ 642.233680][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 642.233699][ C0] RAX: ffffffff8a0dc811 RBX: dffffc0000000000 RCX: ffff88801be75a00 [ 642.233715][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.233729][ C0] RBP: 0000000000000000 R08: ffff88801be75a00 R09: 0000000000000003 [ 642.233743][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807db32440 [ 642.233757][ C0] R13: ffff88801b734824 R14: ffff88807db32930 R15: ffff88801b734800 [ 642.233774][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 642.233790][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.233803][ C0] CR2: 000020000000d038 CR3: 0000000026cf1000 CR4: 00000000003526f0 [ 642.233821][ C0] Call Trace: [ 642.233861][ C0] [ 642.233897][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 642.234026][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 642.234065][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 642.234112][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 642.234190][ C0] __iterate_interfaces+0x225/0x4c0 [ 642.234218][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 642.245567][ T2946] Modules linked in: [ 642.250785][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 642.250816][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 642.250842][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 642.250871][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 642.260729][ T2946] [ 642.260742][ T2946] CPU: 1 PID: 2946 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 642.264659][ C0] ? hw_scan_work+0xf10/0xf10 [ 642.272167][ T2946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.282163][ C0] __hrtimer_run_queues+0x525/0xc10 [ 642.288849][ T2946] Workqueue: phy14 ieee80211_csa_finalize_work [ 642.294791][ C0] ? hrtimer_interrupt+0x980/0x980 [ 642.314803][ T2946] [ 642.320512][ C0] ? read_tsc+0x9/0x20 [ 642.328511][ T2946] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.336531][ C0] hrtimer_run_softirq+0x177/0x290 [ 642.336563][ C0] handle_softirqs+0x27d/0x820 [ 642.336594][ C0] ? read_tsc+0x9/0x20 [ 642.336614][ C0] ? ktime_get+0x24b/0x280 [ 642.336641][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 642.336665][ C0] ? do_softirq+0x1a0/0x1a0 [ 642.336691][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 642.336722][ C0] __irq_exit_rcu+0xd3/0x190 [ 642.336743][ C0] ? irq_exit_rcu+0x20/0x20 [ 642.336772][ C0] irq_exit_rcu+0x9/0x20 [ 642.336792][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 642.336896][ C0] [ 642.336904][ C0] [ 642.336943][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 642.337019][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 642.337048][ C0] Code: ed 01 00 00 e8 2e 7f 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 1f 7f 1b 00 eb 06 e8 18 7f 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 642.337066][ C0] RSP: 0018:ffffc90000aaf360 EFLAGS: 00000293 [ 642.337087][ C0] RAX: ffffffff816c0358 RBX: ffffc90000aaf4df RCX: ffff88801be75a00 [ 642.337104][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.337118][ C0] RBP: ffffc90000aaf4b0 R08: ffffffff911ef5c7 R09: 1ffffffff223deb8 [ 642.337135][ C0] R10: dffffc0000000000 R11: fffffbfff223deb9 R12: ffffffff8d8cdc20 [ 642.337151][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8cdc78 R15: dffffc0000000000 [ 642.337175][ C0] ? console_flush_all+0x878/0xcf0 [ 642.345258][ T2946] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 642.353323][ C0] ? console_flush_all+0x10b/0xcf0 [ 642.353364][ C0] ? is_console_locked+0x20/0x20 [ 642.353407][ C0] console_unlock+0xad/0x350 [ 642.353437][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 642.361449][ T2946] RSP: 0018:ffffc9000ba179c0 EFLAGS: 00010293 [ 642.370424][ C0] ? lock_chain_count+0x20/0x20 [ 642.370453][ C0] ? __irq_work_queue_local+0x13a/0x3b0 [ 642.377079][ T2946] [ 642.377088][ T2946] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88802bd0bc00 [ 642.385074][ C0] ? vprintk_emit+0x40d/0x610 [ 642.388656][ T2946] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 642.391247][ C0] ? vprintk_emit+0x30b/0x610 [ 642.396867][ T2946] RBP: dffffc0000000000 R08: ffff88802592962f R09: 1ffff11004b252c5 [ 642.402378][ C0] ? vprintk_emit+0x30b/0x610 [ 642.409425][ T2946] R10: dffffc0000000000 R11: ffffed1004b252c6 R12: 0000000000000001 [ 642.414769][ C0] vprintk_emit+0x497/0x610 [ 642.420087][ T2946] R13: ffff88802592a659 R14: ffff888031902d48 R15: ffff888026226400 [ 642.426278][ C0] ? vprintk_emit+0x30b/0x610 [ 642.430162][ T2946] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 642.437404][ C0] ? printk_sprint+0x460/0x460 [ 642.437432][ C0] ? _printk+0xde/0x130 [ 642.437488][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 642.437534][ C0] _printk+0xde/0x130 [ 642.437553][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 642.437587][ C0] ? load_image+0x420/0x420 [ 642.437619][ C0] __show_regs+0x159/0x600 [ 642.437658][ C0] ? dump_stack_print_info+0xf5/0x150 [ 642.437684][ C0] show_regs+0x44/0x90 [ 642.437727][ C0] __warn+0x160/0x470 [ 642.437754][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.437785][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.437815][ C0] report_bug+0x2be/0x4f0 [ 642.437847][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.437877][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.437907][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 642.437937][ C0] handle_bug+0xcf/0x120 [ 642.437963][ C0] exc_invalid_op+0x1a/0x50 [ 642.437988][ C0] asm_exc_invalid_op+0x1a/0x20 [ 642.438013][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.444247][ T2946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.451301][ C0] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 642.451321][ C0] RSP: 0018:ffffc90000aaf9c0 EFLAGS: 00010293 [ 642.451342][ C0] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88801be75a00 [ 642.451356][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 642.451367][ C0] RBP: dffffc0000000000 R08: ffff88807db3162f R09: 1ffff1100fb662c5 [ 642.451383][ C0] R10: dffffc0000000000 R11: ffffed100fb662c6 R12: 0000000000000001 [ 642.451398][ C0] R13: ffff88807db32659 R14: ffff88806a6cad48 R15: ffff88801aabd300 [ 642.451423][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 642.456638][ T2946] CR2: 00007fdbcd455d58 CR3: 000000007db9e000 CR4: 00000000003526e0 [ 642.459030][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 642.466736][ T2946] Call Trace: [ 642.471259][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 642.481347][ T2946] [ 642.481408][ T2946] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 642.486588][ C0] ? mutex_lock_nested+0x20/0x20 [ 642.492815][ T2946] ieee80211_csa_finalize+0x571/0xeb0 [ 642.497955][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 642.497984][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 642.500322][ T2946] ? mutex_lock_nested+0x20/0x20 [ 642.504389][ C0] ? read_lock_is_recursive+0x20/0x20 [ 642.511708][ T2946] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 642.516861][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 642.516894][ C0] ? process_scheduled_works+0x975/0x1600 [ 642.516924][ C0] process_scheduled_works+0xa60/0x1600 [ 642.521689][ T2946] ? ieee80211_csa_finalize_work+0x140/0x140 [ 642.525917][ C0] ? worker_attach_to_pool+0x370/0x370 [ 642.530322][ T2946] ? read_lock_is_recursive+0x20/0x20 [ 642.535088][ C0] ? assign_work+0x3cc/0x5d0 [ 642.541124][ T2946] ieee80211_csa_finalize_work+0xf6/0x140 [ 642.544816][ C0] worker_thread+0xa5e/0xfe0 [ 642.549669][ T2946] ? process_scheduled_works+0x975/0x1600 [ 642.554018][ C0] kthread+0x2fa/0x390 [ 642.558339][ T2946] process_scheduled_works+0xa60/0x1600 [ 642.563841][ C0] ? pr_cont_work+0x550/0x550 [ 642.566888][ T2946] ? worker_attach_to_pool+0x370/0x370 [ 642.569772][ C0] ? kthread_blkcg+0xd0/0xd0 [ 642.576019][ T2946] ? assign_work+0x3cc/0x5d0 [ 642.581519][ C0] ret_from_fork+0x48/0x80 [ 642.601279][ T2946] worker_thread+0xa5e/0xfe0 [ 642.607262][ C0] ? kthread_blkcg+0xd0/0xd0 [ 642.615318][ T2946] kthread+0x2fa/0x390 [ 642.623240][ C0] ret_from_fork_asm+0x11/0x20 [ 642.623313][ C0] [ 642.623327][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 642.623386][ C0] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 642.623452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.623506][ C0] Workqueue: phy13 ieee80211_csa_finalize_work [ 642.623594][ C0] Call Trace: [ 642.623614][ C0] [ 642.623640][ C0] dump_stack_lvl+0x18c/0x250 [ 642.623707][ C0] ? show_regs_print_info+0x20/0x20 [ 642.623763][ C0] ? load_image+0x420/0x420 [ 642.623837][ C0] panic+0x2ca/0x720 [ 642.623921][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 642.624017][ C0] ? ret_from_fork_asm+0x11/0x20 [ 642.624103][ C0] __warn+0x2e0/0x470 [ 642.624169][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.624246][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.624306][ C0] report_bug+0x2be/0x4f0 [ 642.624364][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.624441][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.624546][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 642.624630][ C0] handle_bug+0xcf/0x120 [ 642.624702][ C0] exc_invalid_op+0x1a/0x50 [ 642.624766][ C0] asm_exc_invalid_op+0x1a/0x20 [ 642.624849][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 642.624952][ C0] Code: f7 4c 89 ef e8 b0 9f b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 6b ba 79 f7 0f 0b e9 61 f8 ff ff e8 5f ba 79 f7 <0f> 0b e9 85 fb ff ff e8 53 ba 79 f7 48 c7 c7 e0 cc 65 8e 4c 89 e6 [ 642.625003][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 642.625058][ C0] RAX: ffffffff8a0dc811 RBX: dffffc0000000000 RCX: ffff88801be75a00 [ 642.625099][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.625139][ C0] RBP: 0000000000000000 R08: ffff88801be75a00 R09: 0000000000000003 [ 642.625172][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807db32440 [ 642.625204][ C0] R13: ffff88801b734824 R14: ffff88807db32930 R15: ffff88801b734800 [ 642.625267][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.625369][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 642.625449][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 642.625545][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 642.625646][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 642.625775][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 642.625860][ C0] __iterate_interfaces+0x225/0x4c0 [ 642.625916][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 642.625973][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 642.626039][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 642.626098][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 642.626171][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 642.626244][ C0] ? hw_scan_work+0xf10/0xf10 [ 642.626307][ C0] __hrtimer_run_queues+0x525/0xc10 [ 642.626403][ C0] ? hrtimer_interrupt+0x980/0x980 [ 642.626457][ C0] ? read_tsc+0x9/0x20 [ 642.626528][ C0] hrtimer_run_softirq+0x177/0x290 [ 642.626593][ C0] handle_softirqs+0x27d/0x820 [ 642.626642][ C0] ? read_tsc+0x9/0x20 [ 642.626689][ C0] ? ktime_get+0x24b/0x280 [ 642.626752][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 642.626812][ C0] ? do_softirq+0x1a0/0x1a0 [ 642.626878][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 642.626948][ C0] __irq_exit_rcu+0xd3/0x190 [ 642.627000][ C0] ? irq_exit_rcu+0x20/0x20 [ 642.627081][ C0] irq_exit_rcu+0x9/0x20 [ 642.627121][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 642.627188][ C0] [ 642.627200][ C0] [ 642.627226][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 642.627282][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 642.627339][ C0] Code: ed 01 00 00 e8 2e 7f 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 1f 7f 1b 00 eb 06 e8 18 7f 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 642.627385][ C0] RSP: 0018:ffffc90000aaf360 EFLAGS: 00000293 [ 642.627417][ C0] RAX: ffffffff816c0358 RBX: ffffc90000aaf4df RCX: ffff88801be75a00 [ 642.627455][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.627491][ C0] RBP: ffffc90000aaf4b0 R08: ffffffff911ef5c7 R09: 1ffffffff223deb8 [ 642.627522][ C0] R10: dffffc0000000000 R11: fffffbfff223deb9 R12: ffffffff8d8cdc20 [ 642.627559][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8cdc78 R15: dffffc0000000000 [ 642.627632][ C0] ? console_flush_all+0x878/0xcf0 [ 642.627728][ C0] ? console_flush_all+0x10b/0xcf0 [ 642.627828][ C0] ? is_console_locked+0x20/0x20 [ 642.627923][ C0] console_unlock+0xad/0x350 [ 642.627987][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 642.628062][ C0] ? lock_chain_count+0x20/0x20 [ 642.628110][ C0] ? __irq_work_queue_local+0x13a/0x3b0 [ 642.628174][ C0] ? vprintk_emit+0x40d/0x610 [ 642.628228][ C0] ? vprintk_emit+0x30b/0x610 [ 642.628283][ C0] ? vprintk_emit+0x30b/0x610 [ 642.628342][ C0] vprintk_emit+0x497/0x610 [ 642.628397][ C0] ? vprintk_emit+0x30b/0x610 [ 642.628462][ C0] ? printk_sprint+0x460/0x460 [ 642.628518][ C0] ? _printk+0xde/0x130 [ 642.628561][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 642.628653][ C0] _printk+0xde/0x130 [ 642.628699][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 642.628780][ C0] ? load_image+0x420/0x420 [ 642.628849][ C0] __show_regs+0x159/0x600 [ 642.628917][ C0] ? dump_stack_print_info+0xf5/0x150 [ 642.628998][ C0] show_regs+0x44/0x90 [ 642.629081][ C0] __warn+0x160/0x470 [ 642.629138][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.629207][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.629283][ C0] report_bug+0x2be/0x4f0 [ 642.629340][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.629432][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.629502][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 642.629584][ C0] handle_bug+0xcf/0x120 [ 642.629642][ C0] exc_invalid_op+0x1a/0x50 [ 642.629700][ C0] asm_exc_invalid_op+0x1a/0x20 [ 642.629754][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 642.629822][ C0] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 642.629861][ C0] RSP: 0018:ffffc90000aaf9c0 EFLAGS: 00010293 [ 642.629899][ C0] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff88801be75a00 [ 642.629935][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 642.629956][ C0] RBP: dffffc0000000000 R08: ffff88807db3162f R09: 1ffff1100fb662c5 [ 642.629992][ C0] R10: dffffc0000000000 R11: ffffed100fb662c6 R12: 0000000000000001 [ 642.630028][ C0] R13: ffff88807db32659 R14: ffff88806a6cad48 R15: ffff88801aabd300 [ 642.630072][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 642.630192][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 642.630275][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 642.630348][ C0] ? mutex_lock_nested+0x20/0x20 [ 642.630434][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 642.630485][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 642.630546][ C0] ? read_lock_is_recursive+0x20/0x20 [ 642.630616][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 642.630685][ C0] ? process_scheduled_works+0x975/0x1600 [ 642.630740][ C0] process_scheduled_works+0xa60/0x1600 [ 642.630852][ C0] ? worker_attach_to_pool+0x370/0x370 [ 642.630927][ C0] ? assign_work+0x3cc/0x5d0 [ 642.630992][ C0] worker_thread+0xa5e/0xfe0 [ 642.631120][ C0] kthread+0x2fa/0x390 [ 642.631164][ C0] ? pr_cont_work+0x550/0x550 [ 642.631221][ C0] ? kthread_blkcg+0xd0/0xd0 [ 642.631269][ C0] ret_from_fork+0x48/0x80 [ 642.631307][ C0] ? kthread_blkcg+0xd0/0xd0 [ 642.631325][ C0] ret_from_fork_asm+0x11/0x20 [ 642.631334][ T2946] ? pr_cont_work+0x550/0x550 [ 642.631381][ T2946] ? kthread_blkcg+0xd0/0xd0 [ 642.631462][ T2946] ret_from_fork+0x48/0x80 [ 642.631513][ T2946] ? kthread_blkcg+0xd0/0xd0 [ 642.631582][ T2946] ret_from_fork_asm+0x11/0x20 [ 642.631671][ T2946] [ 642.631705][ T2946] irq event stamp: 7777499 [ 642.631711][ T2946] hardirqs last enabled at (7777501): [] vprintk_store+0x9fb/0xd50 [ 642.631774][ T2946] hardirqs last disabled at (7777502): [] vprintk_store+0x194/0xd50 [ 642.631848][ T2946] softirqs last enabled at (7777480): [] __irq_exit_rcu+0xd3/0x190 [ 642.631914][ T2946] softirqs last disabled at (7777421): [] __irq_exit_rcu+0xd3/0x190 [ 642.631974][ T2946] ---[ end trace 0000000000000000 ]--- [ 643.965446][ C0] [ 643.969078][ C0] Kernel Offset: disabled [ 643.973466][ C0] Rebooting in 86400 seconds..